Principal Network Firewall Engineer Flex-Hybrid

General Information

Press space or enter keys to toggle section visibility

Work Location: Los Angeles, CA, USA

Onsite or Remote

Flexible Hybrid

Work Schedule

Monday-Friday 8am-5pm PST

Posted Date

04/28/2026

Salary Range: $122106.24 - 277829.28 Annually

Employment Type

2 - Staff: Career

Duration

Indefinite

Job #

29715

Primary Duties and Responsibilities

Press space or enter keys to toggle section visibility

Under the direction of the Manager of IT Network Engineering, the Principal Network Firewall Engineer is responsible for the design, configuration, installation, administration and support of network firewalls, network routing, network software, daily operational incidents, network break/fix support, technical escalations and network maintenance support.

The Principal Network Firewall Engineer's role functions also include, but are not limited to enterprise project deliverables, project tasks, documentation, network builds & installations, performance monitoring, optimization, troubleshooting and maintenance of a variety of systems of the network. This is a principal level role, specializing in advanced level security and network infrastructure design and network security solution delivery.

In this role, you will:

• Perform deployments of Next-Generation firewalls, firewall technologies and related security controls.
• Configure firewall security rules and security policies as they pertain to projects and security control deployments.
• Implement and maintain robust security measures to safeguard the network against unauthorized access, cyber threats, and data breaches.
• Design and enforce network access controls, firewalls, intrusion detection/prevention systems, and other security mechanisms.
• Collaborate with cross-functional teams to ensure seamless deployment of network solutions.
• Oversee network upgrades and migrations to minimize disruptions to the organization's operations.
• Monitor network performance and proactively identifying and resolving bottlenecks, latency issues, and other performance-related problems.
• Conduct regular network assessments and capacity planning to ensure optimal network performance.

This is a flex-hybrid role which will require you to be onsite as required by operational need; there are no reimbursements for travel to "home office" location. Each employee must complete a FlexWork Agreement with their manager which will outline arrangement parameters and aids both parties in fully understanding expectations. Arrangements are regularly evaluated, and are subject to termination.

Salary offers are determined based on various factors including, but not limited to, qualifications, experience, and equity. The full salary range for this position is $116,300 - $264,600 annually. The budgeted salary or hourly range that the University reasonably expects to pay for this position is approximately between the start and median.

Job Qualifications

Press space or enter keys to toggle section visibility

7+ years of experience administering enterprise class firewalls and data networks.

One of the following Palo Alto certifications is required:

• Palo Alto Networks Certified Network Security Engineer (PCNSE)
• Palo Alto Network Security Professional
• Palo Alto Network Security Architect

Cisco CCIE and Cisco Firewall certification desired.

Understanding cybersecurity controls, standards, framework and vulnerability detection methods such as pen-testing and practicing ethical hacking.

As a condition of employment, the final candidate who accepts an offer of employment will be required to disclose if they have been subject to any final administrative or judicial decisions within the last seven years determining that they committed any misconduct; or have filed an appeal of a finding of substantiated misconduct with a previous employer.

Current/former UC employees are subject to a personnel file review.