Network Security Engineer Lead

University of Central Florida; Orlando, Northern (FL, KY); Hybrid; USD 89,000 - 125,000; Full time

Benefits offered by this job

Medical, dental, vision

Paid time off

Retirement savings options

Education assistance

Employee discounts

Job summary

University of Central Florida is seeking a Network Security Engineer IV (Lead) to act as a senior technical leader within the Information Security Office. You will shape and secure enterprise network security services, lead architecture, design, and operation, and guide complex modernization initiatives across multiple teams.

The role emphasizes hands-on leadership, mentorship, and collaboration with Network Operations, Security Operations, and Cloud teams to deliver resilient and secure

Qualifications

• Bachelor’s degree and 5 years of relevant experience; or High School Diploma (or equivalent) and 9 years of relevant work experience in lieu of degree; or an equivalent combination of education and experience pursuant to Fla. Stat. 112.219(6).
• Advanced credentials in networking/cybersecurity are desirable (e.g., CISSP, CCNP Security).

Responsibilities

• Lead the design, implementation, and optimization of enterprise network security technologies and services.
• Architect and support security solutions including firewalls, intrusion prevention, and secure remote access.
• Establish standards and baselines for engineering and security design.
• Mentor engineers and drive major technical initiatives across teams.

Skills

NAC

802.1X

RADIUS

TACACS+

Zero Trust

Network segmentation

Firewalls

Security monitoring

Incident response

Cloud/hybrid security

Education

Bachelor’s degree

High School Diploma

Tools

PKI

Job description

University Operations:

The University Operations division at UCF is committed to creating a supportive and welcoming environment for our faculty, staff, students, and the broader community. We take pride in delivering exceptional service, sharing our expertise, and upholding the highest standards to ensure a world‑class campus experience.

Visit our website or follow us on Facebook and Instagram to learn more.

The Opportunity:

UCF is seeking a Network Security Engineer IV (Lead) to serve as a senior technical leader within the University’s Information Security organization. This position helps shape, secure, and continuously improve enterprise network security services supporting a large and complex technology environment. The role leads the architecture, design, implementation, operation, and lifecycle management of critical security capabilities, including network access control, authentication and authorization, firewalls, secure remote access, network segmentation, Zero Trust, intrusion prevention, DNS security, certificates, monitoring, and security visibility. It also serves as a senior escalation resource for complex security and operational issues, major incidents, advanced troubleshooting, and root‑cause analysis.

As a technical lead, the position establishes security architecture, engineering standards, configuration baselines, and technical practices, while leading complex projects and modernization initiatives. The role provides technical direction and mentorship to engineers and collaborates across Network Operations, Security Operations, Network Engineering, Infrastructure, Cloud Services, and other technology teams to deliver secure, resilient, and reliable enterprise services. This is a hands‑on technical leadership role for an experienced network security engineer who enjoys solving difficult problems, influencing architecture and engineering direction, mentoring others, and driving meaningful improvements across a complex technology environment. The position is classified as a lead role and does not have direct reports.

Responsibilities:

Network Security Engineering & Architecture

• Lead the design, implementation, administration, and optimization of enterprise network security technologies and services.
• Architect and support security solutions, including firewalls, intrusion prevention systems, secure remote access, DNS security, certificates, and network segmentation.
• Evaluate emerging technologies and recommend enhancements to improve security, performance, and operational efficiency.
• Establish engineering standards, best practices, and technical requirements for network security services.

Network Access Control & Zero Trust

• Serve as the technical lead for network access control and identity‑based security services.
• Design and support solutions utilizing 802.1X, RADIUS, TACACS+, certificate‑based authentication, device profiling, and policy enforcement.
• Implement and maintain Zero Trust and micro‑segmentation strategies to strengthen enterprise security.
• Integrate authentication and authorization services with identity management, wireless, VPN, cloud, and endpoint platforms.

Operations & Service Reliability

• Ensure the availability, reliability, and performance of critical network security services.
• Troubleshoot and resolve complex technical issues impacting security infrastructure and services.
• Support monitoring, logging, alerting, dashboards, reporting, and security visibility initiatives.
• Collaborate with the Network Operations Center and Security Operations Center to improve service reliability and threat detection capabilities.
• Participate in an on‑call rotation and provide after‑hours support for critical incidents and service disruptions.

Incident Response & Problem Management

• Serve as a senior escalation resource for major incidents involving network security technologies and services.
• Lead technical troubleshooting and restoration efforts during service‑impacting events.
• Conduct root‑cause analysis and develop corrective actions to improve long‑term service stability and resilience.

Technical Leadership & Project Delivery

• Lead the technical execution of complex projects involving network security infrastructure and services.
• Translate business and security requirements into technical designs, implementation plans, and operational support models.
• Provide mentorship, technical guidance, and engineering oversight to team members and stakeholders.
• Collaborate with internal teams, vendors, and partners to successfully deliver strategic technology initiatives.

