Network Engineer - Cloud Operations **US Remote**

Join us in pioneering breakthroughs in healthcare. For everyone. Everywhere. Sustainably.

Our inspiring and caring environment forms a global community that celebrates diversity and individuality. We encourage you to step beyond your comfort zone, offering resources and flexibility to foster your professional and personal growth, all while valuing your unique contributions.

Varian is seeking a Network Engineer position in support of our Managed Services global business. Our goal is to provide good operational practices and support for the operations, maintenance, and refinement of Varian’s public and private Cloud environments and services. Providing support for new and legacy applications and services hosted in the cloud, and continuous improvement of Varian’s Cloud infrastructure. The candidate will support Varian’s cloud operations to enhance, optimize, and maintain computing capabilities across our entire global cloud solution. Including collaboration with Service, Operations, Product Management and Security. The Network Engineer must have expertise with Cloud Service Providers (CSPs) & Microsoft Azure. Additional responsibilities for delivering support to the infrastructure and deployment of Varian’s applications as a Managed Service, and provide input in developing and maintaining policies, procedures, and standards. The position will receive direction from the Manager of Global Cloud Operations.

You are responsible for:

• Providing network operations and support for Varian’s FullScale Infinity Cloud (FSIC) solutions. Private, public and hybrid infrastructure, network and security.
• Leading network onboarding for FSIC designed product adhering to FSIC configuration standards.
• Maintaining a strong knowledge of Varian’s suite of applications.
• Configuring various cloud solutions including monitoring, application access, security, Citrix NetScaler, Citrix ADC, Palo Alto Networks, etc.
• Configuring and supporting backbone connections over ExpressRoute (Azure), and direct connection and VPN architecture.
• Maintaining allocation of IP CIDR block, perform maintenance involving modification of network, subnets, vlans, routes etc.
• Verifying and action on events aggregated from network monitoring tools and Web Application Firewall using Varian approved tools.
• Troubleshooting and determining root cause of issues.
• Collaborating to quickly resolve any network related outages and resolve customer impacting issues quickly.
• Contributing to the successful execution of projects.
• Creating, updating, and completing documentation.
• Investigate root cause analysis of incidents with follow up reporting and final content generation.
• Collaborating with network engineers on procedures, techniques, tips & knowledge to improve operations, security and work performed.
• Providing the highest level of customer service.
• Advance understanding of vendor and telco/exchange/service providers support escalation paths and being able to escalate support requests to these vendors in a typically urgent and timely fashion.
• Appling network system updates, patches, configuration changes.
• Planning network layouts and configures systems to user environments.
• Serving as a technical mentor to colleagues as necessary.

• Staying up to date with assigned Learning Management System courses.

• Eagerness to provide the highest level of customer service.

• On call support as required.

• Working schedule North American business hours.

Minimum Qualifications:

• A Bachelor’s or preferably Master’s Degree in computer science is required plus three years’ minimum relevant experience.
• Varian FSIC, TPASS and CloudPlanner infrastructure product knowledge.

• Strong knowledge of Varian’s suite of applications.

• Extensive experience supporting and managing networks in enterprise public, private, and hybrid cloud environments, preferably supporting large multi-subscription Microsoft Azure estates.

• Advanced hands-on experience with Microsoft Azure networking, including VNets, subnets, VNet peering, user-defined routes (UDRs), network security groups (NSGs), network interfaces, NAT, DNS, and cross-subscription connectivity.

• Strong knowledge of TCP/IP, UDP, ICMP, ARP, addressing, subnetting, CIDR, DNS, LDAP/LDAPS, Kerberos, RPC, routing, and return-path validation.

• Strong routing and switching expertise, including BGP, OSPF, EIGRP, MPLS, VLANs, STP, Layer 2/3 concepts, route propagation, path selection, redundancy, convergence, and failover.

• Hands-on experience designing, configuring, and troubleshooting Azure ExpressRoute connectivity, including BGP advertisements, learned routes, provider handoffs, scheduled maintenance, and customer/provider route exchange.

• Hands-on experience designing and troubleshooting site-to-site IPsec VPNs, including IKE/IPsec, tunnel interfaces, proxy IDs, BGP or static routing, and hybrid connectivity patterns.

