Network Security Engineer Lead

Network Security Engineer Lead

Machinify builds the AI operating system for healthcare payment intelligence, combining the minds of industry experts with the power of technology. US healthcare wastes billions of dollars a year inside the claims payment workflow, and Machinify has built a platform to fix that, backed by more than 40 years of payment integrity expertise and a product suite spanning the full claims lifecycle from pre-pay through post-pay. Today, 85+ customers rely on us, including 18 of the top 20 US health plans, covering more than 270 million member lives across commercial, Medicare, and Medicaid. We process over 3 petabytes of claims data and return more than $6 billion in savings and recoveries to our customers every year, with 99% customer retention.

We're now opening a new hub in Bengaluru that isn't a satellite office or a support function: it's a genuine extension of one global Machinify, where local leaders run real teams and own real product and outcomes. The problems our teams solve are hard by design, which is exactly why they haven't been solved before, and why the work is worth doing. Joining now means building Machinify's India presence- its people, culture, and way of working- from the ground up, with real influence over what gets built and how.

We are seeking a Network Security Engineer Lead to join our IT team. In this role, you will provide technical leadership and direction across teams and apply advanced design principles and methodologies across on-premises and multi-cloud (AWS and Azure) environments to ensure efficient and effective use of network resources while maintaining the integrity and security of our network infrastructure. You'll partner closely with Machinify's Security team, implementing and operating the network security controls that support their policies.

• Serve as a key stakeholder for the Bengaluru hub's network and security environment, taking ownership of day-to-day operations and support.
• Provide technical leadership and direction, and mentor engineers and technical staff across multiple teams, including guidance on resolving complex network and security issues.
• Work closely with US-based network engineering team members as one global team, collaborating on architecture, projects, change management, and incident response, and ensuring clean handoffs across time zones.
• Drive continuous improvement of network and security designs, standards, and practices in collaboration with US-based peers and in alignment with Machinify standards.
• Design, build, and operate network and security infrastructure across AWS and Azure, managing it as code with Terraform.
• Support traditional data center networks and the hybrid connectivity (site-to-site VPN, dedicated circuits) that links them to AWS and Azure.
• Partner closely with the Machinify Security team to analyze security risks, implement and operate network security controls in line with Security policies and requirements, and propose mitigation strategies and improvement projects.
• Interface with multiple tiers of internal and external customers, from end users and engineering teams to leadership and external technical contacts, translating requirements and clearly communicating status and impact.
• Support and maintain enterprise VPN and remote-access solutions such as Palo Alto GlobalProtect or Zscaler.
• Administer and support CASB and secure web gateway (web filtering) platforms such as Netskope, including policy implementation, client deployment, and troubleshooting.
• Analyze and maintain network capacity and performance requirements, monitoring systems for availability and performance.
• Leverage AI tools to drive efficiency: automating routine work, accelerating troubleshooting and problem solving, and improving documentation.
• Identify, test, and implement patches and upgrades for network and security appliances.
• Provide occasional after-hours support for critical network issues.

• Bachelor's degree in computer science, Business, Engineering, Mathematics, or related field, or equivalent practical experience.
• 7+ years of experience in network engineering, including 2+ years in a lead or senior capacity.
• Demonstrated experience providing technical leadership and direction, and mentoring engineers across teams.
• Strong hands-on experience designing, configuring, and troubleshooting Amazon AWS and Microsoft Azure network technologies and hybrid connectivity to traditional data centers (e.g., VPCs/VNets, Transit Gateway, site-to-site VPN, Direct Connect/ExpressRoute, cloud routing, security groups/NSGs, private connectivity).
• Proven experience managing cloud and network infrastructure as code with Terraform, including version control and peer-reviewed change workflows (e.g., Git, pull requests, CI/CD).
• Proven experience in designing redundant and self-healing network solutions.
• Expert understanding and practical knowledge of TCP/IP, access-control lists, VLANs, VPNs, firewalls, and dynamic routing protocols (e.g., BGP, OSPF, EIGRP).
• Advanced competency in routing, switching, firewall, and VPN technologies on Cisco, Arista, and PaloAlto equipment. Cisco Certified Network Professional (CCNP) in routing and switching preferred.
• Experience in configuring and troubleshooting Firewalls, VPN Concentrators, and Security appliances.
• Experience supporting CASB and secure web gateway / web filtering solutions such as Netskope.
• Experience supporting enterprise VPN solutions such as Palo Alto GlobalProtect or Zscaler.
• Practical experience using AI tools to improve efficiency, automate tasks, and solve problems.
• Working knowledge of Microsoft Technologies: Active Directory, Server Operating Systems, and Server Virtualization technologies.
• Familiarity with HIPAA privacy/security standards and general security audit expectations.
• A track record of spotting problems or gaps without being asked, and driving the fix from proposal through implementation.
• Owns outcomes end-to-end: you follow through on commitments, keep stakeholders informed, and manage multiple priorities across time zones.
• Comfortable working with ambiguity: you can take a loosely defined problem, set the scope, and deliver without step-by-step direction.
• Meticulous about change: you plan rollbacks, validate results after changes, and document what you did so others can follow.
• Clear, precise written and verbal communication, including technical documentation and change plans others can execute.
• Customer-focused, with experience interfacing with multiple tiers of internal and external customers and a passion for delivering effective solutions that enhance business operations.

Machinify is committed to providing equal employment opportunities and fostering an inclusive workplace. Employment decisions are based on business needs, job requirements, and individual qualifications, without discrimination on any status protected under applicable law. If you require a reasonable accommodation to complete any part of the application or recruitment process, please let our recruiting team know.