Network Engineer - Firewall Security

Job title: Network Engineer - Firewall Security

About the Role We are seeking an experienced Network Engineer – Firewall Security to join UMG's Global Network Infrastructure team. This role designs, standardizes, and operates enterprise firewall and perimeter security platforms to advance the company's security strategy in a global enterprise environment.

What You'll Do

• Design, deploy, and support enterprise firewall and perimeter security solutions
• Build, implement and maintain security controls aligned with Zero Trust and least-privilege principles
• Lead standardization efforts across firewall platforms and configurations
• Define and maintain Network Access Control (NAC) strategy, standards, and architectures (Cisco ISE) to support secure enterprise access
• Design, implement, and operationalize NAC policy including authentication/authorization, device profiling, and identity-based segmentation enforcement
• Own network security logging and telemetry strategy for firewall and NAC controls, including log scope, retention, access controls, and audit readiness
• Design and implement logging methods and systems (e.g., syslog, API-based ingestion, cloud-native logging) to onboard network security events into the enterprise SIEM for monitoring and incident response
• Partner with the SOC to define alerts, dashboards, and investigation workflows based on firewall and NAC security logs
• Perform security assessments and contribute to risk reduction initiatives
• Serve as an escalation point for complex firewall and network security issues
• Maintain network security standards documentation, configuration standards, and operational runbooks
• Participate in technology evaluations and security architecture reviews
• Ensure adherence to change, incident, and problem management processes

What We're Looking For

• 5+ years of overall IT experience
• 3+ years in firewall or network security engineering roles
• Experience with firewall concepts and implementations, preferably Palo Alto Networks firewalls
• Experience with Network Access Control (NAC) concepts and implementations, preferably Cisco Identity Services Engine (ISE)
• Working knowledge of AAA and secure access methods including 802.1X and RADIUS/EAP; familiarity with certificate-based authentication and PKI dependencies
• Experience designing and operating security logging for network security controls, including log source onboarding, normalization, retention, and integration with SIEM platforms
• Solid understanding of IP networking, routing, and security fundamentals
• Experience working in large, global, or regulated environments
• Strong communication and documentation skills

Nice to Have

• Security certifications such as CCNP Security, PCNSE, or equivalent
• Familiarity with Zero Trust, network segmentation, and security governance frameworks
• Experience supporting audits, compliance, or regulatory requirements

Compensation & Benefits

• Comprehensive medical, dental, and vision coverage
• Including 100% coverage for out-patient in-network mental health services
• Fertility coverage for eligible medical plan participants
• Wellbeing reimbursements for fitness classes, spa treatments, meal services, travel, and so much more (up to $720/year)
• Student Loan Repayment Assistance and Tuition Reimbursement
• 401(k) with 100% immediate vesting on the first 5% of your contributions, plus an additional UMG contribution
• A variety of ways to prioritize time away from work including Flexible Paid Time Off (PTO) for exempt employees; 3 weeks PTO for non-exempt employees; 2 weeks paid Winter Break; 10 company holidays; Summer Fridays
• Generous paid parental leave for every type of parent