NETWORK ARCHITECT-ENT

UAB Medicine; University (FL); Hybrid; USD 109,250 - 177,530; Full time

Job summary

UAB Medicine is looking for a Network Architect-ENT in Florida who will manage high-level network planning and design. Responsibilities include developing strategies for network systems solutions and ensuring security compliance within regulated environments. The ideal candidate should have an Associate's degree and at least ten years of relevant experience in enterprise network engineering. The role offers a competitive salary ranging from $109,250 to $177,530, with a hybrid work arrangement.

Qualifications

• Ten years of related experience may substitute for education requirement.
• Five or more years in network architecture roles.
• Experience with security-sensitive network environments.

Responsibilities

• Design secure network architectures for regulated workloads.
• Implement enterprise firewalls and control access paths.
• Maintain network diagrams and documentation.

Skills

Network architecture

Enterprise network engineering

Cloud-based networking

Firewalls and WAF

VPN technology

Education

Associate's degree in Information Systems

Tools

Palo Alto

Fortinet

Cisco

Microsoft Azure Government

AWS GovCloud

Job description

Network Architect-ENT (T235875)

The University of Alabama at Birmingham (UAB) seeks a Network Architect-ENT to manage high-level network planning, design, and optimization. The position will develop strategies and direction for network systems solutions using current and emerging technologies, translate business requirements into network or process designs, plan and recommend hardware and software, configure and maintain routers, switches, hubs for wired, wireless, and VOIP, evaluate and recommend new products, monitor network performance, ensure capacity planning, and troubleshoot. The role will foster security by following IT Security Policies and participating in annual training on HIPAA and FERPA. The Network Architect will design and support secure, segmented network architectures for regulated and controlled workloads, including CMMC environments, and will contribute to the design and configuration of firewalls and web application firewalls (WAFs). The role works closely with information security, research compliance engineering, and other teams to support secure architecture.

Salary

Annual Salary: $109,250 - $177,530

Responsibilities

• Design secure, segmented network architectures supporting regulated and controlled workloads, including enclave topologies, trust boundaries, routing domains, and isolation mechanisms to protect in-scope systems.
• Design, configure, and maintain enterprise firewalls in support of approved network architectures, implementing segmentation rules, controlled access paths, and traffic enforcement consistent with documented security requirements.
• Design, deploy, and maintain Web Application Firewall (WAF) solutions to protect applications hosted within regulated or externally exposed environments, ensuring traffic inspection and rule enforcement align with approved architectures.
• Translate documented technical requirements into practical network, firewall, and WAF configurations, without responsibility for policy definition, control ownership, or audit determinations.
• Engineer and maintain controlled connectivity between regulated enclave networks and approved enterprise, research, or external systems, minimizing attack surface while supporting operational needs.
• Develop and maintain architecture documentation, including network diagrams, firewall and WAF design artifacts, and data flow representations, used to support operational clarity and compliance evidence collection.
• Perform other duties as assigned.

Qualifications

• Associate's degree in Information Systems or a related field and ten (10) years of related experience required. Work experience may substitute for education requirement.
• Five (5+) years of progressively responsible experience in enterprise network engineering or network architecture roles; experience designing, integrating, or supporting cloud-based networking constructs (e.g., virtual networking, VNet/VPC design, hybrid connectivity); demonstrated experience designing and supporting segmented or security-sensitive network environments.

Preferred Qualifications

• Experience supporting environments subject to regulatory frameworks such as CMMC, NIST SP 800-171, or similar.
• Experience designing or supporting isolated or enclave-based network architectures.
• Experience in higher education, research computing, healthcare, or government adjacent environments.
• Experience working within or supporting regulated cloud environments such as Microsoft Azure Government (GCC/GCC High) or AWS GovCloud (or equivalent).

Preferred Technical Skills

• Familiarity with network monitoring, logging, and visibility tools used in regulated environments.
• Experience with secure remote access, VPNs, or controlled inter-network connectivity.
• Exposure to hybrid networking models integrating on-premises infrastructure with cloud environments (e.g., Azure VNets, AWS VPCs, private connectivity).
• Familiarity with cloud-native networking controls, segmentation, and security constructs in regulated environments.

Preferred Skills

• Strong expertise in enterprise routing and switching, including core, distribution, and access layer design.
• Hands‑on experience designing and configuring enterprise firewalls (e.g., Palo Alto, Fortinet, Cisco, or similar platforms).
• Experience deploying or supporting Web Application Firewall (WAF) technologies.
• Experience producing network architecture documentation, diagrams, and data flow artifacts suitable for audits or assessments.
• Ability to translate documented security or compliance requirements into practical, supportable network designs.
• Ability to work collaboratively across network, security, compliance, and research computing teams.
• Ability to explain complex network designs clearly to both technical and non‑technical stakeholders.
• Certifications CCNP, CISSP, Security+ are a plus, but not required.

EEO Statement

UAB is an Equal Employment/Equal Educational Opportunity Institution dedicated to providing equal opportunities and equal access to all individuals regardless of race, color, religion, ethnic or national origin, sex (including pregnancy), genetic information, age, disability, and veteran's status. As required by Title IX, UAB prohibits sex discrimination in any education program or activity that it operates.

Primary Location

University

Job Category

Information Technology

Organization

191504000 Network Svcs

Employee Status

Regular

Shift

Day/1st Shift

Work Arrangement

Hybrid Eligible