Network Security Analyst - IS - Data Security - FT - Day

Overview:

UCI Health is one of California’s largest academic health systems and the clinical enterprise of the University of California, Irvine. Established on July 1, 1976, UCI Health has grown into a 1,461-bed health system that includes UCI Health - Orange, UCI Health - Irvine, four Community Network hospitals and a growing network of ambulatory care centers across Orange and Los Angeles counties.

As Orange County’s only academic health systems, UCI Health is home to the only National Cancer Institute-designated comprehensive cancer center based in the county, the region’s only American College of Surgeons-verified Level I adult and Level II pediatric trauma center, American College of Emergency Physicians Gold Level 1 Geriatric Emergency Department and a nationally recognized regional burn center verified by the American Burn Association. Powered by UC Irvine, UCI Health serves 5.6 million people across Orange County, western Riverside County and southeast Los Angeles County through excellence in patient care, research and medical education.

Responsibilities: Position Summary:

Reporting to the Data Security Manager, with a dotted line to the Network team, the Network Security Analyst is a senior-level individual contributor responsible for designing, implementing, and operationalizing the network security posture of UCI Health. This role serves as the subject matter expert for network perimeter security, firewall governance, network access control (NAC), data center segmentation, and network-layer compliance across the UCI Health System. As a technical leader with recognized expertise in network security, the incumbent applies advanced IT security concepts and UCI Health objectives to resolve broad and highly complex issues where analysis of situations or data requires an in-depth evaluation of variable factors, selecting methods, techniques, and evaluation criteria to obtain results. Functions with a high degree of autonomy in a complex academic medical center environment.

Qualifications: Required Qualifications:

• Working knowledge of network segmentation strategies including VLAN design, firewall zoning, and Software-Defined Access (SDA).

• Working knowledge of cloud network security concepts, including virtual network segmentation, cloud-native security groups, and cloud NGFW or SASE models, in coordination with infrastructure and cloud teams.

• Proficiency with TCP/IP networking, routing protocols (BGP, OSPF), VPN technologies (IPsec, SSL), and DNS/DHCP architecture.

• Minimum 5 years of progressive network security experience, with at least 2 years in a healthcare or regulated industry environment.

• In-depth knowledge of computer hardware, software, and network security issues and approaches in healthcare environments, including Epic EHR integrations, medical device network requirements, and biomedical systems; demonstrated knowledge of secure hardware, software, and network design techniques.

• In-depth knowledge of NIST Cybersecurity Framework, NIST SP 800-53, NIST SP 800-82 (ICS/medical devices), and Zero Trust Architecture (NIST SP 800-207).

• Demonstrated experience managing enterprise next-generation firewalls (e.g., Palo Alto Networks PAN-OS, Cisco Firepower/FTD).

• Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, or a related field; or equivalent combination of education and experience.

• Advanced knowledge of UCOP Information Security Policy IS-3 and applicable UC Health supplemental standards, including technical safeguard requirements derived from HIPAA Security Rule (45 CFR §164.312) as applied to network infrastructure.

• Advanced interpersonal skills sufficient to work effectively with both technical and non-technical personnel at various levels in the organization; broad knowledge of other areas of IT.

• Advanced experience using IT security systems and tools including SIEM platforms, IDS/IPS, and network detection and response (NDR) tools; demonstrated skill at analyzing and preventing security incidents of high complexity.

Preferred Qualifications:

• Palo Alto Networks Certified Network Security Engineer (PCNSE) or equivalent NGFW vendor certification.

• Familiarity with UC systemwide IT security policies (UCOP IS-3) and UC Health cybersecurity initiatives

• Exposure to healthcare IoT/OT security frameworks and medical device segmentation strategies.

• Experience with Cisco DNA Center / Catalyst Center and SD-Acce…