JOB SUMMARY

Under the direction of the Chief Information Security Officer, the Network Security Engineer is responsible for the development and operation of UConn’s Network Security (NetSec) infrastructure and systems. The engineer deploys and manages highly available network security technologies to support secure network and secure digital communication at the university. The role will assess, develop, deploy and maintain network security systems including firewalls, site to site VPN, client VPN, IDP, IDS, network detection and response (NDR), varied firewall rulesets, access control rulesets, and related systems.

The Network Security Engineer is responsible for investigating a diverse range of technical issues across multiple platforms and working with clients who have a wide range of technical proficiency. The engineer works among a team of skilled information security and network professionals to address problems within a complex network environment and develop solutions that will operate effectively in the environment.

The Network Security Engineer is responsible for processes and procedures to ensure the continuous improvement of monitoring, detection, and mitigation capabilities network communications. The engineer plans, organizes and establishes priorities related to an assignment; works independently with minimal outside support; and handles sensitive information in a confidential manner.

SALARY

• Network Security Engineer 1 (Information Security Analyst 1 – UCP 4): $67,666 to $87,966
• Network Security Engineer 2 (Information Security Analyst 2 – UCP 6): $84,880 to $110,344

Note: Please indicate the role you are applying for in your cover letter.  All minimum qualifications must be met at the applicable level to be eligible for consideration at that level. Applicable role will be verified by the hiring committee with respect for qualifications and demonstrated experience. Final salary will be commensurate with experience.

BENEFITS INCLUDE

• Defined contribution with employer match or defined benefit program retirement options
• Excellent and affordable healthcare options
• 35-hour work week
• 22 paid vacation days per year, paid sick leave, and 13 paid holidays
• Employee and dependent tuition waivers
• A highly desirable work environment and work-life balance

DUTIES AND RESPONSIBILITIES

Network Security Engineer 1

• Uses security tools to identify, investigate, and mitigate threats to the environment.
• Supports UConn’s security infrastructure, including but not limited to, firewalls, VPNs, IDS / IDP / NDR, logging, SIEM, and identity access management.
• Monitor and respond to threats, events, alerts and incidents.
• Use SIEM, IDS/IDP, EDR, NDR and Firewall systems to identify threats and attacks.
• Assist in containment and mitigation activities.
• Patch and update firewalls.
• Maintain and troubleshoot firewall rules and configurations.
• Maintain and troubleshoot VPN configurations.
• Triage and respond to service requests from customers and/or internal teams.
• Maintain awareness of potential and developing threats across industry and in general.
• Participate in incident response activities as required for cyber security incidents.
• Maintain appropriate documentation and diagrams of infrastructure and security systems.
• Promote security awareness to improve and ensure system security and best practices.
• Interact with customers, forge relationships, and contribute to the development of the community.
• May participate in on-call rotation, after-hour changes, and after-hour escalations as needed.
• Other related duties as assigned.

Network Security Engineer 2 (additional responsibilities inclusive of Engineer 1)

• Administers, develops and supports UConn’s security infrastructure, including but not limited to, firewalls, VPNs, IDS / IDP / NDR, firewall management, logging, SIEM, and identity access management.
• Research, recommend, implement, and support security tools and counter measures to reflect the evolving security terrain and trends; perform network security testing and reports as needed.
• Develop scripts or deploy programs to assist with automation, provisioning, and/or telemetry, and to ensure integrity of resources to dependent systems.
• Produce and maintain detailed engineering plans, operating procedures, diagrams, models, and standards as they relate to network security design, deployment, and operations.
• Proactively analyze network traffic, system logs, to identify threats, intrusions, and/or compromises.
• Performs analysis of security incidents to help determine root cause and prevent future occurrences.
• Triage and respond to service requests from customers and/or internal teams.
• Maintain awareness of potential and developing threats across industries and in general.
• Participate in cyber security incident response activities as required.
• Maintain appropriate documentation and diagrams of infrastructure and security systems.
• Promote security awareness to improve and ensure system security and best practices.
• Participate in on-call rotation, after-hour changes, and after-hour escalations as needed.
• Other related duties as assigned.

