Talent.com
Network Security Engineer

Network Security Engineer

University of California - San Francisco Campus and HealthSan Francisco, California, United States
job_description.job_card.variable_days_ago
serp_jobs.job_preview.job_type
  • serp_jobs.job_card.full_time
job_description.job_card.job_description

Featured Job

Network Security Engineer

IT Data Network

Full Time

86224BR

Job Summary

The Network Security Engineer within the University of California, San Francisco's (UCSF) Information Technology (IT) department will ensure the security and integrity of UCSF's network infrastructure. The Network Security Engineer supports the planning, design, optimization, implementation, audit, and troubleshooting of network security systems. The Engineer improves the overall security posture of UCSF and its assets. The Security Engineer will partner with other teams, including security operations, governance, and system administrators, to successfully design and deploy required solutions to harden UCSF platforms.

The Network Security Engineer will

  • Configure / Install and manage various network security devices, features, and technologies including, but not limited to Firewalls, DDI (DNS, DHCP and IP Address Management), VPN, Network Access Control solutions, Web Filtering solutions, CASB and SASE systems, Intrusion Detection / Prevention systems, Network Packet Brokers, and Network Traffic Visibility solutions
  • Fulfill project requests and tasks for our clients (Firewall Policy, VPN tunnel creation, DDI, CASB Incident Response, applying web filter entries, etc.)
  • Manage and mitigate vulnerabilities for the devices that are backed by the Network Security Team
  • Resolve problems and break / fix incidents on the enterprise network and its network security systems.
  • Provide administrative-level technical network security implementation skill set for enterprise and Data Center environments of UCSF
  • Assist in the development of network device hardening standards
  • Apply professional communications concepts, industry practices, and relevant policies, procedures, and objectives to resolve highly complex issues.
  • Establish methods, techniques and evaluation criteria to obtain results.
  • Interface with management, IT-Security and vendors to develop and implement new solutions to meet business requirements
  • Serve as an escalation point for junior staff

The final salary and offer components are subject to additional approvals based on UC policy.

Your placement within the salary range is dependent on a number of factors including your work experience and internal equity within this position classification at UCSF. For positions that are represented by a labor union, placement within the salary range will be guided by the rules in the collective bargaining agreement.

The salary range for this position is $136,000 - $195,000 (Annual Rate).

To learn more about the benefits of working at UCSF, including total compensation, please visit :

Department Description

University of California, San Francisco (UCSF) is distinguished as a leading academic healthcare organization, home to groundbreaking discoveries, world-class education, and exceptional healthcare services. Infrastructure Services (IS) is the backbone of the technological infrastructure, assuring the technical services that enable the academic, medical, and research missions of the organization. Beyond a focus on maintaining systems and resolving issues, we are committed to nurturing the potential of our team members and empowering them to excel. UCSF Infrastructure Services provides 24 / 7 support to the University community, upholding the highest level of responsiveness and reliability at all times for our customers. IS values innovation and excellence in ensuring secure and efficient IT services, regardless of the hour or complexity of the issue.

The Network Security Engineer will report to the Manager, Network Security, who serves as the network security technical leader for the network services team at UCSF. The Network Security Engineer is responsible for the physical design, documentation, and implementation of all network security services under the network security portfolio.

Ensures IT meets both the current and future network service needs of a broad range of customers, partners, and key stakeholders in administrative and academic units. Guides a team of engineers to drive innovative solutions, ensuring the delivery of best-in-class service to UCSF. Directs strategic and operational planning to achieve business goals, prioritizing initiatives and coordinating the evaluation, deployment, and management of current and future IT systems across the organization. Ensures flexible, efficient, and reliable systems able to adjust to future demands consistent with the health and campus growth and vision.

The IT Network Services department is comprised of Network Security, Network Field Services, Network Wired and Wireless Services, and Network Infrastructure Services. We are one of a few organizations within the Academic Healthcare space with an IT Network Organization that supports clinical, research, and academic environments. With an overall customer satisfaction rating of 95%, we take pride in our work and our community service, research, academic, and health care missions.

