Principal Network Firewall Engineer (Flex-Hybrid)

University of California - Los Angeles Health; Los Angeles (CA); Hybrid; USD 116,000 - 265,000; Full time

Benefits offered by this job

Flex-hybrid work arrangement

Job summary

University of California - Los Angeles Health is seeking a Principal Network Firewall Engineer to lead design, deployment, and support of enterprise firewalls and related security controls.

Under the direction of the Manager of IT Network Engineering, you will deploy Next-Generation firewalls, configure security policies, monitor performance, and collaborate across teams to ensure secure, reliable network infrastructure. A flex-hybrid onsite model applies.

Qualifications

• 7+ years of experience administering enterprise class firewalls and data networks.
• PCNSE, Palo Alto Security Professional and Security Architect certifications.
• Cisco CCIE and Cisco Firewall certification desired.
• Understanding cybersecurity controls, standards, framework and vulnerability detection methods such as pen-testing and practicing ethical hacking.

Responsibilities

• Perform deployments of Next-Generation firewalls, firewall technologies and related security controls.
• Configure firewall security rules and security policies as they pertain to projects and security control deployments.
• Implement and maintain robust security measures to safeguard the network against unauthorized access, cyber threats, and data breaches.
• Design and enforce network access controls, firewalls, intrusion detection/prevention systems, and other security mechanisms.

Skills

Network security

Penetration testing basics

Security policy design

Education

PCNSE Certification

Palo Alto Networks Security Professional

Palo Alto Networks Security Architect

Cisco CCIE

Tools

Palo Alto Firewalls

Cisco Firewalls

Network monitoring tools

Job description

Description

Under the direction of the Manager of IT Network Engineering, the Principal Network Firewall Engineer is responsible for the design, configuration, installation, administration and support of network firewalls, network routing, network software, daily operational incidents, network break/fix support, technical escalations and network maintenance support.

The Principal Network Firewall Engineer's role functions also include, but are not limited to enterprise project deliverables, project tasks, documentation, network builds & installations, performance monitoring, optimization, troubleshooting and maintenance of a variety of systems of the network. This is a principal level role, specializing in advanced level security and network infrastructure design and network security solution delivery.

In this role, you will:

• Perform deployments of Next-Generation firewalls, firewall technologies and related security controls.
• Configure firewall security rules and security policies as they pertain to projects and security control deployments.
• Implement and maintain robust security measures to safeguard the network against unauthorized access, cyber threats, and data breaches.
• Design and enforce network access controls, firewalls, intrusion detection/prevention systems, and other security mechanisms.
• Collaborate with cross-functional teams to ensure seamless deployment of network solutions.
• Oversee network upgrades and migrations to minimize disruptions to the organization's operations.
• Monitor network performance and proactively identifying and resolving bottlenecks, latency issues, and other performance-related problems.
• Conduct regular network assessments and capacity planning to ensure optimal network performance.

This is a flex-hybrid role which will require you to be onsite as required by operational need; there are no reimbursements for travel to "home office" location. Each employee must complete a FlexWork Agreement with their manager which will outline arrangement parameters and aids both parties in fully understanding expectations. Arrangements are regularly evaluated, and are subject to termination.

Salary offers are determined based on various factors including, but not limited to, qualifications, experience, and equity. The full salary range for this position is $116,300 - $264,600 annually. The budgeted salary or hourly range that the University reasonably expects to pay for this position is approximately between the start and median.

Qualifications

7+ years of experience administering enterprise class firewalls and data networks.

• Palo Alto Networks Certified Network Security Engineer (PCNSE)
• Palo Alto Network Security Professional
• Palo Alto Network Security Architect

Cisco CCIE and Cisco Firewall certification desired.

Understanding cybersecurity controls, standards, framework and vulnerability detection methods such as pen-testing and practicing ethical hacking.