• Advanced hands-on experience with Palo Alto Networks firewalls, including security policies, NAT and dynamic IP and port NAT, zones, interfaces, virtual routers, routing, VPN, URL filtering, logging, application connectivity, licensing, device certificates, and PAN-OS lifecycle management.

• Experience using centralized next-hop routing through virtual firewalls to inspect ingress, egress, inter-VNet, and cross-subscription traffic.

• Hands-on experience with Citrix NetScaler/ADC, including Gateway and load-balancing virtual servers, services and service groups, monitors, persistence, LDAP authentication, session, rewrite and responder policies, SSL profiles, certificates, and backend connectivity.

• Experience validating end-to-end application delivery across client access, Citrix Gateway/ADC, firewalls, StoreFront or application services, and backend systems.

• Strong network security knowledge, including firewall policy, IDS/IPS concepts, ACLs, PKI, SSL/TLS, certificate chains, cipher and protocol compatibility, URL filtering, vulnerability remediation, and security hardening.

• Advanced network performance and root-cause analysis skills using packet captures and diagnostic tools such as Wireshark, firewall captures, tcpdump, iperf, or SolarWinds; ability to analyze retransmissions, duplicate ACKs, zero-window conditions, resets, packet loss, MTU/MSS, TLS negotiation, session aging, and application-response delays.

• Experience troubleshooting business-critical and highly available applications, including cloud platform services, application integrations, SMB/application performance, syslog, telemetry, and monitoring paths.

• Experience supporting network monitoring, observability, and SIEM integrations, including troubleshooting logging loops, missing telemetry, and connectivity to platforms such as Microsoft Sentinel.

• Experience implementing and troubleshooting Active Directory integrations and one-way domain trusts, including DNS, LDAP/LDAPS, Kerberos, RPC, domain-controller reachability, routing, and firewall requirements.

• Experience working directly with customer IT teams, telecommunications carriers, exchange/service providers, and technology vendors to review requirements, coordinate changes, and resolve urgent connectivity issues.

• Ability to develop customer-specific connectivity and ACL documentation covering source and destination networks, ports, protocols, NAT, routing, certificates, identity, and application use cases.

• Experience creating and maintaining cloud and network architecture documentation, Microsoft Visio or Lucidchart diagrams, as-built documents, operating procedures, implementation notes, configuration templates, troubleshooting guides, upgrade-validation procedures, and change-validation or rollback steps.

• Experience reviewing vulnerability findings, assessing operational impact, defining remediation and rollout plans, and validating network software upgrades, patches, content updates, configuration changes, and policy updates.

• Strong incident, problem, and change management experience, including ticket handling, root-cause analysis, follow-up reporting, production troubleshooting, and customer-impacting outage resolution.

• Clear written and verbal communication skills, with the ability to explain technical concepts to customer, business, security, product, service, operations, and implementation stakeholders.

• Demonstrated ability to serve as a senior technical escalation resource, mentor colleagues, define technical approaches for complex changes, and provide implementation guidance across teams.

• Ability to provide on-call support as required and work North American business hours.

Desired Experience

• Varian FSIC, TPASS and CloudPlanner onboarding and infrastructure support knowledge.

• Strong knowledge of Varian’s support and engineering processes.

• Knowledge of the networking components of Varian applications, including ARIA and Eclipse.

• Azure Network Engineer Associate certification.

• Azure Administrator Associate certification.

• Palo Alto Networks certification or equivalent advanced PAN-OS experience.

• Citrix NetScaler/ADC and Citrix ADM/Insights experience, including repeatable deployment or job templates and upgrade validation.

• Experience with Equinix, Megaport, Lumen, CenturyLink, Cox, Level 3, AT&T, or similar telecommunications and exchange providers.

• Experience designing non-standard hybrid network solutions, including BGP-enabled VPN overlays over ExpressRoute and constrained-address NAT designs.

• Experience with Microsoft Azure Service Bus, Azure App Service, and application connectivity across subscriptions.

• Experience with Microsoft Sentinel, Qualys, SIEM, syslog, and security-tool integrations.

• Experience supporting certificate lifecycle activities with enterprise certificate authorities such as DigiCert.

• Experience with Citrix XenApp, StoreFront, Virtual Delivery Agents, Remote Desktop Protocol, and associated application-delivery dependencies.