Required Qualifications

  • Bachelor's Degree, or equivalent combination of experience / training in one or more of the following fields : computer science, engineering, computer information systems, etc.
  • 5-7 years of experience working in one or more of the following fields : network services, information technology, network security, or network operations.
  • Cisco Certified Network Professional (CCNP) and / or equivalent experience / training
  • Demonstrated advanced knowledge of various network security devices, features, and technologies like firewalls, intrusion detection and prevention systems, network access control solutions, web filtering solutions, network packet brokers, load balancing, DDI (DNS, DHCP, and IP Address management), VPN, and network traffic visibility solutions.
  • Demonstrated advanced knowledge of various VPN technologies.
  • Demonstrated advanced knowledge of network security protocols, technologies, standards and tools.
  • Demonstrated advanced knowledge of various authentication protocols and services.
  • Demonstrated advanced understanding of modern enterprise TCP / IP data networks using standards and technologies, including but not limited to : OSPF, STP, RSTP, 802.1Q, Multicast, Quality of Service, and tunneling protocols.
  • Demonstrated advanced knowledge of security architectures in private and public cloud environments. Experience designing and implementing network services within public cloud environments (e.g., AWS, Azure).
  • Demonstrated advanced knowledge, skills, and experience with Cisco Routing and Switching products.
  • Demonstrated advanced knowledge, skills, and experience with Juniper Routing and Switching products.
  • Demonstrated advanced problem-solving skills. Ability to diagnose and resolve network connectivity issues, in a timely manner. Experience troubleshooting and deploying solutions involving certificates and public key infrastructures (802.1X or SSL decryption and offloading), and designing and deploying web proxy and content filtering solutions for data loss prevention.
  • Experience with Border Gateway Protocol (BGP), intrusion detection, proxies, firewalls, load balancing, packet capture, and / or data loss prevention.
  • Familiarity with network security best practices and the ability to implement and maintain firewall rules, access controls, and intrusion detection / prevention systems.
  • Understands implications of work on other areas of IT and business.
  • Proven ability to learn effectively and meet deadlines. Self-motivated and works independently and as part of a team with minimal supervision. Participates in network on-call rotation supporting a 24 / 7 environment.
  • Excellent communication skills with the ability to convey technical information to both technical and non-technical personnel. Ability to support the creation of presentation materials, generate reports, and lead presentations to stakeholders.
  • Demonstrated advanced ability to gather, organize, and analyze data in the completion of a variety of functional assignments.
  • Excellent interpersonal skills, with the ability to work effectively with colleagues and stakeholders across departments.
  • Preferred Qualifications

  • Demonstrated advanced knowledge, skills, and experience with Juniper Routing and Switching products.
  • Demonstrated advanced knowledge and experience with network device management tools, technologies, and products like SASE, CASE, and CASB solutions.
  • Extensive knowledge of structured cabling systems, network facilities, electrical, UPS, etc.
  • Experience performing packet and flow analysis with various toolsets, including in-line taps, firewall / IPS appliances, network routers, and hosts. Experience working with network access control platforms, writing shell scripts using Python or Bash, and using infrastructure monitoring tools.
  • Palo Alto Networks Certified Network Security Engineer and / or equivalent experience / training
  • Certified Information Systems Security Professional (CISSP)
  • AWS Solutions Architect or AWS Cloud Practitioner Certification
  • Cisco Certified Network Professional (CCNP) and / or equivalent experience / training
  • License / Certification

  • Cisco Certified Network Professional (CCNP) and / or equivalent experience / training
  • About UCSF

    The University of California, San Francisco (UCSF) is a leading university dedicated to promoting health worldwide through advanced biomedical research, graduate-level education in the life sciences and health professions, and excellence in patient care. It is the only campus in the 10-campus UC system dedicated exclusively to the health sciences. We bring together the world's leading experts in nearly every area of health. We are home to five Nobel laureates who have advanced the understanding of cancer, neurodegenerative diseases, aging and stem cells.

    Pride Values

    UCSF is a diverse community made of people with many skills and talents. We seek candidates whose work experience or community service has prepared them to contribute to our commitment to professionalism, respect, integrity, diversity and excellence - also known as our PRIDE values.

    In addition to our PRIDE values, UCSF is committed to equity - both in how we deliver care as well as our workforce. We are committed to building a broadly diverse community, nurturing a culture that is welcoming and supportive, and engaging diverse ideas for the provision of culturally competent education, discovery, and patient care. Additional information about UCSF is available at diversity.ucsf.edu

    Join us to find a rewarding career contributing to improving healthcare worldwide.

    Equal Employment Opportunity

    The University of California is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, age, protected veteran status, or other protected status under state or federal law.

