Network Engineer

Samsung SDS America is a global information technology services organization that delivers innovative technology solutions supporting enterprise clients across logistics, digital transformation, cloud, mobility, and business operations.

As part of Samsung SDS, employees work alongside talented professionals on technologies that improve business performance, enhance operational efficiency, and accelerate digital transformation initiatives across global organizations.

The Network Engineer is responsible for designing, implementing, administering, optimizing, and troubleshooting enterprise network infrastructure supporting corporate campuses, branch offices, data centers, remote users, and wireless environments.

The engineer will operate in a 24x7 enterprise environment, supporting critical incidents, planned maintenance, infrastructure upgrades, and continuous improvements while maintaining network availability, performance, and security.

Switching & Routing

• Design, configure, maintain, and troubleshoot enterprise Cisco switching and routing environments.
• Support Cisco Catalyst and Nexus platforms, including Catalyst 9000-series and current-generation Nexus switches.
• Configure and troubleshoot Layer 2/Layer 3 networking, VLANs, 802.1Q trunking, EtherChannel/LACP, SVIs, inter-VLAN routing, and DHCP relay.
• Implement and troubleshoot STP, RSTP, MST, root-bridge optimization, loop prevention, and high-availability technologies including StackWise and StackWise Virtual.
• Configure and troubleshoot OSPF, BGP, EIGRP in legacy environments, static/floating static routes, route redistribution, route filtering, ECMP, VRF/VRF-Lite, and policy-based routing.
• Support WAN, Internet-edge, and data-center routing, including troubleshooting asymmetric routing and route propagation issues.
• Implement network security controls including port security, storm control, BPDU Guard/Root Guard, DHCP Snooping, Dynamic ARP Inspection, and IP Source Guard.
• Perform software upgrades, configuration management, hardware lifecycle planning, and network capacity planning.

Enterprise Wireless

• Design, deploy, administer, troubleshoot, and optimize enterprise Cisco wireless environments.
• Support Cisco wireless controllers, Catalyst wireless solutions, access points, corporate and guest SSIDs, and high-density wireless environments.
• Configure and troubleshoot 802.1X, WPA2/WPA3 Enterprise, wireless authentication, roaming, RF performance, and client connectivity.
• Conduct wireless performance and capacity analysis and participate in wireless surveys.
• Utilize wireless analysis tools such as Ekahau; experience is highly desirable.

Network Access Controls

• Implement, administer, and troubleshoot Cisco ISE for enterprise network access control.
• Configure 802.1X, MAB, EAP, PEAP, EAP-TLS, and certificate-based authentication.
• Integrate ISE with Active Directory, RADIUS, and TACACS+ environments.
• Configure authorization policies, guest portals, and BYOD onboarding.
• Apply NAC, segmentation, Zero Trust, and secure network-access principles across enterprise environments.

Firewall Administration

• Administer and secure Palo Alto Networks next-generation firewalls and Panorama in multi-site enterprise environments.
• Build, optimize, and audit security policies, NAT rules, and application-layer filtering.
• Manage Panorama templates, device groups, and centralized firewall policies.
• Administer GlobalProtect, site-to-site IPsec VPNs, and SSL decryption.
• Analyze traffic and threat logs and use CLI tools to troubleshoot connectivity and security issues.
• Perform PAN-OS upgrades, hotfixes, hardware health checks, and maintenance of high-availability firewall environments.
• Integrate firewall identity services with Active Directory, LDAP, RADIUS, and MFA solutions.

Network Security

• Implement network segmentation, VLAN segmentation, ACLs, NAC, 802.1X, VPN, and DMZ architectures.
• Apply Zero Trust principles and integrate network infrastructure with enterprise security controls.
• Secure network management using TACACS+, RADIUS, SNMP security, SSH, and device-hardening standards.
• Partner with security teams to investigate and resolve network security incidents.

Network Design & Architecture

• Design LAN/WAN, branch-office, data-center, and wireless network solutions.
• Develop IP addressing strategies, VLAN standards, network templates, and configuration standards.
• Design network redundancy and high-availability solutions using technologies such as HSRP, VRRP, GLBP, StackWise, and StackWise Virtual.
• Perform network capacity and performance analysis and identify opportunities for optimization.
• Evaluate emerging networking technologies and develop recommendations for enterprise adoption.
• Establish and maintain network standards, documentation, and operational best practices.
• Collaborate with security, systems, applications, and IT operations teams on enterprise infrastructure initiatives.

Requirements

• 4-7 years of hands-on experience designing, implementing, and supporting enterprise network infrastructure.
• Strong experience with Cisco Catalyst and Nexus switching platforms, Cisco routers, and enterprise networking technologies.
• Extensive Layer 2/Layer 3 networking and routing experience, including OSPF and BGP; EIGRP experience in legacy environments.
• Strong hands-on enterprise wireless experience with Cisco wireless solutions.
• Hands-on Cisco ISE experience, including 802.1X, MAB, EAP, RADIUS/TACACS+, and certificate-based authentication.
• Experience administering Palo Alto Networks firewalls and/or Panorama.
• Strong understanding of network security, segmentation, NAC, Zero Trust, VPN, and DMZ architectures.
• Demonstrated ability to independently troubleshoot complex enterprise network issues.
• Experience designing network architectures and developing high-level and low-level network designs.
• Strong understanding of high availability, redundancy, capacity planning, and network performance optimization.
• Ability to lead infrastructure projects and collaborate effectively across technical teams.
• Comfortable participating in a 24x7 operational environment, including critical incident response and planned maintenance.
• Strong documentation, communication, analytical, and problem-solving skills.

Preferred Qualifications

• Experience with Ekahau or similar wireless survey and analysis tools.
• Cisco certifications such as CCNP Enterprise, CCNP Security, or equivalent experience.
• Palo Alto Networks certifications or equivalent hands-on experience.
• Experience supporting large-scale, highly available enterprise or data-center environments.
• Experience developing network automation, configuration standards, or infrastructure-as-code solutions.

Benefits

The base pay range for this role depends on appropriate skills, experience, and technical level. The base salary range is USD $140,000.00-$160,000.00.

Individual base pay depends on various factors, in addition to primary work location, such as complexity and responsibility of role, job duties/requirements, and relevant experience and skills.

Certain roles are eligible for additional rewards, including annual bonus. U.S.-based employees have access to medical, dental, and vision insurance, a 401(k) plan and company match, short-term and long-term disability coverage, basic life insurance, and wellbeing benefits, among others. U.S.-based employees also receive, per calendar year, up to 10 scheduled paid holidays, and Paid Time Off.