Network Engineer Firewall Security

We are UMG, the Universal Music Group. In everything we do, we are committed to artistry, innovation and entrepreneurship. We own and operate a broad array of businesses engaged in recorded music, music publishing, merchandising, and audiovisual content in more than 60 countries. We identify and develop recording artists and songwriters, and we produce, distribute and promote the most critically acclaimed and commercially successful music to delight and entertain fans around the world.ResponsibilitiesDesign, deploy, and support enterprise firewall and perimeter security solutionsBuild, implement and maintain security controls aligned with Zero Trust and least‑privilege principlesLead standardization efforts across firewall platforms and configurationsDefine and maintain Network Access Control (NAC) strategy, standards, and architectures (Cisco ISE) to support secure enterprise accessDesign, implement, and operationalize NAC policy including authentication/authorization, device profiling, and identity‑based segmentation enforcementOwn network security logging and telemetry strategy for firewall and NAC controls, including log scope, retention, access controls and audit readinessDesign and implement logging methods and systems (e.g., syslog, API‑based ingestion, cloud‑native logging) to onboard network security events into the enterprise SIEM for monitoring and incident responsePartner with the SOC to define alerts, dashboards and investigation workflows based on firewall and NAC security logsPerform security assessments and contribute to risk reduction initiativesServe as an escalation point for complex firewall and network security issuesMaintain network security standards documentation, configuration standards and operational runbooksParticipate in technology evaluations and security architecture reviewsEnsure adherence to change, incident and problem management processesRequired Qualifications 5+ years of overall IT experience3+ years in firewall or network security engineering rolesExperience with firewall concepts and implementations, preferably Palo Alto Networks firewallsExperience with Network Access Control (NAC) concepts and implementations, preferably Cisco Identity Services Engine (ISE)Working knowledge of AAA and secure access methods including 802.1X and RADIUS/EAPFamiliarity with certificate‑based authentication and PKI dependenciesExperience designing and operating security logging for network security controls, including log source onboarding, normalization, retention and integration with SIEM platformsSolid understanding of IP networking, routing and security fundamentalsExperience working in large, global or regulated environmentsStrong communication and documentation skillsPreferred Qualifications Security certifications such as CCNP Security, PCNSE or equivalentFamiliarity with Zero Trust, network segmentation and security governance frameworksExperience supporting audits, compliance or regulatory requirementsBenefitsComprehensive medical, dental and vision coverage100% coverage for out‑patient in‑network mental health servicesFertility coverage for eligible medical plan participantsWellbeing reimbursements for fitness classes, spa treatments, meal services, travel and more (up to $720/year)Student loan repayment assistance and tuition reimbursement401(k) with 100% immediate vesting on the first 5% of contributions plus an additional UMG contributionFlexible paid time off (PTO) for exempt employees3‑weeks PTO for non‑exempt employees2‑weeks paid winter break10 company holidays, including Juneteenth and Wellbeing DaySummer Fridays (between Memorial Day and Labor Day)Generous paid parental leave for every type of parentDisclaimerThis job description only provides an overview of job responsibilities that are subject to change. We are an E‑Verify employer in Alabama, Arizona, Georgia, Mississippi, North Carolina, South Carolina, Tennessee, and Utah.

Create an account to see the full posting, access our search engine, and more.