Principal Network Firewall Engineer – Flex-Hybrid

UCLA Health; Los Angeles (CA); On-site; USD 116,300 - 264,600; Full time

Job summary

UCLA Health is looking for a Principal Network Firewall Engineer to design, configure, and support network firewalls as part of their IT Network Engineering team. This flex-hybrid role involves implementing security measures and collaborating with cross-functional teams to enhance network solutions. Candidates should have over 7 years of experience in enterprise firewall administration and possess relevant cybersecurity certifications. Strong troubleshooting and monitoring skills are essential to ensure optimal network performance.

Qualifications

• 7+ years of experience administering enterprise class firewalls and data networks.
• Understanding cybersecurity controls and vulnerability detection methods.

Responsibilities

• Design, configuration, and installation of network firewalls.
• Collaborate with teams for network solutions deployment.
• Monitor network performance and resolve performance issues.

Skills

Enterprise firewalls administration

Network security design

Technical escalation management

Security policy configuration

Cybersecurity standards understanding

Education

Palo Alto Networks Certified Network Security Engineer (PCNSE)

Palo Alto Network Security Professional

Palo Alto Network Security Architect

Cisco CCIE

Job description

Onsite or Remote

Flexible Hybrid

Work Schedule

Monday-Friday 8am-5pm PST

Posted Date

04/28/2026

Salary Range: $116300 - 264600 Annually

Employment Type

Duration

Indefinite

Job #

29715

Primary Duties and Responsibilities

Under the direction of the Manager of IT Network Engineering, the Principal Network Firewall Engineer is responsible for the design, configuration, installation, administration, and support of network firewalls, network routing, network software, daily operational incidents, network break/fix support, technical escalations, and network maintenance support.

The Principal Network Firewall Engineer’s role functions also include, but are not limited to enterprise project deliverables, project tasks, documentation, network builds & installations, performance monitoring, optimization, troubleshooting, and maintenance of a variety of systems of the network. This is a principal level role, specializing in advanced level security and network infrastructure design and network security solution delivery.

In this role, you will:

• Perform deployments of Next-Generation firewalls, firewall technologies and related security controls.
• Configure firewall security rules and security policies as they pertain to projects and security control deployments.
• Implement and maintain robust security measures to safeguard the network against unauthorized access, cyber threats, and data breaches.
• Design and enforce network access controls, firewalls, intrusion detection/prevention systems, and other security mechanisms.
• Collaborate with cross-functional teams to ensure seamless deployment of network solutions.
• Oversee network upgrades and migrations to minimize disruptions to the organization’s operations.
• Monitor network performance and proactively identify and resolve bottlenecks, latency issues, and other performance-related problems.
• Conduct regular network assessments and capacity planning to ensure optimal network performance.

This is a flex-hybrid role which will require you to be onsite as required by operational need; there are no reimbursements for travel to "home office" location. Each employee must complete a FlexWork Agreement with their manager which will outline arrangement parameters and aid both parties in fully understanding expectations. Arrangements are regularly evaluated, and are subject to termination.

Salary offers are determined based on various factors including, but not limited to, qualifications, experience, and equity. The full salary range for this position is $116,300 - $264,600 annually. The budgeted salary or hourly range that the University reasonably expects to pay for this position is approximately between the start and median.

Job Qualifications

7+ years of experience administering enterprise class firewalls and data networks.

• Palo Alto Networks Certified Network Security Engineer (PCNSE)
• Palo Alto Network Security Professional
• Palo Alto Network Security Architect

Cisco CCIE and Cisco Firewall certification desired.

Understanding cybersecurity controls, standards, framework and vulnerability detection methods such as pen-testing and practicing ethical hacking.

As a condition of employment, the final candidate who accepts an offer of employment will be required to disclose if they have been subject to any final administrative or judicial decisions within the last seven years determining that they committed any misconduct; or have filed an appeal of a finding of substantiated misconduct with a previous employer.