About UMass Amherst
The flagship of the Commonwealth, the University of Massachusetts Amherst is a nationally ranked public land-grant research university that seeks to expand educational access, fuel innovation and creativity, and share and use its knowledge for the common good. Founded in 1863, UMass Amherst sits on nearly 1,450-acres in scenic Western Massachusetts and boasts state-of-the-art facilities for teaching, research, scholarship, and creative activity. The institution advances a diverse, equitable, and inclusive community where everyone feels connected and valued—and thrives, and offers a full range of undergraduate, graduate and professional degrees across 10 schools and colleges, and 100 undergraduate majors. We believe every member of our university community can contribute to our ongoing success by striving for the highest level of excellence as we seek breakthrough solutions to mounting environmental, social, economic, and technological challenges in our world.
Job Summary
The Network Security Administrator plays a critical role as the primary person responsible for the management of firewall and VPN administration across the entire UMass Amherst campus. This position ensures the security, integrity, and resilience of campus and data center networks by managing next-generation firewall solutions. Acting as a key subject matter expert, this role collaborates with project management, network engineers, decentralized firewall tenants, and clients to address the University's evolving and mission-critical security needs.
Essential Functions
- Lead the development, implementation, and maintenance of firewall operations, policies, and procedures to ensure robust security and compliance with industry standards, regulatory requirements, and University policies.
- Spearhead the management of multi-tenant campus and data center Fortinet firewalls, including policy creation and enforcement. Design, configure, and implement firewall solutions to fortify University assets against cyber threats.
- Proactively monitor firewall logs and alerts to detect, investigate, and mitigate potential security threats, ensuring continuous protection of the University’s network.
- Oversee the campus VPN infrastructure, including leading a strategic migration to a new vendor. Maintain and administer critical perimeter security systems, including firewalls, intrusion detection, and VPN infrastructure (Juniper, Palo Alto, Fortinet).
- Collaborate closely with network engineers to ensure firewall configurations align with broader security initiatives, optimizing network performance and security.
- Diagnose and resolve a wide variety of client connectivity issues related to firewalls and VPNs. Develop and enforce firewall policies while ensuring operations align with broader security and network initiatives.
- Provide in-depth security analysis, generating reports on firewall block lists, device status, security incidents, and other key areas to support compliance and risk management.
- Stay ahead of emerging threats and vulnerabilities to University computer, network, and information systems. Deploy appropriate technical controls to mitigate risks.
- Stay informed on evolving security trends, standards, and best practices related to firewalls, intrusion detection/prevention, and incident response. May participate in regional and national information security organizations.
Other Functions
Performs other duties as assigned.
Minimum Qualifications (Knowledge, Skills, Abilities, Education, Experience, Certifications, Licensure)
- Bachelor’s degree with five (5) years work of experience deploying, operating and maintaining computer, information, and network security systems in a large multi-platform network environment
-OR-
Associate's degree with seven (7) of work experience deploying, operating and maintaining computer, information, and network security systems in a large multi-platform network environment.
-OR-
A high school diploma with at least nine (9) years of work experience deploying, operating and maintaining computer, information, and network security systems in a large multi-platform network environment.
- Strong working knowledge of TCP/IP networking protocols and current network security procedures.
- Technical expertise in system and network security, incident handling, intrusion detection, firewalls, VPN, vulnerability and patch management and log analysis.
- Hands-on experience with VPN gateway technologies, such as Cisco ASA, Fortinet, or Palo Alto Global Protect.
- Experience with complex network security and incident response procedures, including computer and network data collection, investigations, containment and remediation in a large institutional environment.
- Understanding of network architecture, application architecture, and their interoperability.
- Experience with change control policy and procedures.
- Demonstrated written and verbal communication skills with ability to work with a diverse constituency in a service-based organization.
- Strong interpersonal skills and the ability to work with individuals of varying technical expertise across multiple organizational levels.
- Familiarity with DMCA, HIPAA, FERPA, and other security/privacy laws.
Preferred Qualifications (Knowledge, Skills, Abilities, Education, Experience, Certifications, Licensure)
- A Bachelor's degree.
- Experience with Fortinet and Palo Alto firewall operations and policy administration strongly preferred.
- Experience deploying, operating and maintaining enterprise information security controls including firewalls, IDS/IPS, and vulnerability management, anti-malware, and mail security appliances in a large enterprise higher education environment is highly preferred.
- Prior experience in higher education is highly desirable.
Physical Demands/Working Conditions
Typical office Environment.
Work Schedule
- Monday to Friday 37.5 hours a week.
- Some off- hour/weekend work will be required to respond to critical network problems and modifications.
- Team on-call rotation required.
- This position has the opportunity for a remote work schedule, which is defined by the University as an arrangement where the employee’s work location is to work from a site other than the UMass Amherst campus. As this position falls within the Professional Staff Union, it is subject to the terms and conditions of the Professional Staff Union collective bargaining agreement.
Salary Information
Level 29
PSU Hiring Ranges
Special Instructions to Applicants
Along with the application, please submit a resume and cover letter. References will be checked at the finalist stage, please be prepared to provide contact information for three (3) professional references.
The University of Massachusetts Amherst welcomes all qualified applicants and complies with all state and federal anti-discrimination laws.