Documentation & Continuous Improvement

• Develop and maintain technical documentation, architecture diagrams, configuration standards, and operational procedures.
• Identify opportunities for automation, modernization, and process improvements.
• Support compliance, disaster recovery, business continuity, and other security‑related initiatives.

Minimum Qualifications:

Bachelor’s degree and 5 years of relevant experience; or High School Diploma (or equivalent) and 9 years of relevant work experience in lieu of degree; or an equivalent combination of education and experience pursuant to Fla. Stat. 112.219(6).

Preferred Qualifications:

• Advanced experience with enterprise Network Access Control (NAC), including 802.1X, RADIUS, TACACS+, device profiling, PKI, certificate‑based authentication, and policy enforcement.
• Experience designing and implementing network segmentation, micro‑segmentation, Zero Trust, and identity‑based security solutions.
• Strong experience with enterprise network security technologies, including firewalls, secure remote access, DNS security, network access controls, and related preventive and detective security technologies.
• Experience designing and securing cloud and hybrid infrastructure environments, including integration between cloud, on‑premises, network, and identity‑based security controls.
• Experience leading complex network security engineering projects, technical initiatives, architecture efforts, and major incident resolution in large‑scale environments.
• Experience developing and maintaining network security architectures, technical standards, configuration baselines, engineering procedures, and security design patterns.
• Experience with network security monitoring, logging, telemetry, alerting, and security visibility, including the use of these capabilities for troubleshooting, threat detection, and incident investigation.
• Experience with automation, scripting, APIs, and infrastructure management tools to improve the consistency, scalability, and operational efficiency of network security services.
• Demonstrated ability to provide technical leadership, mentor engineers, establish technical direction, and coordinate complex engineering work without direct supervisory responsibility.
• Experience supporting higher education, healthcare, government, or other large and complex enterprise environments.
• Relevant professional certifications in networking, cybersecurity, information security, or security architecture are desirable such as CISSP, CCNP Security, CCIE Security, Cisco, Palo Alto, or similar.

Special Instructions to the Applicants:

The anticipated salary range for this position is $89,076 to $125,000. The final salary will be determined based on the candidate's qualifications, experience, and internal equity considerations.

Position requires a valid Class E driver’s license. This position may involve driving to various locations on and off campus to conduct University business.

All applicants must be authorized to work for any U.S. employer. Visa sponsorship is not available for this position, and the university cannot accommodate H‑1B transfers or employment‑based visa processing for individuals currently sponsored by another employer.

This role requires the successful candidate to work on‑site at UCF as their primary work location. On‑site presence is an essential function of this role.

Are you ready to unleash YOUR potential?

As a next‑generation public research university and Forbes‑ranked top employer in Florida, we are a community of thinkers, doers, creators, innovators, healers, and leaders striving to create broader prosperity and help shape a better future. No matter what your role is, when you join Knight Nation, you’ll play an integral role at one of the most impactful universities in the country. You’ll be met with opportunities to connect and collaborate with talented faculty, staff, and students across 12 colleges and multiple campuses, engaging in impactful work that makes a positive difference. Your time at UCF will provide you with many meaningful opportunities to grow, you’ll work alongside talented colleagues on complex projects that will challenge you and help you gain new skills, and you’ll have countless rewarding experiences that go well beyond a paycheck.

Working at UCF has its perks!UCF offers:

• Benefit packages, including Medical, Dental, Vision, Life Insurance, Flexible Spending, and Employee Assistance Program
• Paid time off, including annual and sick time off and paid holidays
• Retirement savings options
• Employee discounts, including tickets to many Orlando attractions
• Education assistanceAnd more... For more benefits information, view theUCF Employee Benefits Guide.

Dive into our Total Rewards Calculator to discover the diverse selection available to you, giving you a glimpse into the benefits that together shape your comprehensive rewards package at UCF.

Unless explicitly stated on the job posting, it is UCF’s expectation that an employee of UCF will reside in Florida as of the date the employment begins.

Department

UCF IT Information Security Office

Work Schedule

Monday - Friday, 8:00am - 5:00pm

Type of Appointment

Regular

Expected Salary

$89,076.00 to Negotiable

Job Posting End Date

10-21-2026-12-00-AM

The University of Central Florida is an equal opportunity employer that does not discriminate against any employee or applicant for employment based on any characteristic protected by law. The University maintains programs for protected veterans and individuals with disabilities in accordance with all applicable federal and state laws.

As a Florida public university, the University of Central Florida makes all application materials and selection procedures available to the public upon request.

UCF is proud to be a smoke‑free campus and an E‑Verify employer.

For general application or posting questions, please email [e-mail].