Network Security Administrator

University of California - San Francisco; San Francisco (CA); On-site; USD 120,000 - 170,000; Full time

Job summary

The University of California, San Francisco (UCSF) is seeking a Network Security Administrator within its Information Technology department to safeguard UCSF's network infrastructure, ensure reliable connectivity, and protect data and systems from cyber threats and vulnerabilities.

The role focuses on configuring and maintaining security devices, VPNs, DDI, CASB/SASE, and monitoring tools, while collaborating with IT-security, vendors, and campus stakeholders to support UCSF's academic, medical,

Qualifications

• 3–5 years of experience in network services, IT, or security.
• Knowledge of firewalls, IDS/IPS, NAC, VPN, CASB/SASE, and web filtering.
• Experience with VPN technologies and network monitoring tools.
• Understanding of ITIL framework and network management.
• Familiarity with Cisco routing and switching and TCP/IP concepts.

Responsibilities

• Configure, install, and manage security devices and technologies (firewalls, VPN, CASB/SASE).
• Fulfill project requests like firewall policies and VPN tunnels for clients.
• Manage device vulnerabilities for the Network Security Team.
• Resolve incidents on the enterprise network and security systems.
• Provide technical network security implementation skills for enterprise/data center.
• Assist in developing network device hardening standards.
• Collaborate with management, IT-Security, and vendors to implement new solutions.

Skills

Firewall policies

VPN configurations

Network monitoring

ITIL awareness

TCP/IP knowledge

Cisco routing/switching

Independent work

Education

Bachelor's degree or equivalent

Tools

Datadog

Panorama

Firemon

Job description

The Network Security Administrator within the University of California, San Francisco’s (UCSF) Information Technology (IT) department will ensure the security and integrity of UCSF’s network infrastructure. The Administrator will be entrusted with the duty of managing and maintaining UCSF’s network services to ensure seamless connectivity and efficient communication across campus, with a focus on protecting UCSF’s data and systems from unauthorized access, cyber‑attacks, and other vulnerabilities. The Network Security Administrator will:

Responsibilities

• Configure, install, and manage a variety of network security devices and technologies, including firewalls, DDI (DNS, DHCP, IP Address Management), VPN, Network Access Control solutions, web filtering solutions, CASB and SASE systems, intrusion detection/prevention systems, network packet brokers, and network traffic visibility solutions.
• Fulfill project requests and tasks for clients such as firewall policy configuration, VPN tunnel creation, DDI, CASB incident response, and application of web filter entries.
• Manage and mitigate device vulnerabilities for the Network Security Team’s portfolio.
• Resolve problems and break/fix incidents on the enterprise network and its security systems.
• Provide administrative‑level technical network security implementation skills for enterprise and data center environments.
• Assist in the development of network device hardening standards.
• Apply professional communication concepts, industry practices, and relevant policies and procedures to resolve highly complex issues.
• Identify methods, techniques, and evaluation criteria to obtain results.
• Interface with management, IT‑Security, and vendors to develop and implement new solutions that meet business requirements.
• Collaborate closely with colleagues and stakeholders to secure network solutions that meet the evolving needs of UCSF, ensuring the IT infrastructure remains operable, secure, efficient, and effective in support of the university’s academic, medical, and research mission.

Required Qualifications

• 3–5 years of experience in network services, information technology, network security, or network operations.
• Demonstrated knowledge of network security devices, features, and technologies such as firewalls, IDS/IPS, NAC solutions, web filtering, network packet brokers, DDI, VPN, and traffic visibility solutions.
• Experience with VPN technologies.
• Experience with network monitoring and management tools such as Datadog, Panorama, or Firemon.
• Understanding of the ITIL framework and its application in network management and service delivery.
• Knowledge of network security protocols, technologies, standards, and tools.
• Knowledge of authentication protocols and solutions.
• Keen understanding of modern enterprise TCP/IP networks, including OSPF, STP, RSTP, 802.1Q, multicast, QoS, and tunneling protocols.
• Experience with Cisco routing and switching products.
• Awareness of how network work impacts other IT and business areas.
• Self‑motivated and capable of working independently and as part of a team with minimal supervision.
• Clear understanding of the organization’s communications and network needs and the skills to address them.
• Ability to diagnose and resolve network connectivity issues in a timely manner.
• Familiarity with network security best practices and the ability to implement and maintain firewall rules, access controls, and intrusion detection/prevention systems.

Preferred Qualifications

• Bachelor’s Degree or equivalent combination of experience/training in computer science, engineering, computer information systems, or a related field.
• Knowledge of security architectures in private and public cloud environments.
• Experience with Juniper routing and switching products.
• Experience with network device management tools and products such as SASE, CASB, and cloud access security broker solutions.
• Proficiency in structured cabling systems, network facilities, electrical, UPS, etc.
• Experience with virtualization technologies such as VMware or Hyper‑V.
• Familiarity with cloud networking concepts and experience with AWS, Azure, or Google Cloud Platform.
• Experience with network automation and scripting languages such as Python or PowerShell.
• Certifications (Security+, PCNSA, CCNA, ITIL, CCNA Security, CCNP Security, CEH, or equivalent).

The University of California is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, age, protected veteran status, or other protected status under state or federal law.