Network Engineer for Omada Networks

Omada network audit & optimization — 3 medical clinics (HIPAA) OVERVIEW Medical practice with 3 clinics (2 in Idaho, 1 in Washington). Each site runs a full Omada stack (router, switch, APs) managed under one cloud-based controller with separate sites per location. Networks were self-configured and need expert review, optimization, and HIPAA compliance validation. Work is primarily remote via controller access; 3-12 devices per site; VLANs already in place. NETWORK OPTIMIZATION • VoIP QoS — two platforms in use (Nextiva in ID, Weave in WA). Prioritize voice traffic, review SIP session timeouts to prevent calls dropping during extended hold times. Plan to switch platform in June/July to get all offices on one. • Physician laptop priority — elevated wireless QoS for doctors running a Chrome-based practice management system and AI scribe tool simultaneously during patient visits. • Wireless-to-wired printing — wireless laptops cannot reliably reach ethernet-connected printers. Configure Omada multicast/isolation settings to resolve at all three sites. HIPAA COMPLIANCE REQUIREMENTS Candidate must sign a BAA before controller access is granted. Healthcare network experience required. • Legal/administrative: Sign BAA; deliver written documentation of all changes for compliance records; identify any gaps from HIPAA Security Rule minimum requirements. • Technical safeguards: Verify PHI devices are on isolated VLANs; confirm WPA2-Enterprise or WPA3 on clinical SSIDs; harden firewall rules; ensure guest network has no path to PHI systems; disable unused ports and services; confirm MFA on controller admin accounts. • Monitoring & audit logging: Enable syslog on all routers and switches; confirm logs capture sufficient access-event detail; recommend a retention process meeting HIPAA's 6-year requirement. • Maintenance: Review and apply firmware updates; provide recommended cadence for ongoing patching and credential rotation; deliver audit-ready network documentation. • Incident response: Assess breach-detection visibility; provide a basic network-layer IR checklist; recommend segmentation to limit breach propagation. ENVIRONMENT Cloud-based controller • 3 sites, 1 login • VLANs configured Kennewick, WA - Omada stack includes; - Router (ER706W v1.0) - Switches (TL-SG3452P v3.0, SG2218P v2.0, ES205G v1.0 (x2), ES205GP v1.0, other various unmanaged switches) - APs (EAP225 v4.0 (x3), EAP787 v1.0) Coeur d'Alene, ID - Router (ER706W v1.0) - Switch (SG2218P v2.0) Sandpoint, ID - Router (ER706W v1.0) - Switch (SG3210X-M2 v1.0) IDEAL CANDIDATE Omada certified or proven Omada experience required. Prior HIPAA-regulated network work required. Must be willing to sign a BAA. In your proposal, briefly describe how you would approach the SIP timeout issue and the wireless printing problem — this is our litmus test for hands-on Omada familiarity.