Network Security Administrator

The Network Security Administrator within the University of California, San Francisco’s (UCSF) Information Technology (IT) department will ensure the security and integrity of UCSF’s network infrastructure. The Administrator will be entrusted with the duty of managing and maintaining UCSF’s network services to ensure seamless connectivity and efficient communication across campus, with a focus on protecting UCSF’s data and systems from unauthorized access, cyber‑attacks, and other vulnerabilities.

The Network Security Administrator will:

• Configure, install, and manage a variety of network security devices and technologies, including firewalls, DDI (DNS, DHCP, IP Address Management), VPN, Network Access Control solutions, web filtering solutions, CASB and SASE systems, intrusion detection/prevention systems, network packet brokers, and network traffic visibility solutions.
• Fulfill project requests and tasks for clients such as firewall policy configuration, VPN tunnel creation, DDI, CASB incident response, and application of web filter entries.
• Manage and mitigate device vulnerabilities for the Network Security Team’s portfolio.
• Resolve problems and break/fix incidents on the enterprise network and its security systems.
• Provide administrative‑level technical network security implementation skills for enterprise and data center environments.
• Assist in the development of network device hardening standards.
• Apply professional communication concepts, industry practices, and relevant policies and procedures to resolve highly complex issues.
• Identify methods, techniques, and evaluation criteria to obtain results.
• Interface with management, IT‑Security, and vendors to develop and implement new solutions that meet business requirements.
• Collaborate closely with colleagues and stakeholders to secure network solutions that meet the evolving needs of UCSF, ensuring the IT infrastructure remains operable, secure, efficient, and effective in support of the university’s academic, medical, and research mission.

• 3–5 years of experience in network services, information technology, network security, or network operations.
• Demonstrated knowledge of network security devices, features, and technologies such as firewalls, IDS/IPS, NAC solutions, web filtering, network packet brokers, DDI, VPN, and traffic visibility solutions.
• Experience with VPN technologies.
• Experience with network monitoring and management tools such as Datadog, Panorama, or Firemon.
• Understanding of the ITIL framework and its application in network management and service delivery.
• Knowledge of network security protocols, technologies, standards, and tools.
• Knowledge of authentication protocols and solutions.
• Keen understanding of modern enterprise TCP/IP networks, including OSPF, STP, RSTP, 802.1Q, multicast, QoS, and tunneling protocols.
• Experience with Cisco routing and switching products.
• Awareness of how network work impacts other IT and business areas.
• Self‑motivated and capable of working independently and as part of a team with minimal supervision.
• Clear understanding of the organization’s communications and network needs and the skills to address them.
• Ability to diagnose and resolve network connectivity issues in a timely manner.
• Familiarity with network security best practices and the ability to implement and maintain firewall rules, access controls, and intrusion detection/prevention systems.

• Bachelor’s Degree or equivalent combination of experience/training in computer science, engineering, computer information systems, or a related field.
• Knowledge of security architectures in private and public cloud environments.
• Experience with Juniper routing and switching products.
• Experience with network device management tools and products such as SASE, CASB, and cloud access security broker solutions.
• Proficiency in structured cabling systems, network facilities, electrical, UPS, etc.
• Experience with virtualization technologies such as VMware or Hyper‑V.
• Familiarity with cloud networking concepts and experience with AWS, Azure, or Google Cloud Platform.
• Experience with network automation and scripting languages such as Python or Power Shell.
• Certifications (Security+, PCNSA, CCNA, ITIL, CCNA Security, CCNP Security, CEH, or equivalent).

The University of California is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, age, protected veteran status, or other protected status under state or federal law.