Senior Network Engineer, Firewall

Infrastructure Services provides flexible, reliable, and secure traditional and cloud infrastructure services (network services, platform services, data center operations and management, and unified communications) enabling connectivity, productivity, and security for UCLA. Infrastructure services strives to optimize performance increasing storage, elevating the network, and reducing downtime.

Network and Engineering Services manages the engineering and operations of the network infrastructure (e.g., wired/WAN, wireless, security/firewall) required to offer network connectivity, such as network cabling, routers, and firewalls. This includes connecting devices (e.g., Internet of Things devices) to the network, network access management, securing access to networks, and appropriate authentication (e.g., network registration systems, VPN, and NAC).

The Senior Network Engineer, Firewall will lead the design, implementation, and maintenance of the university's firewall infrastructure. The engineer will work closely with other IT teams to ensure the network is secure and the university's data is protected. They will also work with faculty, staff, and students to provide reliable network access while ensuring compliance with security policies. The Senior Network Engineer, Firewall will positively impact UCLA's operations and culture by ensuring UCLA's IT infrastructure is operable, secure, efficient, and effective in service of the university's academic mission. This team member will advance the University's mission by delivering exceptional information technology services comprehensively and consistently across faculty, staff, and students. This role will execute UCLA's vision while modeling UCLA's culture and values.

1. Five years experience working in one or more of the following fields: network services, information technology, network operations, or a related field. (Required)
2. Experience with wireless optimizations, including AP placement, ideal signal levels, optimized roaming, spectrum selection, channel tuning, etc. (Required)
3. Significant experience in network security engineering, preferably in an academic or research setting. (Required)
4. Significant experience and working knowledge of networking protocols, including TCP/IP, DNS, DHCP, HTTP, and SSL/TLS. (Required)
5. Experience with firewall solutions such as Cisco Secure Access, Cisco ASA/Firepower, VPN, Palo Alto, Fortinet Next Generation Firewall, Cisco Secure IPS and Trellix Network Security (NX). (Required)
6. Seven or more years experience working in one or more of the following fields: network services, information technology or network operations. (Preferred)
7. Experience in complex higher education environments, serving academic and administrative functions of a large public university. (Preferred)
8. Strong written and verbal communication skills and is able to communicate complex technical ideas to a diverse community of colleagues and stakeholders. Can relay technical information to audiences of technical and non-technical stakeholders. (Required)
9. Strong understanding of CIS and NIST security standards and best practices. (Required)
10. Able to establish and advance positive working relationships and a strong rapport with a diverse community of colleagues including team members, stakeholders, and customers. (Required)
11. Advanced organizational skills, ability to balance priorities, deliver concurrent projects to various stakeholders. Ability to work in a project-based environment using project management practices. (Required)
12. Advanced problem-solving skills; ability to identify root problems and scope solutions based on knowledge of resources, timelines, vision and strategy. Seeks information from diverse sources to inform solutions. Demonstrated ability to make decisions with integrity. (Required)
13. Able to participate in activities to advance an inclusive environment that values equity, diversity, inclusion and belonging. (Required)
14. Thinks creatively and introduces innovations such as the incorporation of new technologies or processes. Thrives in an ever-changing, fast-paced environment. (Required)

1. Bachelor's Degree or equivalent combination of experience/training in one or more of the following fields: computer science, engineering, computer information systems, or a related field. (Required)
2. Bachelor's Degree in one or more of the following fields: computer science, engineering, computer information systems. (Preferred)
3. Cisco Certified Network Professional certification (CCNP) or Cisco Certified Internetwork Expert (CCIE) certifications (Preferred)
4. CompTIA Network+ Certification or Cisco Certified Network Associate (CCNA) (Preferred)

1. Background Check: Continued employment is contingent upon the completion of a satisfactory background investigation.
2. Live Scan Background Check: A Live Scan background check must be completed prior to the start of employment.

8:00 A.M. to 5:00 P.M. PT, Monday through Friday and/or variable based upon operational needs.

99-Policy Covered