Network Engineer

Network Engineer

Objective: The objective of a Network Engineer is to design, implement, and maintain a robust, secure, and high-performing network infrastructure that supports the organization’s strategic goals.

Reports to: Head of Global IT Network

Roles:

LAN

User & device authentication

Switching

Admin Radius/Tacacs

Wireless Network

SDWAN

Data center Network

Main Responsibilities:

Providing (planning, building, maintaining, troubleshooting) network access control for all devices connected to any access-layer switch of the global Hafele network to prevent any unauthorizedâ access to any Hafele internal network. Increases security against any physical on-site attack and prevents connectivity of non-authorized/unknown devices. Also used to automatically assign the correct VLANs to switchports (depending on device classification)â .

Providing a secure AAA backbone for the administrative access of all network devices (switches, datacenter switches, firewalls, Wi-Fi APs, Load Balancers, Network Management Systems). Ensures secure admin-login (even when AD is compromised) to infrastructure devices via TACACS+ or RADIUS as well as accounting information.â

Planning, building and running (maintaining and troubleshooting) the worldwide Hafele wireless infrastructure to support wireless clients in multiple different wireless networks for multiple different use-cases (office machines, warehouse devices, guest hotspot, special purpose networks) using different authentication methods (WPA2 Enterprise/802.1X, MAB, WPA2 PSK) with the goal of providing reliable high-quality Wi-Fiâ connectivity on any Hafele campus in all areas defined by the customer.

Providing basic network switching to enable the connection of cabled Hafele devices in any Hafele site (such as Laptops, printers, PCs, Thin-Clients, Wireless Access-Points, OT-Devices in warehouses, etc.) to the Hafele network.

Central network infrastructure in all sites connecting all devices and the backbone for all kind of connectivity.â

Providingâ a virtual WAN architectureâ that allows businesses to utilize any combination of transport services. Securely connect users to internal services as well as to any kind of IaaS and SaaS cloud services. Through centralized control, visibility and security across the overall WAN, enterprise security can be realized.â

MDR and XDR services monitor and stop security breaches and malicious traffic.â

Providing a high-security, high-availablity and high-throughput network in the Hafele datacenter locations, specially engineered for resilience and the requirements of datacenter use.

Includes L2 connectivity of Servers and other datacenter devices as well as WAN-Connectivity, WAN-Routing, L3/routing between networks with firewalling/securityâ

Skills

Technical Skills:

Network Design and Architecture

Advanced Routing and Switching

Security Best Practices

Troubleshooting and Diagnostics

VoIP and QoS

Disaster Recovery and Business Continuity

Vendor Management

Soft Skills:

Strategic Thinking

Communication and Collaboration

Problem-Solving Under Pressure

Project Management

Adaptability

Critical Thinking and Decision-Making

Customer-Focused Mindset

Work Hours: 8:00 - 5:00 PM ET, occasional weekends and holidays may be needed.

Education and Experience:

An associate degree or bachelor's degree, or equivalent work experience.

Preference will be given to candidates with training, experience, or certification.

Language Skills:

Ability to read, analyze, and interpret general business periodicals, professional journals, technical procedures, or governmental regulations. Ability to write reports, business correspondence, and procedure manuals. Ability to effectively present information and respond to questions from groups of managers and other employees of the organization.

German and / or Spanish skills are a plus.