Network Engineer

Samsung
San Jose, CA, United States
1 day ago
Apply on www.thejobnetwork.com
Prepare application

Role details

Contract type
Permanent contract
Employment type
Full-time (> 32 hours)
Experience level
Experienced
Experience required
4 years minimum
Compensation
$140,000.0 - $160,000.0
Working hours
Regular working hours

Tech stack

IEEE 802.1Q IEEE 802.1X Link Aggregation (Ethernet) Access Network Active Directory Application Firewall Border Gateway Protocol Spanning Tree Protocols Catalyst (Software) Cisco Routers Cloud Computing Configuration Management
+44 more
Computer Networks Data Centers Dynamic Host Configuration Protocol Enhanced Interior Gateway Routing Protocol EtherChannel Trunking Hot Standby Router Protocol Information Technology Operations IP Addressing Internet Protocol Security (IP SEC) Virtual Private Networks (VPN) Network Security Network Layer Lightweight Directory Access Protocols (LDAP) Microsoft Office Network Architecture Network Control Network Planning and Design Routing Network Segmentation Cisco Nexus Switches Open Shortest Path First (OSPF) Zero Trust Network Access Roaming Simple Network Management Protocols Virtual Local Area Networks Virtual Router Redundancy Protocols Wide Area Networks Wireless Access Point Wireless Networks Transport Layer Security Identity Services Engine System Availability Firewalls (Computer Science) Information Technology Palo Alto Networks Wireless Technologies Routing & Switching Hardware Asset Management TACACS+ Protocol Firewall Services Module Open Network Automation Platform Cisco Switches Cisco

Job description

Samsung SDS America is a global information technology services organization that delivers innovative technology solutions supporting enterprise clients across logistics, digital transformation, cloud, mobility, and business operations.

As part of Samsung SDS, employees work alongside talented professionals on technologies that improve business performance, enhance operational efficiency, and accelerate digital transformation initiatives across global organizations.

The Network Engineer is responsible for designing, implementing, administering, optimizing, and troubleshooting enterprise network infrastructure supporting corporate campuses, branch offices, data centers, remote users, and wireless environments.

The engineer will operate in a 24x7 enterprise environment, supporting critical incidents, planned maintenance, infrastructure upgrades, and continuous improvements while maintaining network availability, performance, and security.

Switching & Routing

  • Design, configure, maintain, and troubleshoot enterprise Cisco switching and routing environments.
  • Support Cisco Catalyst and Nexus platforms, including Catalyst 9000-series and current-generation Nexus switches.
  • Configure and troubleshoot Layer 2/Layer 3 networking, VLANs, 802.1Q trunking, EtherChannel/LACP, SVIs, inter-VLAN routing, and DHCP relay.
  • Implement and troubleshoot STP, RSTP, MST, root-bridge optimization, loop prevention, and high-availability technologies including StackWise and StackWise Virtual.
  • Configure and troubleshoot OSPF, BGP, EIGRP in legacy environments, static/floating static routes, route redistribution, route filtering, ECMP, VRF/VRF-Lite, and policy-based routing.
  • Support WAN, Internet-edge, and data-center routing, including troubleshooting asymmetric routing and route propagation issues.
  • Implement network security controls including port security, storm control, BPDU Guard/Root Guard, DHCP Snooping, Dynamic ARP Inspection, and IP Source Guard.
  • Perform software upgrades, configuration management, hardware lifecycle planning, and network capacity planning.

Enterprise Wireless

  • Design, deploy, administer, troubleshoot, and optimize enterprise Cisco wireless environments.
  • Support Cisco wireless controllers, Catalyst wireless solutions, access points, corporate and guest SSIDs, and high-density wireless environments.
  • Configure and troubleshoot 802.1X, WPA2/WPA3 Enterprise, wireless authentication, roaming, RF performance, and client connectivity.
  • Conduct wireless performance and capacity analysis and participate in wireless surveys.
  • Utilize wireless analysis tools such as Ekahau; experience is highly desirable.

Network Access Controls

  • Implement, administer, and troubleshoot Cisco ISE for enterprise network access control.
  • Configure 802.1X, MAB, EAP, PEAP, EAP-TLS, and certificate-based authentication.
  • Integrate ISE with Active Directory, RADIUS, and TACACS+ environments.
  • Configure authorization policies, guest portals, and BYOD onboarding.
  • Apply NAC, segmentation, Zero Trust, and secure network-access principles across enterprise environments.

Firewall Administration

  • Administer and secure Palo Alto Networks next-generation firewalls and Panorama in multi-site enterprise environments.
  • Build, optimize, and audit security policies, NAT rules, and application-layer filtering.
  • Manage Panorama templates, device groups, and centralized firewall policies.
  • Administer GlobalProtect, site-to-site IPsec VPNs, and SSL decryption.
  • Analyze traffic and threat logs and use CLI tools to troubleshoot connectivity and security issues.
  • Perform PAN-OS upgrades, hotfixes, hardware health checks, and maintenance of high-availability firewall environments.
  • Integrate firewall identity services with Active Directory, LDAP, RADIUS, and MFA solutions.

