Network Engineer Firewall Security

600 UMG Recordings Inc; Tennessee; On-site; USD 90,000 - 115,000; Full time

Benefits offered by this job

Comprehensive medical, dental, and vision coverage

401(k) with immediate vesting

Flexible paid time off

Job summary

600 UMG Recordings Inc, located in Tennessee, is seeking an experienced Network Security Engineer to design, deploy, and support firewall solutions. The ideal candidate will have over 5 years of IT experience, specifically in firewall and network security engineering.

This role involves maintaining security controls aligned with Zero Trust principles, conducting security assessments, and collaborating with the SOC. Benefits include comprehensive coverage, flexible paid time off, and student loan repayment assistance.

Qualifications

• 5+ years of overall IT experience.
• 3+ years in firewall or network security engineering roles.
• Experience with security logging and SIEM platforms.

Responsibilities

• Design, deploy, and support enterprise firewall and perimeter security solutions.
• Maintain network security standards documentation and runbooks.
• Perform security assessments and contribute to risk reduction initiatives.

Skills

Firewall concepts and implementations

Network Access Control (NAC)

IP networking and routing

Communication and documentation skills

Tools

Palo Alto Networks firewalls

Cisco Identity Services Engine (ISE)

Job description

We are UMG, the Universal Music Group. We are the world’s leading music company. In everything we do, we are committed to artistry, innovation and entrepreneurship. We own and operate a broad array of businesses engaged in recorded music, music publishing, merchandising, and audiovisual content in more than 60 countries. We identify and develop recording artists and songwriters, and we produce, distribute and promote the most critically acclaimed and commercially successful music to delight and entertain fans around the world.

Responsibilities

• Design, deploy, and support enterprise firewall and perimeter security solutions
• Build, implement and maintain security controls aligned with Zero Trust and least‑privilege principles
• Lead standardization efforts across firewall platforms and configurations
• Define and maintain Network Access Control (NAC) strategy, standards, and architectures (Cisco ISE) to support secure enterprise access
• Design, implement, and operationalize NAC policy including authentication/authorization, device profiling, and identity‑based segmentation enforcement
• Own network security logging and telemetry strategy for firewall and NAC controls, including log scope, retention, access controls and audit readiness
• Design and implement logging methods and systems (e.g., syslog, API‑based ingestion, cloud‑native logging) to onboard network security events into the enterprise SIEM for monitoring and incident response
• Partner with the SOC to define alerts, dashboards and investigation workflows based on firewall and NAC security logs
• Perform security assessments and contribute to risk reduction initiatives
• Serve as an escalation point for complex firewall and network security issues
• Maintain network security standards documentation, configuration standards and operational runbooks
• Participate in technology evaluations and security architecture reviews
• Ensure adherence to change, incident and problem management processes

Required Qualifications

• 5+ years of overall IT experience
• 3+ years in firewall or network security engineering roles
• Experience with firewall concepts and implementations, preferably Palo Alto Networks firewalls
• Experience with Network Access Control (NAC) concepts and implementations, preferably Cisco Identity Services Engine (ISE)
• Working knowledge of AAA and secure access methods including 802.1X and RADIUS/EAP
• Familiarity with certificate‑based authentication and PKI dependencies
• Experience designing and operating security logging for network security controls, including log source onboarding, normalization, retention and integration with SIEM platforms
• Solid understanding of IP networking, routing and security fundamentals
• Experience working in large, global or regulated environments
• Strong communication and documentation skills

Preferred Qualifications

• Security certifications such as CCNP Security, PCNSE or equivalent
• Familiarity with Zero Trust, network segmentation and security governance frameworks
• Experience supporting audits, compliance or regulatory requirements

Benefits

• Comprehensive medical, dental and vision coverage
• 100% coverage for out‑patient in‑network mental health services
• Fertility coverage for eligible medical plan participants
• Wellbeing reimbursements for fitness classes, spa treatments, meal services, travel and more (up to $720/year)
• Student loan repayment assistance and tuition reimbursement
• 401(k) with 100% immediate vesting on the first 5% of contributions plus an additional UMG contribution
• Flexible paid time off (PTO) for exempt employees
• 3‑weeks PTO for non‑exempt employees
• 2‑weeks paid winter break
• 10 company holidays, including Juneteenth and Wellbeing Day
• Summer Fridays (between Memorial Day and Labor Day)
• Generous paid parental leave for every type of parent

Disclaimer

This job description only provides an overview of job responsibilities that are subject to change. Universal Music Group is an Equal Opportunity Employer. We are an E‑Verify employer in Alabama, Arizona, Georgia, Mississippi, North Carolina, South Carolina, Tennessee, and Utah. Please note that UMG is not enrolled in E‑Verify in California and New York and cannot support employment of candidates whose employer must enroll in E‑Verify, for example candidates on STEM‑OPT.