Network Security Analyst - IS - Data Security - FT - Day

UCI Health; Orange (CA); On-site; USD 120,000 - 160,000; Full time

Job summary

UCI Health in Orange, CA is seeking a Senior Network Security Analyst to design, implement, and operate the network security posture at UCI Health, serving as SME for perimeter security, firewall governance, NAC, and segmentation across the system.

You will apply advanced security concepts to resolve complex issues, align with NIST, HIPAA, and UC policies, and mentor staff while partnering with infrastructure and clinical teams. This is a senior role within a large academic medical center.

Qualifications

• Working knowledge of network segmentation strategies including VLAN design, firewall zoning, and SDA.
• Working knowledge of cloud network security concepts, including virtual network segmentation and cloud NGFW/SASE.
• Proficiency with TCP/IP networking, routing protocols, VPN technologies, and DNS/DHCP.
• Minimum 5 years in network security, at least 2 in healthcare or regulated environments.
• Knowledge of HIPAA-related security requirements and NIST frameworks.
• Experience with enterprise next-generation firewalls (Palo Alto, Cisco FTD).
• Bachelor's degree in CS/IT/Cybersecurity or equivalent experience.
• Familiarity with UC policies IS-3 and related security standards.

Responsibilities

• Design, implement, and operate the network security posture for UCI Health.
• Serve as SME for perimeter security, firewall governance, NAC, data center segmentation, and network-layer compliance.
• Apply advanced IT security concepts to resolve broad and complex issues.
• Work autonomously within a complex academic medical center environment.

Skills

Network segmentation

Cloud network security

TCP/IP & routing

Healthcare security

NIST CSF / SP 800-53

NGFW / NDR tools

Firewall governance

Security incident response

Education

Bachelor's degree in CS/IT/Cybersecurity

Tools

Palo Alto PAN-OS

Cisco Firepower/FTD

SIEM platforms

IDS/IPS / NDR tools

Job description

Who We Are

UCI Health is one of California's largest academic health systems and the clinical enterprise of the University of California, Irvine. Established on July 1, 1976, UCI Health has grown into a 1,461-bed health system that includes UCI Health - Orange, UCI Health - Irvine, four Community Network hospitals and a growing network of ambulatory care centers across Orange and Los Angeles counties.

As Orange County’s only academic health systems, UCI Health is home to the only National Cancer Institute-designated comprehensive cancer center based in the county, the region’s only American College of Surgeons-verified Level I adult and Level II pediatric trauma center, American College of Emergency Physicians Gold Level 1 Geriatric Emergency Department and a nationally recognized regional burn center verified by the American Burn Association. Powered by UC Irvine, UCI Health serves 5.6 million people across Orange County, western Riverside County and southeast Los Angeles County through excellence in patient care, research and medical education.

Your Role on the Team

Position Summary

Reporting to the Data Security Manager, with a dotted line to the Network team, the Network Security Analyst is a senior-level individual contributor responsible for designing, implementing, and operationalizing the network security posture of UCI Health. This role serves as the subject matter expert for network perimeter security, firewall governance, network access control (NAC), data center segmentation, and network-layer compliance across the UCI Health System. As a technical leader with recognized expertise in network security, the incumbent applies advanced IT security concepts and UCI Health objectives to resolve broad and highly complex issues where analysis of situations or data requires an in-depth evaluation of variable factors, selecting methods, techniques, and evaluation criteria to obtain results. Functions with a high degree of autonomy in a complex academic medical center environment.

