New

Principal Network Firewall Engineer (Flex-Hybrid)

University of California - Los Angeles Health
United States, California, Los Angeles
Apr 29, 2026
Description Under the direction of the Manager of IT Network Engineering, the Principal Network Firewall Engineer is responsible for the design, configuration, installation, administration and support of network firewalls, network routing, network software, daily operational incidents, network break/fix support, technical escalations and network maintenance support. The Principal Network Firewall Engineer's role functions also include, but are not limited to enterprise project deliverables, project tasks, documentation, network builds & installations, performance monitoring, optimization, troubleshooting and maintenance of a variety of systems of the network. This is a principal level role, specializing in advanced level security and network infrastructure design and network security solution delivery. In this role, you will: Perform deployments of Next-Generation firewalls, firewall technologies and related security controls. Configure firewall security rules and security policies as they pertain to projects and security control deployments. Implement and maintain robust security measures to safeguard the network against unauthorized access, cyber threats, and data breaches. Design and enforce network access controls, firewalls, intrusion detection/prevention systems, and other security mechanisms. Collaborate with cross-functional teams to ensure seamless deployment of network solutions. Oversee network upgrades and migrations to minimize disruptions to the organization's operations. Monitor network performance and proactively identifying and resolving bottlenecks, latency issues, and other performance-related problems. Conduct regular network assessments and capacity planning to ensure optimal network performance. This is a flex-hybrid role which will require you to be onsite as required by operational need; there are no reimbursements for travel to "home office" location. Each employee must complete a FlexWork Agreement with their manager which will outline arrangement parameters and aids both parties in fully understanding expectations. Arrangements are regularly evaluated, and are subject to termination. Salary offers are determined based on various factors including, but not limited to, qualifications, experience, and equity. The full salary range for this position is $116,300 - $264,600 annually. The budgeted salary or hourly range that the University reasonably expects to pay for this position is approximately between the start and median. Qualifications 7+ years of experience administering enterprise class firewalls and data networks. One of the following Palo Alto certifications is required: * Palo Alto Networks Certified Network Security Engineer (PCNSE) * Palo Alto Network Security Professional * Palo Alto Network Security Architect Cisco CCIE and Cisco Firewall certification desired. Understanding cybersecurity controls, standards, framework and vulnerability detection methods such as pen-testing and practicing ethical hacking.