Network Engineer

OVERVIEW

We are seeking a dynamic, experienced Network Engineer to support, maintain, and enhance the Firm's global enterprise network infrastructure. This hands‑on role is responsible for day‑to‑day network operations, security administration, infrastructure upgrades, and troubleshooting across data center, cloud, office, and remote connectivity environments. The ideal candidate can demonstrate strong networking fundamentals, a security‑first mindset, and experience supporting highly available enterprise networks. This position works closely and collaboratively with the Infrastructure, Security, and Technology Operations teams to ensure network reliability, performance, and security across all firm locations.

RESPONSIBILITIES

CORE RESPONSIBILITIES:

Network Operations & Monitoring Performs routine health checks across network infrastructure, including firewalls, routing, switching, wireless, and access control platforms; Monitors network performance and proactively identify, troubleshoot, and resolve issues; Reviews system logs, alerts, and performance metrics to ensure optimal network operation; Conducts firewall rule reviews and cleanup activities to maintain a secure and efficient environment. Security & Access Control Manages firewall policies, VPN configurations, and network access controls; Maintains and renews certificates across network and security platforms; Supports Cisco ISE administration, authentication services, and network access control policies; Implements secure device management and access controls for network infrastructure; Partners with Information Security teams to support compliance and security initiatives. Network Upgrades & Lifecycle Management Plans and executes network hardware, firmware, and software upgrades; Supports network refresh and infrastructure modernization initiatives; Ensures upgrades and maintenance activities follow established change management procedures; Assists with hardware lifecycle management, replacement planning, and technology evaluations. Infrastructure Deployment Deploys and configures network hardware, including switches, routers, firewalls, wireless access points, and related infrastructure; Supports office expansions, relocations, and global network buildouts; Participates in the implementation of wired, wireless, IoT, and AV network solutions; Assists with Azure networking deployments and connectivity to cloud environments. Troubleshooting & Incident Response Troubleshoots network connectivity, routing, switching, wireless, and authentication issues; Supports troubleshooting and maintenance of enterprise routing environments, including BGP and EIGRP; Performs root cause analysis and implement corrective actions to prevent recurring issues; Provides escalation support for network-related incidents and service disruptions. Operational Maintenance & Disaster Recovery Participates in disaster recovery testing and failover exercises; Supports planned maintenance activities, including after-hours network changes and infrastructure projects; Assists in maintaining highly available and resilient network services; Participates in an on‑call rotation as required. Documentation & Continuous Improvement Maintains accurate network diagrams, standards, operational procedures, and infrastructure documentation; Identifies opportunities for automation and process improvement; Supports knowledge sharing and cross‑training initiatives within the IT department; and Performs additional duties as assigned.

QUALIFICATIONS

CANDIDATE QUALIFICATIONS:

Required Bachelor's degree in Computer Science, Information Technology, or a related field; At least 3-5 years of enterprise networking experience; Experience supporting enterprise routing, switching, and wireless environments; Experience with enterprise firewall technologies and network security concepts; Working knowledge of routing protocols, including BGP and EIGRP; Experience with Cisco networking solutions, including Catalyst switching, Catalyst wireless networking, and Cisco Identity Services Engine (ISE); Experience with enterprise switching technologies including VLANs, STP, port channels, and Layer 2/Layer 3 troubleshooting; Experience with certificate management and network security best practices;Strong troubleshooting, analytical, and communication skills;Ability to work independently and collaboratively within a team environment; and Ability to work additional hours as needed, including nights and weekends. Preferred Experience with Palo Alto Networks firewalls; Experience with Cisco DNA/Catalyst Center (DNAC); Experience supporting network infrastructure in cloud and hybrid environments; Experience with network automation and scripting tools such as Python, PowerShell, or Ansible. Cisco CCNA or CCNP certification; Palo Alto PCNSA or PCNSE certification; Microsoft Azure networking certifications (AZ-700 or related); and Experience working in a professional services, legal, or financial services environment. This position is located in our New York office, and currently has a hybrid work schedule, but that is subject to change. The estimated salary range for this position is $120,000 to $150,000. The actual salary offered will be based on a wide range of factors, including relevant skills, training, experience, education, and where applicable, licensure or certification obtained. Market and Firm factors are also considered. In addition to base salary and discretionary bonus(es), we offer a generous employee benefits package including, but not limited to, paid time off, medical, dental, vision care, 401(k) and substantial health club discounts. #J-18808-Ljbffr Cravath Swaine