Network Security

  • Implement network segmentation, VLAN segmentation, ACLs, NAC, 802.1X, VPN, and DMZ architectures.
  • Apply Zero Trust principles and integrate network infrastructure with enterprise security controls.
  • Secure network management using TACACS+, RADIUS, SNMP security, SSH, and device-hardening standards.
  • Partner with security teams to investigate and resolve network security incidents.

Network Design & Architecture

  • Design LAN/WAN, branch-office, data-center, and wireless network solutions.
  • Develop IP addressing strategies, VLAN standards, network templates, and configuration standards.
  • Design network redundancy and high-availability solutions using technologies such as HSRP, VRRP, GLBP, StackWise, and StackWise Virtual.
  • Perform network capacity and performance analysis and identify opportunities for optimization.
  • Evaluate emerging networking technologies and develop recommendations for enterprise adoption.
  • Establish and maintain network standards, documentation, and operational best practices.
  • Collaborate with security, systems, applications, and IT operations teams on enterprise infrastructure initiatives.

Requirements

  • 4-7 years of hands-on experience designing, implementing, and supporting enterprise network infrastructure.
  • Strong experience with Cisco Catalyst and Nexus switching platforms, Cisco routers, and enterprise networking technologies.
  • Extensive Layer 2/Layer 3 networking and routing experience, including OSPF and BGP; EIGRP experience in legacy environments.
  • Strong hands-on enterprise wireless experience with Cisco wireless solutions.
  • Hands-on Cisco ISE experience, including 802.1X, MAB, EAP, RADIUS/TACACS+, and certificate-based authentication.
  • Experience administering Palo Alto Networks firewalls and/or Panorama.
  • Strong understanding of network security, segmentation, NAC, Zero Trust, VPN, and DMZ architectures.
  • Demonstrated ability to independently troubleshoot complex enterprise network issues.
  • Experience designing network architectures and developing high-level and low-level network designs.
  • Strong understanding of high availability, redundancy, capacity planning, and network performance optimization.
  • Ability to lead infrastructure projects and collaborate effectively across technical teams.
  • Comfortable participating in a 24x7 operational environment, including critical incident response and planned maintenance.
  • Strong documentation, communication, analytical, and problem-solving skills., * Experience with Ekahau or similar wireless survey and analysis tools.
  • Cisco certifications such as CCNP Enterprise, CCNP Security, or equivalent experience.
  • Palo Alto Networks certifications or equivalent hands-on experience.
  • Experience supporting large-scale, highly available enterprise or data-center environments.
  • Experience developing network automation, configuration standards, or infrastructure-as-code solutions.

Benefits & conditions

Samsung SDSA offers a comprehensive suite of programs to support our employees:

  • Top-notch medical, dental, vision and prescription coverage
  • Wellness program
  • Parental leave
  • 401K match and savings plan
  • Flexible spending accounts
  • Life insurance
  • Paid Holidays
  • Paid Time off
  • Additional benefits

Samsung SDS America, Inc. is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to age, race, color, religion, sex, sexual orientation, gender identity or expression, national origin, disability, status as a protected veteran, marital status, genetic information, medical condition, or any other characteristic protected by law.

We are committed to providing reasonable accommodations to participate in the job application or interview process for candidates with disabilities. Please let your recruiter know if you need an accommodation at any point during the interview process.

The base pay range for this role depends on appropriate skills, experience, and technical level. The base salary range is USD $140,000.00-$160,000.00.

Individual base pay depends on various factors, in addition to primary work location, such as complexity and responsibility of role, job duties/requirements, and relevant experience and skills.

Certain roles are eligible for additional rewards, including annual bonus. U.S.-based employees have access to medical, dental, and vision insurance, a 401(k) plan and company match, short-term and long-term disability coverage, basic life insurance, and wellbeing benefits, among others. U.S.-based employees also receive, per calendar year, up to 10 scheduled paid holidays, and Paid Time Off.

Apply for this position

This job is hosted externally. Click below to view the full posting and apply.

Apply on www.thejobnetwork.com
Prepare application

Good distractions

Talks and stories from around this role — technically off-topic, practically not.

1:34 min

Pivoting careers into specialized platform engineering roles

Xavier Portilla Edo · LIVE

1:21 min

Addressing operational constraints involving international roaming and explicit permissions

Mario Bodemann Mario Bodemann

1:29 min

Expanding practical knowledge with community sandboxes and resources

Stuart Clark · LIVE

2:04 min

Enhancing network privacy with routing fees and onion routing

Andreas M Antonopoulos · LIVE

3:22 min

Transitioning from software engineering to security roles

Anna Oliveira · Coffee With Developers

47 sec

Validating user phone numbers prior to sending access codes

Alvaro Navarro · World Congress 2024

Videos

See all

Related articles

See all