    Organization

    Campus

    Job Code and Payroll Title

    000545 COMM AND NETWORK TCHL ANL 4

    Job Category

    Clinical Systems / IT Professionals

    Bargaining Unit

    99 - Policy-Covered (No Bargaining Unit)

    Employee Class

    Career

    Percentage

    100%

    Location

    San Francisco, CA

    Campus

    Mission Center Building (SF)

    Work Style

    Flexible

    Shift

    Days

    Shift Length

    8 Hours

    Additional Shift Details

    Mon-Fri, 9-5, as required after hours support

    serp_jobs.job_alerts.create_a_job

    Network Security Engineer • San Francisco, California, United States

    Job_description.internal_linking.related_jobs
    • serp_jobs.job_card.promoted
    Network Security Engineer

    Network Security Engineer

    VirtualVocationsFremont, California, United States
    serp_jobs.job_card.full_time
    A company is looking for a Network Security Engineer to assist customers in improving their network security posture.Key Responsibilities Evaluate, test, and troubleshoot technologies related to ...serp_jobs.internal_linking.show_moreserp_jobs.last_updated.last_updated_30
    • serp_jobs.job_card.promoted
    Network Engineer

    Network Engineer

    QualysFoster City, CA, United States
    serp_jobs.job_card.permanent
    Come work at a place where innovation and teamwork come together to support the most exciting missions in the world!.The successful applicant will be performing work in FedRAMP environments, and th...serp_jobs.internal_linking.show_moreserp_jobs.last_updated.last_updated_variable_days
    • serp_jobs.job_card.promoted
    • serp_jobs.job_card.new
    Network Infrastructure Engineer

    Network Infrastructure Engineer

    VirtualVocationsConcord, California, United States
    serp_jobs.job_card.full_time
    A company is looking for a Network Infrastructure Engineer (Network Services) to design, build, and maintain enterprise network services remotely. Key Responsibilities Deploy and maintain network ...serp_jobs.internal_linking.show_moreserp_jobs.last_updated.last_updated_variable_hours
    • serp_jobs.job_card.promoted
    FIPS 140 Security Engineer

    FIPS 140 Security Engineer

    VirtualVocationsHayward, California, United States
    serp_jobs.job_card.full_time
    A company is looking for a FIPS 140 Security Engineer to support national defense through IT security projects.Key Responsibilities Work on varied FIPS 140 validation projects including general s...serp_jobs.internal_linking.show_moreserp_jobs.last_updated.last_updated_variable_days
    • serp_jobs.job_card.promoted
    • serp_jobs.job_card.new
    Network Architecture Lead

    Network Architecture Lead

    VirtualVocationsSanta Clara, California, United States
    serp_jobs.job_card.full_time
    A company is looking for a Network Architecture Lead to design and scale advanced network infrastructures for AI training workloads. Key Responsibilities Architect scalable network topologies opti...serp_jobs.internal_linking.show_moreserp_jobs.last_updated.last_updated_variable_hours
    • serp_jobs.job_card.promoted
    Information Security Engineer

    Information Security Engineer

    VirtualVocationsHayward, California, United States
    serp_jobs.job_card.full_time
    A company is looking for an Information Security Engineer to join their Information Security and Technology team.Key Responsibilities Drive decision-making for platform and application security a...serp_jobs.internal_linking.show_moreserp_jobs.last_updated.last_updated_30
    • serp_jobs.job_card.promoted
    Principal Cyber Security Engineer

    Principal Cyber Security Engineer

    Cloud Software Group, Inc.San Ramon, CA, United States
    serp_jobs.job_card.full_time
    Architectural Leadership : Design, develop, and maintain the comprehensive security architecture for Cloud Software Group's products and corporate infrastructure. Cloud Security Expertise : Lead the s...serp_jobs.internal_linking.show_moreserp_jobs.last_updated.last_updated_variable_days
    • serp_jobs.job_card.promoted
    Senior Principal Security Engineer

    Senior Principal Security Engineer

    VirtualVocationsFremont, California, United States
    serp_jobs.job_card.full_time
    A company is looking for a Senior Principal Security Engineer.Key Responsibilities Collaborate to define and document the long-term security technology strategy Promote alignment on the security...serp_jobs.internal_linking.show_moreserp_jobs.last_updated.last_updated_variable_days
    • serp_jobs.job_card.promoted
    • serp_jobs.job_card.new
    Lead IT Security Engineer

    Lead IT Security Engineer

    VirtualVocationsConcord, California, United States
    serp_jobs.job_card.full_time
    A company is looking for a Lead IT Security Engineer.Key Responsibilities Manage and optimize the Splunk security environment for performance and efficiency Architect cybersecurity solutions and...serp_jobs.internal_linking.show_moreserp_jobs.last_updated.last_updated_variable_hours
    • serp_jobs.job_card.promoted
    Security Engineer, IDAM

    Security Engineer, IDAM

    VirtualVocationsConcord, California, United States
    serp_jobs.job_card.full_time
    A company is looking for a Security Engineer, IDAM Operations.Key Responsibilities Manage user access provisioning and resolve access issues Support complex application account provisioning and ...serp_jobs.internal_linking.show_moreserp_jobs.last_updated.last_updated_1_day
    • serp_jobs.job_card.promoted
    Network Engineer

