Design, implement, and operationalize NAC policy including authentication/authorization, device profiling, and identity-based segmentation enforcement.
Own network security logging and telemetry strategy for firewall and NAC controls, including log scope, retention, access controls, and audit readiness.
Design and implement logging methods and systems (e.g., syslog, API-based ingestion, cloud-native logging) to onboard network security events into the enterprise SIEM for monitoring and incident response.
Partner with the SOC to define alerts, dashboards, and investigation workflows based on firewall and NAC security logs.
Perform security assessments and contribute to risk reduction initiatives
Serve as an escalation point for complex firewall and network security issues
Maintain network security standards documentation, configuration standards, and operational runbooks
Participate in technology evaluations and security architecture reviews
Ensure adherence to change, incident, and problem management processes
Bring Your VIBE
Required
5+ years of overall IT experience
3+ years in firewall or network security engineering roles
Experience with firewall concepts and implementations, preferably Palo Alto Networks firewalls.
Experience with Network Access Control (NAC) concepts and implementations, preferably Cisco Identity Services Engine (ISE).
Working knowledge of AAA and secure access methods including 802.1X and RADIUS/EAP; familiarity with certificate-based authentication and PKI dependencies.
Experience designing and operating security logging for network security controls, including log source onboarding, normalization, retention, and integration with SIEM platforms.
Solid understanding of IP networking, routing, and security fundamentals
Experience working in large, global, or regulated environments
Strong communication and documentation skills
Preferred
Security certifications such as CCNP Security, PCNSE, or equivalent
Familiarity with Zero Trust, network segmentation, and security governance frameworks
Experience supporting audits, compliance, or regulatory requirements
Perks Playlist
Join an entrepreneurial, global organization where authenticity, boldness, creativity, connection, drive, and insight aren’t just values—they’re how we work every day. Here are some of the ways we support you along the way (and just a few of the benefits we offer):
Comprehensive medical, dental, and vision coverage
Including 100% coverage for out-patient in-network mental health services
Fertility coverage for eligible medical plan participants
Wellbeing reimbursements for fitness classes, spa treatments, meal services, travel, and so much more (up to $720/year)
Student Loan Repayment Assistance and Tuition Reimbursement
401(k) with 100% immediate vesting on the first 5% of your contributions, plus an additional UMG contribution
A variety of ways to prioritize much-needed time away from work including:
Flexible Paid Time Off (PTO) for exempt employees
3-weeks PTO for non-exempt employees
2-weeks paid Winter Break
10 Company Holidays (including Juneteenth and Wellbeing Day)
Summer Fridays (between Memorial Day and Labor Day)
Generous paid parental leave for every type of parent
Check out our full overview of benefits on the Perks Playlist page of the career site.
Disclaimer: This job description only provides an overview of job responsibilities that are subject to change.
Universal Music Group is an Equal Opportunity Employer
We are an E-Verify employer in Alabama, Arizona, Georgia, Mississippi, North Carolina, South Carolina, Tennessee, and Utah.
Please note, UMG is not enrolled in E-Verify in California and New York, and cannot support employment of candidates whose employer must enroll in E-Verify, for example candidates on STEM-OPT.
For more information, please click on the following links.
E-Verify Participation Poster: English / Spanish
E-Verify Right to Work Poster: English | Spanish
Job Category
Technology
