Network Infrastructure Engineer

ePATHUSA
  • Clinton, Maryland
    9 days ago

    Job Description

    Seeking a Network Infrastructure Engineer to support and advance the State's enterprise networking environment. Additionally;
    • Design, deploy, and operate new LDC (Liquor Distribution Center) fabrics, networks, idnetify-driven access systems, and observability platforms.
    • Work closely with infrastructure team to ensure the State's network services remain reliable, scalable, secure, and aligned with enterprise goals.
    • Design, implement, and maintain Cisco Nexus platforms running ACI mode, including VRFs, Bridge Domains, EPGs/ESGs, L3Out, contracts, and fabric policies.
    • Integrate ACI with virtualization and container platforms including Red Hat OpenShift VMM and Isovalent/Cilium.
    • Configure and optimize RoCEv2 within the ACI fabric for high-performance, low-latency workloads.
    • Conduct advanced troubleshooting of ACI fabric health, faults, endpoint learning, contracts, and multi-tenant segmentation.
    • Develop and maintain fabric documentation, standards, and operational procedures.
    • Deploy and support Cisco Catalyst platforms within campus environments.
    • Design and maintain Software-Defined Access (SDA) architectures, including SDA Wired Fabric and Fabric-Enabled Wireless.
    • Manage fabric underlay and overlay, policy mapping, authentication integrations, and assurance operations.
    • Collaborate with wireless engineers to optimize coverage, performance, and policy enforcement across SDA. 
    • Configure and administer Cisco Identity Services Engine (ISE) for TACACS+ device administration, authentication and authorization policy sets, and endpoint profiling.
    • Integrate Cyber Vision intelligence into profiling, segmentation, and access control workflows.
    • Support Zero Trust efforts through identity-centric segmentation and policy integration across ACI and SDA fabrics.
    • Deploy and manage ThousandEyes for end-to-end visibility, routing path analysis, and performance monitoring.
    • Implement and support Cisco Cyber Vision for OT/IoT asset visibility, device classification, and behavior analysis.
    • Manage DNA Spaces for location analytics, telemetry ingestion, device behavior, and wireless intelligence.
    • Provide meaningful insights to leadership using data from these observability platforms.
    • Troubleshoot complex L2/L3 network issues across multiple environments including VLANs, OSPF, BGP, STP, and multicast.
    • Designing, and implementing Palo Alto Networks security solutions across enterprise environments.
    • Create and maintain documentation including architecture diagrams, standards, runbooks, and asset inventories.
    • Assist in modernization planning, platform upgrades, procurement processes, and statewide technology initiatives.


    Requirements

    Skills
    Required/Preferred
    Years
    Candidate Experience
    Working with Cisco Networking
    Required
    15

    Hands-on experience with Cisco ACI in production environments.
    Required
    15

    Deep knowledge of ACI constructs (VRF, BD, EPG, ESG, L3Out, contracts).
    Required
    15

    Experience integrating ACI with OpenShift VMM and Cilium/Isovalent.
    Required
    15

    Proficiency with Cisco Catalyst platforms and SDA fabric technologies.
    Required
    15

    Experience administering Cisco ISE including TACACS+ and policy-set based NAC.
    Required
    15

    Strong understanding of ThousandEyes, Cyber Vision, and DNA Spaces or comparable tools.
    Required
    15

    Solid command of core TCP/IP, routing, switching, QoS, and network security fundamentals.
    Required
    15

    Ability to develop clear diagrams, documentation, and architectural artifacts.
    Required
    15

    Strong analytical and communication skills with the ability to work in fast-paced, mission-critical environments.
    Required
    15

    Cisco certifications such as CCNP Data Center, CCNP Enterprise, CCIE, or equivalent experience.
    Preferred


    Hands-on experience with container networking and virtualization integrations.
    Preferred


    Familiarity with NIST frameworks and state-level cybersecurity requirements.
    Preferred


    Experience with network automation tools (Python, Ansible, REST APIs).
    Preferred


    Prior work in state government or large enterprise network environments.
    Preferred


    PCCSA – Palo Alto Networks Certified Cybersecurity Associate Foundational security, NGFW basics, threats, App-ID, and policy.
    Preferred


    PCNSA – Palo Alto Networks Certified Network Security Administrator
    Preferred


    Focuses on NGFW configuration, security profiles, NAT, App-ID, U
    Preferred




    Benefits

    Benefit Package includes: 
    Paid Sick Time
    Insurance for Medical, Dental, Vision and Life Available
    401(k) including Employer Match 
    HSA, Short-term & Long-term Disability Available 
    We are an EEO/Veterans/Disabled employer


    Numbers & Facts

    LocationClinton, Maryland
    Websitehttps://www.epathusa.net/careers/

    Skills

    • Access Controlunmatched
    • Analysis Skillsunmatched
    • Ansibleunmatched
    • Application Programming Interface (API)unmatched
    • Applications Securityunmatched
    • Authenticationunmatched
    • Automationunmatched
    • BGPunmatched
    • CCIE - Cisco Certified Internetwork Expertunmatched
    • CCNP - Cisco Certified Network Professionalunmatched
    • Cisco Catalyst Switchesunmatched
    • Cisco Network Systemsunmatched
    • Cisco Nexus Switchesunmatched
    • Communication Skillsunmatched
    • DNAunmatched
    • Distribution Servicesunmatched
    • Documentationunmatched
    • Documentation Standardsunmatched
    • Enterprise Protectionunmatched
    • Environmental Issuesunmatched
    • Hardware Virtualizationunmatched
    • Identify Issuesunmatched
    • Insuranceunmatched
    • Internet Securityunmatched
    • Internet of Thingsunmatched
    • Layer 3 Protocolsunmatched
    • Leadershipunmatched
    • Multicastunmatched
    • Network Administration/Managementunmatched
    • Network Integrationunmatched
    • Network Operations Centerunmatched
    • Network Securityunmatched
    • Open Shortest Path First Protocol (OSPF)unmatched
    • Operations Processesunmatched
    • Performance Analysisunmatched
    • Performance Tuning/Optimizationunmatched
    • Purchasing/Procurementunmatched
    • Python Programming/Scripting Languageunmatched
    • REST (Representational State Transfer)unmatched
    • Red Hat Linux Operating Systemunmatched
    • Software Administrationunmatched
    • Software Designunmatched
    • Spanning Tree Protocolsunmatched
    • Systems Administration/Managementunmatched
    • TACACS+ (Terminal Access Controller Access Control System Plus)unmatched
    • Team Playerunmatched
    • Telemetryunmatched
    • U.S. National Institute of Standards and Technology (NIST)unmatched
    • VLAN (Virtual Local Area Network)unmatched
    • Virtualizationunmatched
    • Wireless Communicationsunmatched

    Be found by employers

    5,500+ employers search our resume database daily. Add yours to get found by recruiters looking for candidates like you.

    Level up your application

    Professional resume templates

    Browse dozens of recruiter approved resume templates, layouts and formats. Choose your favorite and make it your own in minutes.

    Free resume templates

    Free resume builder

    Improve your existing resume or start from scratch and create a standout, ATS-friendly resume. Add job-specific content, download and apply.

    Free resume builder