Required Qualifications

• Working knowledge of network segmentation strategies including VLAN design, firewall zoning, and Software-Defined Access (SDA).
• Working knowledge of cloud network security concepts, including virtual network segmentation, cloud-native security groups, and cloud NGFW or SASE models, in coordination with infrastructure and cloud teams.
• Proficiency with TCP/IP networking, routing protocols (BGP, OSPF), VPN technologies (IPsec, SSL), and DNS/DHCP architecture.
• Minimum 5 years of progressive network security experience, with at least 2 years in a healthcare or regulated industry environment.
• In-depth knowledge of computer hardware, software, and network security issues and approaches in healthcare environments, including Epic EHR integrations, medical device network requirements, and biomedical systems; demonstrated knowledge of secure hardware, software, and network design techniques.
• In-depth knowledge of NIST Cybersecurity Framework, NIST SP 800-53, NIST SP 800-82 (ICS/medical devices), and Zero Trust Architecture (NIST SP 800-207).
• Demonstrated experience managing enterprise next-generation firewalls (e.g., Palo Alto Networks PAN-OS, Cisco Firepower/FTD).
• Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or a related field; or equivalent combination of education and experience.
• Advanced knowledge of UCOP Information Security Policy IS-3 and applicable UC Health supplemental standards, including technical safeguard requirements derived from HIPAA Security Rule (45 CFR 164.312) as applied to network infrastructure.
• Advanced interpersonal skills sufficient to work effectively with both technical and non-technical personnel at various levels in the organization; broad knowledge of other areas of IT.
• Advanced experience using IT security systems and tools including SIEM platforms, IDS/IPS, and network detection and response (NDR) tools; demonstrated skill at analyzing and preventing security incidents of high complexity.

Preferred Qualifications

• Palo Alto Networks Certified Network Security Engineer (PCNSE) or equivalent NGFW vendor certification.
• Familiarity with UC systemwide IT security policies (UCOP IS-3) and UC Health cybersecurity initiatives
• Exposure to healthcare IoT/OT security frameworks and medical device segmentation strategies.
• Experience with Cisco DNA Center / Catalyst Center and SD-Access policy enforcement
• Experience supporting Joint Commission, CDPH, or CMS compliance activities requiring network security evidence.
• Cisco Certified CyberOps Professional or CCNP Security certification.
• Certified Information Systems Security Professional (CISSP)

Total Rewards

We offer a wealth of benefits to make working at UCI even more rewarding. These benefits may include medical insurance, sick and vacation time, retirement savings plans, and access to a number of discounts and perks. Please utilize the links listed here to learn more about our compensation practices and benefits.

Conditions Of Employment

The University of California, Irvine (UCI) seeks to provide a safe and healthy environment for the entire UCI community. As part of this commitment, all applicants who accept an offer of employment must comply with the following conditions of employment:

• Background Check and Live Scan
• Employment Misconduct*
• Legal Right to Work in the United States
• Vaccination Policies
• Smoking and Tobacco Policy
• Drug Free Environment

Exercise the utmost discretion in managing sensitive information learned in the course of performing their duties. Sensitive information includes but is not limited to employee and student records, health and patient records, financial data, strategic plans, proprietary information, and any other sensitive or non-public information learned during the course and scope of employment. Understands that sensitive information should be shared on a limited basis and actively takes steps to limit access to sensitive information to individuals who have legitimate business need to know. Ensure that sensitive information is properly safeguarded. Follow all organizational policies and laws on data protection and privacy. This includes secure handling of physical and digital records and proper usage of IT systems to prevent data leaks. The unauthorized or improper disclosure of confidential work-related information obtained from any source on any work-related matter is a violation of these expectations.

• Misconduct Disclosure Requirement: As a condition of employment, the final candidate who accepts a conditional offer of employment will be required to disclose if they have been subject to any final administrative or judicial decisions within the last seven years determining that they committed any misconduct; received notice of any allegations or are currently the subject of any administrative or disciplinary proceedings involving misconduct; have left a position after receiving notice of allegations or while under investigation in an administrative or disciplinary proceeding involving misconduct; or have filed an appeal of a finding of misconduct with a previous employer.

• California Child Abuse and Neglect Reporting Act
• E-Verify
• Pre-Placement Health Evaluation

Details of each policy may be reviewed by visiting the following page: https://hr.uci.edu/new-hire/conditions-of-employment.php

Closing Statement

The University of California is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, age, protected veteran status, or other protected categories covered by the UC Anti-Discrimination Policy.

We are committed to attracting and retaining a diverse workforce along with honoring unique experiences, perspectives, and identities. Together, our community strives to create and maintain working and learning environments that are inclusive, equitable, and welcoming.

UCI provides reasonable accommodations for applicants with disabilities upon request. For more information, please contact UCI's Employee Experience Center (EEC) at [e-mail] or at [phone], Monday - Friday from 8:30 a.m. - 5:00 p.m.

Consideration for Work Authorization Sponsorship

Must be able to provide proof of work authorization