Network Security Engineer 1/2

About the role

The Network Security Engineer is responsible for the development and operation of UConn’s Network Security (NetSec) infrastructure and systems. The engineer deploys and manages highly available network security technologies to support secure network and secure digital communication at the university.

Responsibilities

• Uses security tools to identify, investigate, and mitigate threats to the environment.
• Supports UConn’s security infrastructure, including but not limited to, firewalls, VPNs, IDS / IDP / NDR, logging, SIEM, and identity access management.
• Maintains and troubleshoots firewall rules and configurations.
• Maintains and troubleshoots VPN configurations.
• Triage and respond to service requests from customers and/or internal teams.
• Maintain awareness of potential and developing threats across industry and in general.
• Participate in incident response activities as required for cyber security incidents.
• Maintain appropriate documentation and diagrams of infrastructure and security systems.
• Promote security awareness to improve and ensure system security and best practices.
• May participate in on-call rotation, after-hour changes, and after-hour escalations as needed.

Requirements

• Must meet and maintain eligibility requirements associated with working on CUI/CTI data, such as but not limited to holding U.S. citizenship or permanent residency, at the level required and as determined by the Facility Security Officer and the Office of Export Control.
• Must have a Bachelor’s degree and two (2) years of related experience (IT/Security), OR Associate’s degree and two (4) years of related experience (IT/Security), OR Six (6) years of related experience (IT/Security).
• Must demonstrate knowledge of network architecture concepts including topology, protocols, components, and principles.
• Must demonstrate experience creating, troubleshooting, and managing firewall rules.
• Must demonstrate experience setting up, installing, configuring, deploying and patching firewalls.
• Must demonstrate knowledge of information security concepts including confidentiality, accessibility, integrity, threats, risk, authentication, authorization and others.
• Must demonstrate knowledge of detection and protection techniques.
• Must demonstrate understanding of diagnostic and troubleshooting tools, such as the ability to perform detailed analysis on packet capture data, SIM/SIEM log analysis, and failure diagnosis.
• Must demonstrate experience managing enterprise security devices/platforms from vendors such as Fortinet, Palo Alto, Arbor/NetScout, f5, iBoss, Splunk, Cisco and/or Juniper.
• Must demonstrate programming/development/scripting skills (Python, PHP, PERL, and/or Powershell).
• Must demonstrate understanding of a wide array of enterprise applications/services including DNS, SMTP, SSL/TLS, IIS, Apache, LDAP, CAS, Entra, Azure/AWS, SQL, RADIUS, TACACS, etc.
• Must demonstrate understanding of related security domain concepts including Identity & Access Management, Security Operations, Application Security, Risk Management, and Incident Management.
• Must demonstrate experience securing on-prem and cloud provider-based networks.
• Must demonstrate experience configuring and troubleshooting client and point to point VPNs.
• Must demonstrate experience administering and deploying Palo Alto firewalls.
• Must demonstrate experience administering and deploying Cisco firewalls.
• Must demonstrate experience administering and deploying Fortinet firewalls.
• Must demonstrate experience administering and deploying Meraki network gear.
• Must demonstrate experience deploying, administering, operating, and troubleshooting firewall management systems such as Tufin, Panorama, Fortimanager, and Cisco FMC.
• Must demonstrate experience deploying, administering, operating, integrating and troubleshooting Cisco Anyware and Cisco ISE.
• Must demonstrate experience with NDR/XDR (ie SNA/Stealthwatch, Vectra).
• Must demonstrate experience with network monitoring platforms (ie LogicMonitor).
• Must demonstrate experience with automation using vendor API’s.
• Must demonstrate experience in contract negotiations, pricing, terms, and conditions.
• Must hold professional certifications in Network Security or related information security domains.

Qualifications

• Bachelor’s degree or higher in a Science, Technology, Engineering, Math (STEM) field.
• Experience working with network flow data.
• Experience using NDR/XDR technologies.
• Demonstrated ability to stay informed in securing evolving technologies.
• Experience working in a higher education environment.

Skills

• Problem Solving: Demonstrates sound analytic and diagnostic skills dealing with issues that are loosely defined and/or where information is available but must be further manipulated. Once decisions are made, follow and direct action to implement intended results. Breaks a problem down to manageable pieces and implements effective, timely solutions.
• Team Orientation: Builds relationships with peers and other departments to achieve objectives. Balances team and individual responsibilities. Exhibits objectivity and openness to others’ views. Gives and welcomes feedback. Puts success of team above self.
• Planning and Project Management: Works with, or serves as, the project lead in identifying those project tasks that are most important, establishes clear priorities and understands the larger picture. Executes project tasks and creates documentation as required.

Benefits

Includes defined contribution with employer match or defined benefit program retirement options, excellent and affordable healthcare options, 35-hour work week, 22 paid vacation days per year, paid sick leave, and 13 paid holidays. Employee and dependent tuition waivers, a highly desirable work environment and work-life balance.