RELATED SKILLS AND COMPETENCIES

• Problem Solving: Demonstrates sound analytic and diagnostic skills dealing with issues that are loosely defined and/or where information is available but must be further manipulated. Once decisions are made, follow and direct action to implement intended results. Breaks a problem down to manageable pieces and implements effective, timely solutions. Openly and directly confront issues until resolved.
• Team Orientation: Builds relationships with peers and other departments to achieve objectives. Balances team and individual responsibilities. Exhibits objectivity and openness to others’ views. Gives and welcomes feedback. Puts success of team above self.  Responsibilities are assigned with some latitude for setting priorities and decision-making using established policies and procedures. Results are reviewed with next-level team lead/manager for clarification and direction before proceeding.
• Planning and Project Management: Works with, or serves as, the project lead in identifying those project tasks that are most important, establishes clear priorities and understands the larger picture.  Executes project tasks and creates documentation as required.
• Physical Demands: This position involves extended periods of sitting and the extensive use of computers and office equipment. May involve stooping, kneeling, crouching and/or working on step ladders. Involves close vision, color vision, depth perception, and focus adjustment. Must be able to lift 35 lbs. to shoulder height.

MINIMUM QUALIFICATIONS

Network Security Engineer 1

1. Must meet and maintain eligibility requirements associated with working on CUI/CTI data, such as but not limited to holding U.S. citizenship or permanent residency, at the level required and as determined by the Facility Security Officer and the Office of Export Control.
2. Bachelor’s degree and two (2) years of related experience (IT/Security), OR
   Associate’s degree and two (4) years of related experience (IT/Security), OR
   Six (6) years of related experience (IT/Security).
3. Demonstrated knowledge of network architecture concepts including topology, protocols, components, and principles.
4. Experience creating, troubleshooting, and managing firewall rules.
5. Experience setting up, installing, configuring, deploying and patching firewalls.
6. Knowledge of information security concepts including confidentiality, accessibility, integrity, threats, risk, authentication, authorization and others.
7. Knowledge of detection and protection techniques.
8. Knowledge of information security event triage and incident response concepts.
9. Demonstrated technical, analytical, interpersonal, and organizational skills.

Network Security Engineer 2 (inclusive of Network Security Engineer 1)

10. Bachelor’s degree and two (2) years of related experience (IT/Security), OR
    Associate’s degree and four (4) years of related experience (IT/Security), OR
    Six (6) years of related experience (IT/Security).
11. One (1) or more years of experience working in an information security role in the network security domain.
12. Experience applying knowledge of network architecture concepts including topology, protocols, components, and principles.
13. Experience setting up, installing, configuring, deploying and patching firewalls in an enterprise environment.
14. Experience applying knowledge of firewalls, VPN, network proxies, and network design.
15. Experience with network flow data (i.e., NetFlow, sFlow, IPFIX) or related forms of flow records and session summary data.
16. Demonstrated understanding of diagnostic and troubleshooting tools, such as the ability to perform detailed analysis on packet capture data, SIM/SIEM log analysis, and failure diagnosis.
17. Experience managing enterprise security devices/platforms from vendors such as Fortinet, Palo Alto, Arbor/NetScout, f5, iBoss, Splunk, Cisco and/or Juniper.
18. Demonstrated programming/development/scripting skills (Python, PHP, PERL, and/or Powershell).
19. Experience in security analysis, policies, procedures and standards.
20. Demonstrated technical, analytical, interpersonal, and organizational skills.

PREFERRED QUALIFICATIONS

Network Security Engineer 1

1. Bachelor’s degree or higher in a Science, Technology, Engineering, Math (STEM) field.
2. Experience working with network flow data.
3. Experience using NDR/XDR technologies.
4. Demonstrated ability to stay informed in securing evolving technologies.
5. Experience working in a higher education environment.

