Network Engineer

Cravath, Swaine & Moore LLP; New York, Northern (NY, KY); Hybrid; USD 120,000 - 150,000; Full time

Benefits offered by this job

Paid time off

Medical insurance

Dental insurance

Vision care

401(k)

Health club discounts

Job summary

Cravath, Swaine & Moore LLP seeks a Network Engineer to support and enhance the firm’s global enterprise network. This hands-on role covers data center, cloud, office, and remote connectivity with a security-first mindset.

You will work with Infrastructure, Security, and Technology Operations to ensure reliability, performance, and secure access across locations in a hybrid NY environment. Requires 3–5 years in enterprise networking and Cisco/I…

Qualifications

• Bachelor's degree in computer science, information technology, or related field.
• 3–5 years of enterprise networking experience in routing, switching, and wireless.
• Experience with enterprise firewall technologies and network security concepts.
• Knowledge of BGP/EIGRP routing protocols; Cisco Catalyst and ISE experience.
• Strong troubleshooting, analytical, and communication skills; able to work independently or in a team.

Responsibilities

• Perform routine health checks across network infrastructure including firewalls, routing, switching, wireless, and access control.
• Monitor performance, identify and resolve issues; review logs and metrics for optimization.
• Manage firewall policies, VPNs, certificates, and access control; support security initiatives.
• Plan and execute network upgrades and lifecycle management; follow change control processes.
• Deploy and configure network hardware; support office expansions and cloud connectivity (Azure).
• Troubleshoot connectivity, routing, switching, wireless, and authentication; support incident response.
• Participate in disaster recovery testing and after-hours maintenance; on-call rotation as needed.
• Maintain network documentation and pursue automation opportunities; cross-train teams.

Skills

Networking fundamentals

Troubleshooting

Security concepts

Analytical skills

Communication skills

Education

Bachelor's degree in CS/IT or related field

Tools

Cisco ISE

Palo Alto firewalls

DNAC (Cisco DNA Center)

Azure networking

Python

PowerShell

Ansible

Job description

OVERVIEW

We are seeking a dynamic, experienced Network Engineer to support, maintain, and enhance the Firm's global enterprise network infrastructure. This hands‑on role is responsible for day‑to‑day network operations, security administration, infrastructure upgrades, and troubleshooting across data center, cloud, office, and remote connectivity environments.

The ideal candidate can demonstrate strong networking fundamentals, a security‑first mindset, and experience supporting highly available enterprise networks. This position works closely and collaboratively with the Infrastructure, Security, and Technology Operations teams to ensure network reliability, performance, and security across all firm locations.

RESPONSIBILITIES

CORE RESPONSIBILITIES:

Network Operations & Monitoring

• Performs routine health checks across network infrastructure, including firewalls, routing, switching, wireless, and access control platforms;
• Monitors network performance and proactively identify, troubleshoot, and resolve issues;
• Reviews system logs, alerts, and performance metrics to ensure optimal network operation;
• Conducts firewall rule reviews and cleanup activities to maintain a secure and efficient environment.

Security & Access Control

• Manages firewall policies, VPN configurations, and network access controls;
• Maintains and renews certificates across network and security platforms;
• Supports Cisco ISE administration, authentication services, and network access control policies;
• Implements secure device management and access controls for network infrastructure;
• Partners with Information Security teams to support compliance and security initiatives.

Network Upgrades & Lifecycle Management

• Plans and executes network hardware, firmware, and software upgrades;
• Supports network refresh and infrastructure modernization initiatives;
• Ensures upgrades and maintenance activities follow established change management procedures;
• Assists with hardware lifecycle management, replacement planning, and technology evaluations.

Infrastructure Deployment

• Deploys and configures network hardware, including switches, routers, firewalls, wireless access points, and related infrastructure;
• Supports office expansions, relocations, and global network buildouts;
• Participates in the implementation of wired, wireless, IoT, and AV network solutions;
• Assists with Azure networking deployments and connectivity to cloud environments.

Troubleshooting & Incident Response

• Troubleshoots network connectivity, routing, switching, wireless, and authentication issues;
• Supports troubleshooting and maintenance of enterprise routing environments, including BGP and EIGRP;
• Performs root cause analysis and implement corrective actions to prevent recurring issues;
• Provides escalation support for network-related incidents and service disruptions.

Operational Maintenance & Disaster Recovery

• Participates in disaster recovery testing and failover exercises;
• Supports planned maintenance activities, including after-hours network changes and infrastructure projects;
• Assists in maintaining highly available and resilient network services;
• Participates in an on‑call rotation as required.

Documentation & Continuous Improvement

• Maintains accurate network diagrams, standards, operational procedures, and infrastructure documentation;
• Identifies opportunities for automation and process improvement;
• Supports knowledge sharing and cross‑training initiatives within the IT department; and
• Performs additional duties as assigned.

QUALIFICATIONS

CANDIDATE QUALIFICATIONS:

Required

• Bachelor's degree in Computer Science, Information Technology, or a related field;
• At least 3-5 years of enterprise networking experience;
• Experience supporting enterprise routing, switching, and wireless environments;
• Experience with enterprise firewall technologies and network security concepts;
• Working knowledge of routing protocols, including BGP and EIGRP;
• Experience with Cisco networking solutions, including Catalyst switching, Catalyst wireless networking, and Cisco Identity Services Engine (ISE);
• Experience with enterprise switching technologies including VLANs, STP, port channels, and Layer 2/Layer 3 troubleshooting;
• Experience with certificate management and network security best practices;Strong troubleshooting, analytical, and communication skills;Ability to work independently and collaboratively within a team environment; and
• Ability to work additional hours as needed, including nights and weekends.

Preferred

• Experience with Palo Alto Networks firewalls;
• Experience with Cisco DNA/Catalyst Center (DNAC);
• Experience supporting network infrastructure in cloud and hybrid environments;
• Experience with network automation and scripting tools such as Python, PowerShell, or Ansible.
• Cisco CCNA or CCNP certification;
• Palo Alto PCNSA or PCNSE certification;
• Microsoft Azure networking certifications (AZ-700 or related); and
• Experience working in a professional services, legal, or financial services environment.

This position is located in our New York office, and currently has a hybrid work schedule, but that is subject to change. The estimated salary range for this position is $120,000 to $150,000. The actual salary offered will be based on a wide range of factors, including relevant skills, training, experience, education, and where applicable, licensure or certification obtained. Market and Firm factors are also considered. In addition to base salary and discretionary bonus(es), we offer a generous employee benefits package including, but not limited to, paid time off, medical, dental, vision care, 401(k) and substantial health club discounts.