Non-Clinical - Information Technology - Engineer

Top

• Cisco ISE / TrustSec policy design and enforcement (SGTs, SGACLs, SXP) Cisco Secure Workload (CSW) segmentation and dependency validation ORDR discovery and tagging for asset classification and telemetry accuracy Remote. 520 hours Contract-to-Hire Cybersecurity Endpoint Protection Engineer Required Qualifications
• 7+ years of overall Information Technology or Cybersecurity experience in large, complex enterprise environments.
• At least 5 years of experience supporting healthcare cybersecurity, medical device security, IoT security, operational technology, or clinical technology environments.
• Experience designing, engineering, implementing, and maintaining cybersecurity infrastructure and security controls.
• Experience securing connected medical devices, IoMT, IoT assets, clinical systems, and unmanaged or non-traditional endpoint technologies.
• Experience using asset discovery, device classification, vulnerability management, and risk identification platforms to improve visibility and reduce cybersecurity risk.
• Hands-on experience with medical device or IoT security platforms such as Ordr.
• Experience working with clinical asset management, CMMS, or medical device lifecycle platforms such as Nuvolo.
• Experience supporting vulnerability identification, risk prioritization, remediation tracking, and compensating control development.
• Proven ability to troubleshoot and resolve complex security, infrastructure, device visibility, and integration issues.
• Experience developing standardized technical documentation, security procedures and operational workflows.
• Experience participating in cybersecurity projects, including planning, gathering stakeholder input, documenting requirements, and projecting resource needs.
• Ability to ensure the stability, integrity, and efficient operation of cybersecurity systems supporting enterprise, clinical, and patient-care environments. Experience and Thought Process Focus
• Strong systems-thinking mindset with the ability to understand how medical devices, IoT assets, clinical workflows, infrastructure, security controls, and business needs connect to support patient-first care.
• Analytical approach to diagnosing issues, identifying root causes, assessing risk, and recommending practical security solutions.
• Ability to align cybersecurity solutions with operational goals, patient-care priorities, technology capabilities, staffing realities, and regulatory expectations.
• Experience collaborating with Clinical Engineering, Facilities, Network, Infrastructure, Security Operations, Risk Management, and other IT/cyber teams.
• Ability to evaluate cybersecurity risk across the full medical device lifecycle, including procurement, deployment, maintenance, vulnerability remediation, exception management, and retirement.
• Ability to make sound decisions in high-pressure or time-sensitive environments, especially where clinical operations or patient-care systems may be impacted.
• Independent work style with strong ownership, accountability, and follow-through.
• Strong judgment in balancing cybersecurity requirements with operational needs within a large healthcare organization. Knowledge and Professional Strengths
• Advanced understanding of medical device cybersecurity, IoT security, IoMT, and connected clinical technology environments.
• Strong understanding of cybersecurity risk management principles for unmanaged, legacy, embedded, and vendor-supported devices.
• Practical knowledge of asset discovery, device profiling, network behavior analysis, vulnerability identification, and risk scoring.
• Experience using an asset discovery system such as Ordr for device discovery, classification, risk visibility, segmentation support, reporting, and medical device security insights.
• Experience using a CMMS database system such as Nuvolo for medical device inventory, lifecycle management.
• Strong understanding of network segmentation concepts and how they apply to clinical, IoT, and medical device environments.
• Knowledge of endpoint protection, EDR/XDR, vulnerability management, SIEM, identity security, and secure remote access technologies.
• Understanding of clinical engineering and facilities operations, workflows, and healthcare technology management processes.
• Strong understanding of complex domain structures, authentication methods, network topology, and system interaction models.
• Ability to translate technical risk into operational, business, and patient-care impact.
• Strong analytical, administrative, presentation, documentation, and project management skills.
• Strong written and verbal communication skills with the ability to engage both technical and non-technical stakeholders.

• Experience with Ordr or similar device asset management system.
• Experience with Nuvolo for clinical asset management, CMMS, medical device lifecycle workflows.
• Experience with medical device cybersecurity programs in a large healthcare environment.
• Experience supporting Clinical Engineering, Facilities, Healthcare Technology Management, or hospital operations teams.
• Experience with ServiceNow.
• Experience with CrowdStrike Falcon, Microsoft Defender, Cisco Secure Access, or similar enterprise security platforms.
• Experience supporting network segmentation, NAC, or clinical network security initiatives.
• Experience with vendor risk reviews, third-party medical device security assessments, and compensating control development.
• Understanding of NIST frameworks and healthcare-specific regulations and guidance, including HIPAA, HITRUST, HICP, NIST CSF, NIST 800-53, NIST 800-82, and FDA medical device cybersecurity guidance. Education
• Bachelor's degree in Cybersecurity, Information Technology, Computer Science, Information Systems, Engineering, Biomedical Engineering, Healthcare Technology Management, or a related technical discipline.
• Equivalent combination of education, professional certifications, and relevant experience may be considered in lieu of a degree.