    Network Engineer

    VirtualVocationsConcord, California, United States
    serp_jobs.job_card.full_time
    A company is looking for a Network Engineer (Remote Work).Key Responsibilities Design and architect network solutions for a global enterprise or retail environment Manage and configure Cisco Mer...serp_jobs.internal_linking.show_moreserp_jobs.last_updated.last_updated_30
    • serp_jobs.job_card.promoted
    Senior Cyber Security Engineer

    Senior Cyber Security Engineer

    VirtualVocationsConcord, California, United States
    serp_jobs.job_card.full_time
    A company is looking for a Senior Cloud Security Engineer to join their team.Key Responsibilities Manage enterprise-wide security tools and platforms, including SIEM, DLP, and vulnerability manag...serp_jobs.internal_linking.show_moreserp_jobs.last_updated.last_updated_30
    • serp_jobs.job_card.promoted
    Network Security JOB Training Opportunity

    Network Security JOB Training Opportunity

    Year Up UnitedPleasant Hill, CA, United States
    serp_jobs.job_card.full_time
    Year Up United is a one-year or less, intensive job training program that provides young adults with in-classroom skill development, access to internships and / or job placement services, and persona...serp_jobs.internal_linking.show_moreserp_jobs.last_updated.last_updated_variable_days
    • serp_jobs.job_card.promoted
    Senior Cyber Security Engineer

    Senior Cyber Security Engineer

    Cloud Software Group, Inc.San Ramon, CA, United States
    serp_jobs.job_card.full_time
    Analyze and investigate activity on company devices and infrastructure (Public Cloud & on-premise) that could represent a security threat. Work cross-functionally with the Security teams to develop ...serp_jobs.internal_linking.show_moreserp_jobs.last_updated.last_updated_variable_days
    • serp_jobs.job_card.promoted
    Senior Security Engineer

    Senior Security Engineer

    VirtualVocationsConcord, California, United States
    serp_jobs.job_card.full_time
    A company is looking for a Senior Security Engineer (US Remote).Key Responsibilities Implement and maintain security controls in AWS and Azure environments Participate in software and infrastruc...serp_jobs.internal_linking.show_moreserp_jobs.last_updated.last_updated_30
    • serp_jobs.job_card.promoted
    Network Security JOB Training Program

    Network Security JOB Training Program

    Year Up UnitedSan Francisco, CA, United States
    serp_jobs.job_card.full_time
    Year Up United is a one-year or less, intensive job training program that provides young adults with in-classroom skill development, access to internships and / or job placement services, and persona...serp_jobs.internal_linking.show_moreserp_jobs.last_updated.last_updated_variable_days
    • serp_jobs.job_card.promoted
    Security Engineer

    Security Engineer

    VirtualVocationsSanta Clara, California, United States
    serp_jobs.job_card.full_time
    A company is looking for a Security Engineer - Detection & Response.Key Responsibilities Implement and operate detection systems, including a scalable cloud-native SIEM platform Leverage AI to a...serp_jobs.internal_linking.show_moreserp_jobs.last_updated.last_updated_30
    • serp_jobs.job_card.promoted
    Senior Tanium Security Engineer

    Senior Tanium Security Engineer

    VirtualVocationsConcord, California, United States
    serp_jobs.job_card.full_time
    A company is looking for a Senior Tanium Security & Asset Visibility Engineer.Key Responsibilities Implement cybersecurity and IT asset lifecycle management strategies Protect digital networks, ...serp_jobs.internal_linking.show_moreserp_jobs.last_updated.last_updated_variable_days
    • serp_jobs.job_card.promoted
    Senior Cloud Security Engineer

    Senior Cloud Security Engineer

    VirtualVocationsConcord, California, United States
    serp_jobs.job_card.full_time
    A company is looking for a Senior Cloud Security Engineer.Key Responsibilities Implement and automate security controls using AWS native tools and third-party solutions Monitor AWS environments ...serp_jobs.internal_linking.show_moreserp_jobs.last_updated.last_updated_30
    • serp_jobs.job_card.promoted
    Post-Quantum Cryptography Engineer

    Post-Quantum Cryptography Engineer

    VirtualVocationsFremont, California, United States
    serp_jobs.job_card.full_time
    A company is looking for a Security Engineer (Cryptography).Key Responsibilities Provide engineering and technical expertise in PQC, PKI, and ACDI implementation Implement and operationalize the...serp_jobs.internal_linking.show_moreserp_jobs.last_updated.last_updated_variable_days