Network Engineer

Samsung SDS America is a global information technology services organization that delivers innovative technology solutions supporting enterprise clients across logistics, digital transformation, cloud, mobility, and business operations.

As part of Samsung SDS, employees work alongside talented professionals on technologies that improve business performance, enhance operational efficiency, and accelerate digital transformation initiatives across global organizations.

The Network Engineer is responsible for designing, implementing, administering, optimizing, and troubleshooting enterprise network infrastructure supporting corporate campuses, branch offices, data centers, remote users, and wireless environments.

The engineer will operate in a 24x7 enterprise environment, supporting critical incidents, planned maintenance, infrastructure upgrades, and continuous improvements while maintaining network availability, performance, and security.

• Design, configure, maintain, and troubleshoot enterprise Cisco switching and routing environments.
• Support Cisco Catalyst and Nexus platforms, including Catalyst 9000-series and current-generation Nexus switches.
• Configure and troubleshoot Layer 2/Layer 3 networking, VLANs, 802.1Q trunking, Ether Channel/LACP, SVIs, inter-VLAN routing, and DHCP relay.
• Implement and troubleshoot STP, RSTP, MST, root-bridge optimization, loop prevention, and high-availability technologies including Stack Wise and Stack Wise Virtual.
• Configure and troubleshoot OSPF, BGP, EIGRP in legacy environments, static/floating static routes, route redistribution, route filtering, ECMP, VRF/VRF-Lite, and policy-based routing.
• Support WAN, Internet-edge, and data-center routing, including troubleshooting asymmetric routing and route propagation issues.
• Implement network security controls including port security, storm control, BPDU Guard/Root Guard, DHCP Snooping, Dynamic ARP Inspection, and IP Source Guard.
• Perform software upgrades, configuration management, hardware lifecycle planning, and network capacity planning.

• Design, deploy, administer, troubleshoot, and optimize enterprise Cisco wireless environments.
• Support Cisco wireless controllers, Catalyst wireless solutions, access points, corporate and guest SSIDs, and high-density wireless environments.
• Configure and troubleshoot 802.1X, WPA2/WPA3 Enterprise, wireless authentication, roaming, RF performance, and client connectivity.
• Conduct wireless performance and capacity analysis and participate in wireless surveys.
• Utilize wireless analysis tools such as Ekahau; experience is highly desirable.

• Implement, administer, and troubleshoot Cisco ISE for enterprise network access control.
• Configure 802.1X, MAB, EAP, PEAP, EAP-TLS, and certificate-based authentication.
• Integrate ISE with Active Directory, RADIUS, and TACACS+ environments.
• Configure authorization policies, guest portals, and BYOD onboarding.
• Apply NAC, segmentation, Zero Trust, and secure network-access principles across enterprise environments.

• Administer and secure Palo Alto Networks next-generation firewalls and Panorama in multi-site enterprise environments.
• Build, optimize, and audit security policies, NAT rules, and application-layer filtering.
• Manage Panorama templates, device groups, and centralized firewall policies.
• Administer Global Protect, site-to-site IPsec VPNs, and SSL decryption.
• Analyze traffic and threat logs and use CLI tools to troubleshoot connectivity and security issues.
• Perform PAN-OS upgrades, hotfixes, hardware health checks, and maintenance of high-availability firewall environments.
• Integrate firewall identity services with Active Directory, LDAP, RADIUS, and MFA solutions.

• Implement network segmentation, VLAN segmentation, ACLs, NAC, 802.1X, VPN, and DMZ architectures.
• Apply Zero Trust principles and integrate network infrastructure with enterprise security controls.
• Secure network management using TACACS+, RADIUS, SNMP security, SSH, and device-hardening standards.
• Partner with security teams to investigate and resolve network security incidents.

• Desi…