> Markdown version of [/jobs/ext/596420-network-engineer-firewall-security](https://www.wearedevelopers.com/jobs/ext/596420-network-engineer-firewall-security). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Network Engineer Firewall Security - **Company:** Universal Music Group. - **Location:** Nashville, TN, United States - **Experience:** Experienced - **Contract:** Permanent contract - **Skills:** IEEE 802.1X, User Authentication, Cyber Security, Internet Protocol, Network Security, Network Architecture, Routing, Network Segmentation, Public Key Infrastructure, Zero Trust Network Access, Security Information and Event Management, Data Logging, Identity Services Engine, Network Access Control, Firewalls (Computer Science), Information Technology, Palo Alto Networks, Api Design - **Published:** June 20, 2026 - **Apply:** https://www.jobmonkeyjobs.com/career/27771520/Network-Engineer-Firewall-Security-Tennessee-Nashville-1018 ## About the Role * 5+ years of overall IT experience * 3+ years in firewall or network security engineering roles * Experience with firewall concepts and implementations, preferably Palo Alto Networks firewalls. * Experience with Network Access Control (NAC) concepts and implementations, preferably Cisco Identity Services Engine (ISE). * Working knowledge of AAA and secure access methods including 802.1X and RADIUS/EAP; familiarity with certificate-based authentication and PKI dependencies. * Experience designing and operating security logging for network security controls, including log source onboarding, normalization, retention, and integration with SIEM platforms. * Solid understanding of IP networking, routing, and security fundamentals * Experience working in large, global, or regulated environments * Strong communication and documentation skills Preferred: * Security certifications such as CCNP Security, PCNSE, or equivalent * Familiarity with Zero Trust, network segmentation, and security governance frameworks * Experience supporting audits, compliance, or regulatory requirements ## Description UMG is seeking an experienced Network Engineer - Firewall Security to join our Global Network Infrastructure team. This role plays a critical part in UMG's Global Security and Cybersecurity strategy by designing, standardizing, and operating enterprise firewall and perimeter security platforms. The ideal candidate will have deep hands-on experience with next-generation firewall technologies, a strong focus on security standardization, and the ability to partner closely with Cybersecurity and Infrastructure teams in a global enterprise environment. How you'll CREATE: * Design, deploy, and support enterprise firewall and perimeter security solutions * Build, implement and maintain security controls aligned with Zero Trust and least-privilege principles * Lead standardization efforts across firewall platforms and configurations * Define and maintain Network Access Control (NAC) strategy, standards, and architectures (Cisco ISE) to support secure enterprise access. * Design, implement, and operationalize NAC policy including authentication/authorization, device profiling, and identity-based segmentation enforcement. * Own network security logging and telemetry strategy for firewall and NAC controls, including log scope, retention, access controls, and audit readiness. * Design and implement logging methods and systems (e.g., syslog, API-based ingestion, cloud-native logging) to onboard network security events into the enterprise SIEM for monitoring and incident response. * Partner with the SOC to define alerts, dashboards, and investigation workflows based on firewall and NAC security logs. * Perform security assessments and contribute to risk reduction initiatives * Serve as an escalation point for complex firewall and network security issues * Maintain network security standards documentation, configuration standards, and operational runbooks * Participate in technology evaluations and security architecture reviews * Ensure adherence to change, incident, and problem management processes ## Related Videos - [Small, Secure, Interconnected: The next Internet Protocol](https://www.wearedevelopers.com/videos/100062-small-secure-interconnected-the-next-internet-protocol) - [Creating a routing app with Google Maps API from scratch](https://www.wearedevelopers.com/videos/831-creating-a-routing-app-with-google-maps-api-from-scratch) - [API Design - Getting Started](https://www.wearedevelopers.com/videos/33-api-design-getting-started) - [What makes Cybersecurity different for critical infrastructure?](https://www.wearedevelopers.com/videos/571-what-makes-cybersecurity-different-for-critical-infrastructure) - [A Technical Introduction to Bitcoin's 2nd Layer- The Lightning Network](https://www.wearedevelopers.com/videos/15-a-technical-introduction-to-bitcoin-s-2nd-layer-the-lightning-network) - [Rest API Antipatterns](https://www.wearedevelopers.com/videos/100208-rest-api-antipatterns) ## Related Articles - [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking) - [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing) - [Highest Paying Tech Companies for Developers](https://www.wearedevelopers.com/magazine/220-highest-paying-tech-companies-for-developers) - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed) - [How We Built a Worry-Free System That Runs for 10+ Years – And What We’d Do Again](https://www.wearedevelopers.com/magazine/751-how-we-built-a-worry-free-system-that-runs-for-10-years-and-what-we-d-do-again) - [Everything a Developer Needs to Know About MCP with Neo4j](https://www.wearedevelopers.com/magazine/604-everything-a-developer-needs-to-know-about-mcp-with-neo4j)