Network Engineer – Firewall Security

Music is Universal It’s the passionate and dedicated team at Universal Music who help make us the world’s leading music company. From A&R to finance, legal to digital, sales to marketing, Universal Music is the place to grow and develop your career within a truly commercial and innovative business that leads in everything it does. Everyone is welcome to apply for our roles, and we are determined to ensure that no applicant or employee receives less favourable treatment because of gender, race, disability, sexual orientation, religion, belief, age, marital status, background, pregnancy, or caring responsibilities. We also recognise the importance of diversity of thought within our teams and are fully committed to embracing the talents of people with autism, dyslexia, ADHD, and other forms of neurocognitive variation. We will always seek to make appropriate adjustments to recruitment, workplaces, and work processes to be fully inclusive to people with different needs and working styles. If you need us to make any reasonable adjustments for you from application onwards, including alternatives to the online form or to disclose a neurocognitive condition, please email UniversalMusicCareers@umusic.com.

The Role

UMG is seeking an experienced Network Engineer – Firewall Security to join our Global Network Infrastructure team. This role plays a critical part in UMG’s Global Security and Cybersecurity strategy by designing, standardizing, and operating enterprise firewall and perimeter security platforms. The ideal candidate will have deep hands-on experience with next-generation firewall technologies, a strong focus on security standardization, and the ability to partner closely with Cybersecurity and Infrastructure teams in a global enterprise environment.

Key Responsibilities

• Design, deploy, and support enterprise firewall and perimeter security solutions
• Build, implement and maintain security controls aligned with Zero Trust and least-privilege principles
• Lead standardization efforts across firewall platforms and configurations
• Define and maintain Network Access Control (NAC) strategy, standards, and architectures (Cisco ISE) to support secure enterprise access
• Design, implement, and operationalize NAC policy including authentication/authorization, device profiling, and identity-based segmentation enforcement
• Own network security logging and telemetry strategy for firewall and NAC controls, including log scope, retention, access controls, and audit readiness
• Design and implement logging methods and systems (e.g., syslog, API-based ingestion, cloud-native logging) to onboard network security events into the enterprise SIEM for monitoring and incident response
• Partner with the SOC to define alerts, dashboards, and investigation workflows based on firewall and NAC security logs
• Perform security assessments and contribute to risk reduction initiatives
• Serve as an escalation point for complex firewall and network security issues
• Maintain network security standards documentation, configuration standards, and operational runbooks
• Participate in technology evaluations and security architecture reviews
• Ensure adherence to change, incident, and problem management processes