Network Engineer

Network Engineer - Full Time, Hybrid in NYC (US Citizen or GC Holder Only)We are seeking a dynamic, experienced Network Engineer to support, maintain, and enhance the Firm's global enterprise network infrastructure. This hands-on role is responsible for day-to-day network operations, security administration, infrastructure upgrades, and troubleshooting across data center, cloud, office, and remote connectivity environments.Hybrid: 2-3 days onsite in NY officeThe ideal candidate can demonstrate strong networking fundamentals, a security-first mindset, and experience supporting highly available enterprise networks. This position works closely and collaboratively with the Infrastructure, Security, and Technology Operations teams to ensure network reliability, performance, and security across all firm locations.CORE RESPONSIBILITIES:Network Operations & MonitoringPerforms routine health checks across network infrastructure, including firewalls, routing, switching, wireless, and access control platforms;Monitors network performance and proactively identify, troubleshoot, and resolve issues;Reviews system logs, alerts, and performance metrics to ensure optimal network operation;Conducts firewall rule reviews and cleanup activities to maintain a secure and efficient environment.Security & Access ControlManages firewall policies, VPN configurations, and network access controls;Maintains and renews certificates across network and security platforms;Supports Cisco Client administration, authentication services, and network access control policies;Implements secure device management and access controls for network infrastructure;Partners with Information Security teams to support compliance and security initiatives.Network Upgrades & Lifecycle ManagementPlans and executes network hardware, firmware, and software upgrades;Supports network refresh and infrastructure modernization initiatives;Ensures upgrades and maintenance activities follow established change management procedures;Assists with hardware lifecycle management, replacement planning, and technology evaluations.Infrastructure DeploymentDeploys and configures network hardware, including switches, routers, firewalls, wireless access points, and related infrastructure;Supports office expansions, relocations, and global network buildouts;Participates in the implementation of wired, wireless, IoT, and AV network solutions;Assists with Azure networking deployments and connectivity to cloud environments.Troubleshooting & Incident ResponseTroubleshoots network connectivity, routing, switching, wireless, and authentication issues;Supports troubleshooting and maintenance of enterprise routing environments, including BGP and EIGRP;Performs root cause analysis and implement corrective actions to prevent recurring issues;Provides escalation support for network-related incidents and service disruptions.Operational Maintenance & Disaster RecoveryParticipates in disaster recovery testing and failover exercises;Supports planned maintenance activities, including after-hours network changes and infrastructure projects;Assists in maintaining highly available and resilient network services;Participates in an on-call rotation as required.Documentation & Continuous ImprovementMaintains accurate network diagrams, standards, operational procedures, and infrastructure documentation;Identifies opportunities for automation and process improvement;Supports knowledge sharing and cross-training initiatives within the IT department; andPerforms additional duties as assigned.CANDIDATE QUALIFICATIONS:RequiredBachelor's degree in Computer Science, Information Technology, or a related field;At least 3-5 years of enterprise networking experience;Experience supporting enterprise routing, switching, and wireless environments;Experience with enterprise firewall technologies and network security concepts;Working knowledge of routing protocols, including BGP and EIGRP;Experience with Cisco networking solutions, including Catalyst switching, Catalyst wireless networking, and Cisco Identity Services Engine (Client);Experience with enterprise switching technologies including VLANs, STP, port channels, and Layer 2/Layer 3 troubleshooting;Experience with certificate management and network security best practices;Strong troubleshooting, analytical, and communication skills;Ability to work independently and collaboratively within a team environment; andAbility to work additional hours as needed, including nights and weekends.PreferredExperience with Palo Alto Networks firewalls;Experience with Cisco DNA/Catalyst Center (DNAC);Experience supporting network infrastructure in cloud and hybrid environments;Experience with network automation and scripting tools such as Python, PowerShell, or Ansible.Cisco CCNA or CCNP certification;Palo Alto PCNSA or PCNSE certification;Microsoft Azure networking certifications (AZ-700 or related); andExperience working in a professional services, legal, or financial services environment.