Network Security Engineer 2 (inclusive of Network Security Engineer 1)

6. Demonstrated understanding of a wide array of enterprise applications/services including DNS, SMTP, SSL/TLS, IIS, Apache, LDAP, CAS, Entra, Azure/AWS, SQL, RADIUS, TACACS, etc.
7. Demonstrated understanding of related security domain concepts including Identity & Access Management, Security Operations, Application Security, Risk Management, and Incident Management.
8. Experience securing on-prem and cloud provider-based networks.
9. Experience configuring and troubleshooting client and point to point VPNs.
10. Experience administering and deploying Palo Alto firewalls.
11. Experience administering and deploying Cisco firewalls.
12. Experience administering and deploying Fortinet firewalls.
13. Experience administering and deploying Meraki network gear.
14. Experience deploying, administering, operating, and troubleshooting firewall management systems such as Tufin, Panorama, Fortimanager, and Cisco FMC.
15. Experience deploying, administering, operating, integrating and troubleshooting Cisco Anyware and Cisco ISE.
16. Experience with NDR/XDR (ie SNA/Stealthwatch, Vectra).
17. Experience with network monitoring platforms (ie LogicMonitor).
18. Experience with automation using vendor API’s.
19. Experience in contract negotiations, pricing, terms, and conditions.
20. Professional certifications in Network Security or related information security domains.

APPOINTMENT TERMS

This is a full-time, permanent position located at the Storrs Campus in Storrs, CT. This position is on-site. THIS IS NOT A REMOTE POSITION. The position may be eligible for a hybrid work schedule under applicable bargaining agreements, not less than an annual review, and management approval. This position may require you to travel in-state and you may be required to work irregular hours to support operational or security activities and initiatives.

This is a full-time, end-dated position with the possibility of renewal subject to performance and funding. The University offers a competitive salary, and outstanding benefits, including employee and dependent tuition waivers at UConn, and a highly desirable work environment.

Other rights, terms, and conditions of employment are contained in the collective bargaining agreement between the University of Connecticut and the University of Connecticut Professional Employees Association (UCPEA).

TERMS AND CONDITIONS OF EMPLOYMENT

Employment of the successful candidate is contingent upon the successful completion of a pre-employment criminal background check.

TO APPLY

Please apply online at Faculty and Staff Positions, Search #499698 to upload a resume, cover letter, that demonstrates how you meet the minimum qualifications for this position and contact information for three (3) professional references.

In compliance with federal law, all persons hired will be required to verify identity and eligibility to work in the United States and to complete the required employment eligibility verification document form upon hire.

This job posting is scheduled to be removed at 11:55 p.m. Eastern time on August 5, 2026.

All employees are subject to adherence to the State Code of Ethics.

All members of the University of Connecticut are expected to exhibit appreciation of, and contribute to, an inclusive, respectful, and diverse environment for the University community.

The University of Connecticut aspires to create a community built on collaboration and belonging and has actively sought to create an inclusive culture within the workforce. The success of the University is dependent on the willingness of our diverse employee and student populations to share their rich perspectives and backgrounds in a respectful manner. This makes it essential for each member of our community to feel secure and welcomed and to thoroughly understand and believe that their ideas are respected by all. We strongly respect each individual employee’s unique experiences and perspectives and encourage all members of the community to do the same. All applicants will receive consideration for employment without regard to race, color, ethnicity, religion, age, sex, marital status, national origin, ancestry, sexual orientation, genetic information, physical or mental disabilities, veteran’s status, status as a victim of domestic violence and/or sexual assault and/or trafficking in persons as defined by Connecticut law, prior conviction of a crime, workplace hazards to the reproductive systems, or gender identity or expression.

The University of Connecticut is an AA/EEO employer including for Disability and Veteran status.

JOB SUMMARY

The Connecticut Education Network (CEN) is Connecticut’s trusted, mission‑driven Research and Education (R&E) network, delivering high‑performance Internet connectivity and secure shared services to community anchor institutions statewide. For more than 25 years, CEN has supported education, research, healthcare, government, libraries, cultural arts, and open access organizations by providing a resilient, scalable, and secure Internet and network service platform. Built on trust, partnership, collaboration, and high-quality service, CEN works closely with its members and peer research and education networks nationwide to drive unparalleled value for the communities we serve.

Join and lead CEN's Network Services team and work hands-on with a large-scale service-provider network supporting critical connectivity and security services across Connecticut. This position bridges network operations, design, and engineering, providing technical leadership for Internet, MPLS, security, peering, DNS, and content delivery platforms. The ideal candidate combines strong technical expertise, supervisory experience, sound operational judgment, and a passion for delivering reliable services to education, healthcare, government, and nonprofit organizations statewide.

CEN offers a challenging, fast-paced, and rewarding environment where incumbents will grow professionally while advancing the CEN mission, vision, values, business, and brand. The CEN office is located at 55 Farmington Ave, Hartford, CT. As a team aligned under UConn, this position offers great work/life balance and an excellent benefit package.

