Network Architect-ENT in Birmingham

The University of Alabama at Birmingham (UAB) seeks a NETWORK ARCHITECT-ENT to manage high-level network planning, design, and optimization. The role involves developing strategies and direction for network systems solutions using current and emerging technologies, translating business requirements into network and/or process designs, and planning and recommending network hardware, systems management software, and architecture.

Key responsibilities include:

• Approving and modifying network design and architecture to ensure compliance.
• Configuring and maintaining routers, switches, and hubs for the network systems (including wireless and VOIP).
• Evaluating and recommending new products and maintaining knowledge of emerging technologies for application to the enterprise.
• Monitoring network performance, ensuring capacity planning is performed, and proactively assessing and making recommendations for improvement.
• Performing troubleshooting procedures and designing resolution scripts.
• Fostering an environment of heightened security following Information Technology Security Policies and participating in security training, such as Health Insurance Portability & Accountability Act (HIPAA) and Family Education Rights and Privacy Act (FERPA), on an annual basis.
• Designing and supporting secure, segmented network architectures for environments that include regulated and controlled workloads, such as CMMC.
• Contributing to the design and configuration of network security components, including firewalls and web application firewalls (WAFs), to help implement approved security designs while maintaining reliable operations.

Responsibilities include:

• Designing secure, segmented network architectures supporting regulated and controlled workloads including enclave topologies, trust boundaries, routing domains, and isolation mechanisms to protect in-scope systems.
• Designing, configuring, and maintaining enterprise firewalls in support of approved network architectures, implementing segmentation rules, controlled access paths, and traffic enforcement consistent with documented security requirements.
• Designing, deploying, and maintaining Web Application Firewall (WAF) solutions to protect applications hosted within regulated or externally exposed environments, ensuring traffic inspection and rule enforcement align with approved architectures.
• Translating documented technical requirements into practical network, firewall, and WAF configurations.
• Engineering and maintaining controlled connectivity between regulated enclave networks and approved enterprise, research, or external systems, minimising attack surface while supporting operational needs.
• Developing and maintaining architecture documentation used to support operational clarity and compliance evidence collection, including network diagrams, firewall and WAF design artifacts, and data flow representations.
• Performing other duties as assigned.

Qualifications include:

• Associate's degree in Information Systems or a related field and ten (10) years of related experience required. Work experience may substitute for education requirement.
• Five (5+) years of progressively responsible experience in enterprise network engineering or network architecture roles.
• Experience designing, integrating, or supporting cloud-based networking constructs (e.g., virtual networking, VNet/VPC design, hybrid connectivity).
• Demonstrated experience designing and supporting segmented or security sensitive network environments.

Preferred experience includes:

• Supporting environments subject to regulatory frameworks such as CMMC, NIST SP 800 171, or similar.
• Designing or supporting isolated or enclave-based network architectures.
• Experience in higher education, research computing, healthcare, or government adjacent environments.
• Working within or supporting regulated cloud environments such as Microsoft Azure Government (GCC/GCC High) or AWS GovCloud (or equivalent).

Preferred technical skills include:

• Familiarity with network monitoring, logging, and visibility tools used in regulated environments.
• Experience with secure remote access, VPNs, or controlled inter-network connectivity.
• Exposure to hybrid networking models integrating on-premises infrastructure with cloud environments (e.g., Azure VNets, AWS VPCs, private connectivity).
• Familiarity with cloud-native networking controls, segmentation, and security constructs in regulated environments.

UAB is an Equal Employment/Equal Educational Opportunity Institution dedicated to providing equal opportunities and equal access to all individuals regardless of race, color, religion, ethnic or national origin, sex (including pregnancy), genetic information, age, disability, and veteran's status. As required by Title IX, UAB prohibits sex discrimination in any education program or activity that it operates. Individuals may report concerns or questions to UAB's Assistant Vice President and Senior Title IX Coordinator.