• Knowledge of DICOM and HL7 standards and healthcare application connectivity.

• Advanced Active Directory, Windows Server, Hyper-V, VMware/vSphere, and systems-management concepts.

• Advanced Azure IaaS administration and automation or scripting using PowerShell, JSON, ARM templates, APIs, or Python.

• ITIL certification.

Who we are: We are a team of more than 72,000 highly dedicated Healthineers in more than 70 countries. As a leader in medical technology, we constantly push the boundaries to create better outcomes and experiences for patients, no matter where they live or what health issues they are facing. Our portfolio is crucial for clinical decision-making and treatment pathways.

How we work: When you join Siemens Healthineers, you become one in a global team of scientists, clinicians, developers, researchers, professionals, and skilled specialists, who believe in each individual’s potential to contribute with diverse ideas. We are from different backgrounds, cultures, religions, political and/or sexual orientations, and work together, to fight the world’s most threatening diseases and enable access to care, united by one purpose: to pioneer breakthroughs in healthcare. For everyone. Everywhere. Sustainably.

To find out more about Siemens Healthineers businesses, please visit our company page here.

The base pay range for this position is:

$93,590 - $128,689

Factors which may affect starting pay within this range may include geography/market, skills, education, experience, and other qualifications of the successful candidate.

If this is a commission eligible position the commission eligibility will be in accordance with the terms of the Company's plan. Commissions are based on individual performance and/or company performance.

The Company offers the following benefits for this position, subject to applicable eligibility requirements: medical insurance, dental insurance, vision insurance, 401(k) retirement plan. life insurance, long-term and short-term disability insurance, paid parking/public transportation, paid time off, paid sick and safe time.

Equal Employment Opportunity Statement: Siemens Healthineers is an Equal Opportunity and Affirmative Action Employer encouraging diversity in the workplace. All qualified applicants will receive consideration for employment without regard to their race, color, creed, religion, national origin, citizenship status, ancestry, sex, age, physical or mental disability unrelated to ability, marital status, family responsibilities, pregnancy, genetic information, sexual orientation, gender expression, gender identity, transgender, sex stereotyping, order of protection status, protected veteran or military status, or an unfavorable discharge from military service, and other categories protected by federal, state or local law.

EEO is the Law: Applicants and employees are protected under Federal law from discrimination. To learn more, click here.

Reasonable Accommodations: Siemens Healthineers is committed to equal employment opportunity. As part of this commitment, we will ensure that persons with disabilities are provided reasonable accommodations.

If you require a reasonable accommodation in completing a job application, interviewing, completing any pre-employment testing, or otherwise participating in the employee selection process, please fill out the accommodations form here. If you’re unable to complete the form, you can reach out to our HR People Connect People Contact Center for support at [email protected]. Please note HR People Connect People Contact Center will not have visibility of your application or interview status.

California Privacy Notice: California residents have the right to receive additional notices about their personal information. To learn more, click here.

Export Control: “A successful candidate must be able to work with controlled technology in accordance with US export control law.” “It is Siemens Healthineers’ policy to comply fully and completely with all United States export control laws and regulations, including those implemented by the Department of Commerce through the Export Administration Regulations (EAR), by the Department of State through the International Traffic in Arms Regulations (ITAR), and by the Treasury Department through the Office of Foreign Assets Control (OFAC) sanctions regulations.”

Data Privacy: We care about your data privacy and take compliance with GDPR as well as other data protection legislation seriously. For this reason, we ask you not to send us your CV or resume by email. We ask instead that you create a profile in our talent community where you can upload your CV. Setting up a profile lets us know you are interested in career opportunities with us and makes it easy for us to send you an alert when relevant positions become open. Register here to get started.

Beware of Job Scams: Please beware of potentially fraudulent job postings or suspicious recruiting activity by persons that are currently posing as Siemens Healthineers recruiters/employees. These scammers may attempt to collect your confidential personal or financial information. If you are concerned that an offer of employment with Siemens Healthineers might be a scam or that the recruiter is not legitimate, please verify by searching for the posting on the Siemens Healthineers career site.

To all recruitment agencies: Siemens Healthineers does not accept agency resumes. Please do not forward resumes to our jobs alias, employees, or any other company location. Siemens Healthineers is not responsible for any fees related to unsolicited resumes.