UConn has been named the top public university in New England for over a decade and is ranked among the top public universities in the nation. The University is also a Carnegie Foundation Research University; a prestigious honor shared by only the nation's top higher education institutions.

SALARY

The hiring range for this position is $106,474 to $138,416; final salary will be based on the successful candidate's background and experience.

BENEFITS INCLUDE

• Defined contribution with employer match or defined benefit program retirement options
• Excellent and affordable healthcare options
• 35-hour work week
• 22 paid vacation days per year, in addition to paid sick leave and 13 paid holidays
• Annual merit increase program
• Employee and dependent tuition waivers
• A highly desirable work environment and work-life balance

DUTIES AND RESPONSIBILITIES

As a senior-level expert in network engineering, you will lead the design, implementation, and strategic development of the Connecticut Education Network (CEN), supporting a robust carrier-grade IP/MPLS infrastructure. Your responsibilities will include:

• Build: Network Architecture & Strategy
  • Design and implement complex physical and logical network systems aligned with organizational goals.
  • Lead long-range planning for architecture, capacity, and security.
  • Provide engineering plans, detailed diagrams, implementation specifications, and materials quotes.
  • Develop network architecture to support evolving services and constituent needs.
• Run: Operations & Incident Management
  • Serve as the final internal escalation point for network incidents, outages, and service requests.
  • Lead outage resolution and post-incident reporting with detailed root cause analysis.
  • Ensure high availability and performance of services including DIA, MPLS VPNs, DNS, firewalls, and content filtering.
  • Plan and conduct software/firmware upgrades.
• Grow: Capacity planning
  • Conduct software/hardware lifecycle management.
  • Quarterly capacity planning.
  • Network failure analysis.
• Repeat & Test: Automation & Optimization
  • Develop and deploy advanced automation scripts and software to streamline operations and telemetry.
  • Perform system tuning, upgrades, and proactive optimizations to ensure efficiency and scalability.
  • Ensure config standardization and minimize drift.
  • Conduct device-level testing with Ixia, identify software defects, and behavior anomalies.
• Project & Business Development
  • Provide project management support for customer provisioning and network expansions.
  • Collaborate with business units and leadership to develop new services and support customer engagement.
  • Contribute to procurement processes through technical specifications and vendor coordination.
• Leadership & Mentorship
  • Supervise and mentor junior staff, fostering professional development and cross-team competency.
  • Document and disseminate best engineering practices across University, College, K-12, and Library participants.
  • Represent CEN on advisory boards, councils, and forums as needed.
• Security & Compliance
  • Maintain and test network security protocols in alignment with industry best practices.
  • Lead business continuity and disaster recovery planning, testing, and execution.
• Documentation & Asset Management
  • Maintain accurate records of fiber assets, equipment inventory, and network documentation.
  • Provide reports on network behavior, risk assessments, and strategic recommendations to leadership.
• Community Engagement & Support
  • Support virtual and physical events, presentations, and training sessions for peers and the broader CEN community.
  • Travel within Connecticut and to POP locations in NYC, BOS, SPRING is required; a valid driver’s license is necessary.
• Perform other related duties as required.

RELATED SKILLS AND COMPETENCIES

• Problem Solving: Demonstrates sound analytic and diagnostic skills dealing with issues that are defined and/or where information is available but must be further manipulated. Once decisions are made, will follow and direct action to implement intended results. Breaks a problem down to manageable pieces and implements effective, timely solutions. Openly and directly confronts issues until resolved.
• Team Orientation: Builds relationships with peers and other departments to achieve objectives. Balances team and individual responsibilities. Exhibits objectivity and openness to others’ views. Gives and welcomes feedback. Puts success of team above self. Responsibilities are assigned with some latitude for setting priorities and decision-making using established policies and procedures. Results are reviewed with next-level team lead/manager for clarification and direction before proceeding.
• Productivity, Planning, and Time Management: Is proficient in office productivity software such as O365 suite, MS Teams, Google Apps, etc. for collaboration, word processing, spreadsheets, presentation, e-mail etc. Works with the project or team lead in identifying those tasks that are most important, establishes clear priorities and understands the larger picture. Executes tasks and creates documentation as required.
• Physical Demands: This position involves extended periods of sitting and the extensive use of computers and office equipment. May involve stooping, kneeling, crouching and/or working on step ladders. Involves close vision, color vision, depth perception, and focus adjustment. Must be able to lift 40 lbs. to shoulder height and must have a valid license and ability to drive.

