Virtual Private Network (VPN) to connect to PittNet. See pitt's instructions.
openconnect is an open source alternative that works with the global protect infrastructure, and can be partially automated (https://github.com/WillForan/dotconf/blob/master/bin/openconnect-pitt still needs Duo MFA)
For UPMC's network, see MyApps in Remote Access