Network Security Engineer

Overview

Network Security Engineer

IT Data Network

Full Time

86224

The Network Security Engineer within the University of California, San Francisco's (UCSF) Information Technology (IT) department will ensure the security and integrity of UCSF's network infrastructure. The Network Security Engineer supports the planning, design, optimization, implementation, audit, and troubleshooting of network security systems. The Engineer improves the overall security posture of UCSF and its assets. The Security Engineer will partner with other teams, including security operations, governance, and system administrators, to successfully design and deploy required solutions to harden UCSF platforms.

• Configure/Install and manage various network security devices, features, and technologies including, but not limited to Firewalls, DDI (DNS, DHCP and IP Address Management), VPN, Network Access Control solutions, Web Filtering solutions, CASB and SASE systems, Intrusion Detection/Prevention systems, Network Packet Brokers, and Network Traffic Visibility solutions
• Fulfill project requests and tasks for our clients (Firewall Policy, VPN tunnel creation, DDI, CASB Incident Response, applying web filter entries, etc.)
• Manage and mitigate vulnerabilities for the devices that are backed by the Network Security Team
• Resolve problems and break/fix incidents on the enterprise network and its network security systems.
• Provide administrative-level technical network security implementation skill set for enterprise and Data Center environments of UCSF
• Assist in the development of network device hardening standards
• Apply professional communications concepts, industry practices, and relevant policies, procedures, and objectives to resolve highly complex issues.
• Establish methods, techniques and evaluation criteria to obtain results.
• Interface with management, IT-Security and vendors to develop and implement new solutions to meet business requirements
• Serve as an escalation point for junior staff

The final salary and offer components are subject to additional approvals based on UC policy.

Your placement within the salary range is dependent on a number of factors including your work experience and internal equity within this position classification  positions that are represented by a labor union, placement within the salary range will be guided by the rules in the collective bargaining agreement.

The salary range for this position is $136,000 - $204,000 (Annual Rate).

To learn more about the benefits of working at UCSF, including total compensation, please visit: (Use the "Apply for this Job" box below)..html

University of California, San Francisco (UCSF) is distinguished as a leading academic healthcare organization, home to groundbreaking discoveries, world-class education, and exceptional healthcare services. Infrastructure Services (IS) is the backbone of the technological infrastructure, assuring the technical services that enable the academic, medical, and research missions of the organization. Beyond a focus on maintaining systems and resolving issues, we are committed to nurturing the potential of our team members and empowering them to excel.

UCSF Infrastructure Services provides 24/7 support to the University community, upholding the highest level of responsiveness and reliability at all times for our customers. IS values innovation and excellence in ensuring secure and efficient IT services, regardless of the hour or complexity of the issue.

• Bachelor's Degree, or equivalent combination of experience/training in one or more of the following fields: computer science, engineering, computer information systems, etc.
• 5-7 years of experience working in one or more of the following fields: network services, information technology, network security, or network operations.
• Cisco Certified Network Professional (CCNP) and/or equivalent experience/training
• Demonstrated advanced knowledge of various network security devices, features, and technologies like firewalls, intrusion detection and prevention systems, network access control…