MINIMUM QUALIFICATIONS

1. Must be US Citizen or Green Card holder.
2. Bachelor’s degree and six years of directly related experience OR an equivalent combination of education and experience.
3. Two (2) years of experience must be serving in a supervisory capacity with responsibility for staff, structure, and performance.
4. Three (3) years’ of total experience must be as the network lead or senior engineer in support of a service provider, R&E or large-scale enterprise network.
5. Demonstrated understanding of BGP, IS-IS, IPv6, OSPF, MPLS, Traffic Engineering, QinQ, G.8032, 802.3ad, 802.3ag, Y.1731.
6. Demonstrated understanding of VPN technologies such as L2VPNs (Martini, Kompella), RFC2547, VPLS, EVPN.
7. Demonstrated experience leveraging VRFs in complex network environments.
8. Proven experience in providing high profile outage resolution and post incident reviews.
9. Demonstrated communication and writing skills.

PREFERRED QUALIFICATIONS

1. Bachelor’s Degree or higher in a STEM field or related to computer networking.
2. CCNP or JNCP or higher certification, with preference in the Service Provider track.
3. Demonstrated ability to write specifications, document existing and planned systems.
4. Experience in IP and Carrier Ethernet technologies, with a proven track record managing complex network infrastructures in service provider or multi-tenant environments.
5. Demonstrated familiarity with Metro Ethernet products & solutions as defined by MEF.
6. Demonstrated knowledge of LINUX OS derivatives and shell programming with PERL, Python, PHP, and MySQL being a plus.
7. Demonstrated familiarity with optical OTN/DWDM/ROADM transport systems.
8. Demonstrated familiarity with test and traffic generation equipment (Spirent, IXIA etc.)
9. Experience developing and/or maintaining emergency/incident response plans.
10. Experience in outside plant fiber optic cabling systems and design.

APPOINTMENT TERMS

This is a full-time, end-dated position with the possibility of renewal subject to performance and funding. The University offers a competitive salary, and outstanding benefits, including employee and dependent tuition waivers at UConn, and a highly desirable work environment.  For additional information regarding benefits, please visit UConn Health Benefits and explore the sections under the Benefits & Leaves and Engagement & Learning headers. Other rights, terms, and conditions of employment are contained in the collective bargaining agreement between the University of Connecticut and the University of Connecticut Professional Employees Association (UCPEA).

TERMS AND CONDITIONS OF EMPLOYMENT

Employment of the successful candidate is contingent upon the successful completion of a pre-employment criminal background check.

TO APPLY

Please apply online at Faculty and Staff Positions, Search #499195 to upload a resume, cover letter, and contact information for three (3) professional references. Applicants must clearly demonstrate how they meet the stated minimum qualifications, and any preferred qualifications they may possess, in their application materials.

This job posting is scheduled to be removed at 11:55 p.m. Eastern time on July 29, 2026.

All employees are subject to adherence to the State Code of Ethics.

All members of the University of Connecticut are expected to exhibit appreciation of, and contribute to, an inclusive, respectful, and diverse environment for the University community.

The University of Connecticut aspires to create a community built on collaboration and belonging and has actively sought to create an inclusive culture within the workforce. The success of the University is dependent on the willingness of our diverse employee and student populations to share their rich perspectives and backgrounds in a respectful manner. This makes it essential for each member of our community to feel secure and welcomed and to thoroughly understand and believe that their ideas are respected by all. We strongly respect each individual employee’s unique experiences and perspectives and encourage all members of the community to do the same. All applicants will receive consideration for employment without regard to race, color, ethnicity, religion, age, sex, marital status, national origin, ancestry, sexual orientation, genetic information, physical or mental disabilities, veteran’s status, status as a victim of domestic violence and/or sexual assault and/or trafficking in persons as defined by Connecticut law, prior conviction of a crime, workplace hazards to the reproductive systems, or gender identity or expression.

The University of Connecticut is an AA/EEO employer including for Disability and Veteran status.