Network Security Engineer

Network Security EngineerThe Network Security Analyst is a key technical role responsible for the design, implementation, maintenance, and continuous improvement of the university's network security posture. This position performs and advances information security services in support of the academic and business goals of Saint Joseph's University. Responsibilities include: architecting and implementing robust security measures to protect the university's technology assets, including networks, systems, and data; actively analyzing and correlating log information to identify, anticipate, and proactively address potential security breaches and vulnerabilities; and collaborating with colleagues, internal stakeholders, and external service providers to defend against service interruptions and data compromise. This is a hybrid eligible position, and currently supports 3 physical campuses.Essential Duties and Responsibilities:Analyzes security reports and logs, defines relevant risks, and makes recommendations to the Assistant Director, Information Security for enhancing the security of the technology infrastructure.Manages plan for network risk management and threat mitigationDiagnoses, troubleshoots and resolves performance, connectivity, security and related network problems in concert with personnel working in Information Security, Systems Administration, Technical Support Services, Networking, and other university departments.Maintains campus firewalls including software upgrades, patching, threat prevention updates and policy changes. Monitors firewall and SIEM logs for trends, anomalies and risks.Manages vulnerability scanning and security inventory, and participates in risk assessments and audits.Performs routine maintenance and upgrades to network security systemsAssists in administrative duties including network reporting and Higher Education Opportunity Act (HEOA), PCI, and FTC Safeguards compliance requirements.Interfaces with third party service providers to address external risks that have potential impact on the university operations.Diagnoses, troubleshoots and resolves security problems related to confidentiality, integrity and availability.Secondary Duties and Responsibilities :Assist the Network Engineering team as needed, regarding network security tools and solutions.Works with the Assistant Director to research and evaluate technical and budgetary feasibility of network security products and services for acquisition and deployment.Maintains job-related skills through formal training, individual study, and research.Serves as a technical resource to students and staff.Minimum Qualifications:A Bachelor's degree and 2+ years network and security management experience or an equivalent combination of education and experience.Experience maintaining firewalls, VPN, intrusion detection and prevention systems.Experience creating and analyzing reports for risk or threat identification.Demonstrated experience with SIEM or SOAR solutions.Ability to work independently and with others in a collaborative environment.Demonstrated ability to work and effectively manage multiple work streams while meeting internal deadlines.Must possess excellent problem-solving, organization and professional skills.Valid driver's license.Preferred:Industry standard certification such as CISSP, GIAC, CISA/CISM.Experience with Entra/Azure cloud security.Experience with NAC (802.1x) solutions.Experience with Fortinet firewalls, Extreme routing and switching, FortiNAC, Clearpass, Windows NPS, as well as Aruba/Ruckus wireless.A network certification such as Network+, CCNA, JCNA or equivalent experience.Knowledge of IPv4 and IPv6.Knowledge of AI security tools.Experience with supply chain security, in particular with open-source solutions.Physical Requirements and/or Work Hours:Ability to lift up to 30lbs and transport equipment on a hand truck.Eligible to work from home 2 to 3 days per week with supervisor approval. This role directly supports on campus equipment and users with a primary work location of Hawk Hill (Philadelphia) and occasional travel to University City campus (Philadelphia) and Lancaster PA campus.Walking is required, along with standing, sitting, kneeling, lifting, crawling, and working in confined spaces.Position requires on-call responsibilityPeriodically scheduled upgrades or unplanned outages will necessitate late night or early morning attendance/availability.Pay Transparency:The estimated pay range for this position is $82,000-$89,000. Offered salary will be commensurate with work experience and educational background.