Position Overview
The client, is seeking an experienced Network Infrastructure Engineer to support, modernize, and advance the State's enterprise networking environment.
This is a hands-on engineering role focused on designing, deploying, operating, and troubleshooting enterprise network infrastructure across data centers and statewide operations. The engineer will work closely with infrastructure and technology teams to ensure network services remain reliable, scalable, secure, and aligned with enterprise modernization initiatives.
The ideal candidate will bring extensive Cisco networking experience, strong data center networking expertise, and hands-on knowledge of Cisco ACI, Software-Defined Access (SDA), identity-driven networking, network security, and observability platforms.
Key Responsibilities Cisco ACI & Data Center Networking
- Design, implement, configure, and maintain Cisco Nexus platforms operating in ACI mode.
- Work extensively with VRFs, Bridge Domains (BDs), EPGs, ESGs, L3Out, contracts, and fabric policies.
- Integrate Cisco ACI with virtualization and container platforms, including Red Hat OpenShift VMM and Isovalent/Cilium.
- Configure and optimize RoCEv2 within the ACI fabric to support high-performance and low-latency workloads.
- Troubleshoot complex ACI issues involving fabric health, faults, endpoint learning, contracts, and multi-tenant segmentation.
- Develop and maintain network standards, documentation, and operational procedures.
Cisco Catalyst & Software-Defined Access
- Deploy, configure, and support Cisco Catalyst platforms in enterprise campus environments.
- Design, implement, and maintain Cisco Software-Defined Access (SDA) architectures.
- Support SDA Wired Fabric and Fabric-Enabled Wireless environments.
- Manage fabric underlay and overlay networks, policy mapping, authentication integrations, and assurance operations.
- Collaborate with wireless engineering teams to optimize network coverage, performance, and policy enforcement.
Identity-Driven Networking & Security
- Configure and administer Cisco Identity Services Engine (ISE).
- Support TACACS+ for network device administration, authentication, authorization, and policy-based access control.
- Implement and maintain endpoint profiling and identity-driven network policies.
- Integrate Cisco Cyber Vision intelligence into profiling, segmentation, and access-control workflows.
- Support Zero Trust initiatives through identity-centric segmentation and policy integration across ACI and SDA environments.
Network Visibility, Analytics & Observability
- Deploy and manage ThousandEyes for end-to-end network visibility, routing-path analysis, and performance monitoring.
- Support Cisco Cyber Vision for OT/IoT asset visibility, device classification, and behavioral analysis.
- Manage DNA Spaces for location analytics, telemetry, device behavior, and wireless intelligence.
- Analyze data from observability platforms and provide meaningful technical insights to leadership.
Core Network Engineering & Security
- Troubleshoot complex Layer 2 and Layer 3 network issues across enterprise environments.
- Work with VLANs, OSPF, BGP, STP, multicast, TCP/IP, routing, switching, QoS, and network security.
- Design and implement Palo Alto Networks security solutions across enterprise environments.
- Develop and maintain architecture diagrams, technical standards, runbooks, and asset inventories.
- Assist with network modernization initiatives, platform upgrades, procurement activities, and statewide technology projects.
- Perform other duties as assigned.
Required Qualifications
Candidates must clearly demonstrate the following qualifications on their resume:
- 15+ years of professional experience working with Cisco networking technologies.
- Hands-on, production-level experience with Cisco ACI.
- Strong knowledge of ACI constructs, including:
- VRF
- Bridge Domain (BD)
- EPG
- ESG
- L3Out
- Contracts
- Experience integrating Cisco ACI with OpenShift VMM and Cilium/Isovalent.
- Strong experience with Cisco Catalyst platforms and SDA fabric technologies.
- Hands-on experience administering Cisco ISE, including TACACS+ and policy-set-based NAC.
- Strong understanding of ThousandEyes, Cyber Vision, and DNA Spaces, or comparable network visibility and observability technologies.
- Strong knowledge of TCP/IP, routing, switching, QoS, and network security fundamentals.
- Ability to create clear network diagrams, technical documentation, and architectural artifacts.
- Strong analytical, troubleshooting, communication, and collaboration skills.
- Ability to work effectively in fast-paced, mission-critical enterprise environments.
Preferred Qualifications
The following qualifications are preferred but not required:
- Cisco certifications such as CCNP Data Center, CCNP Enterprise, CCIE, or equivalent hands-on experience.
- Hands-on experience with container networking and virtualization integrations.
- Familiarity with NIST frameworks and state-level cybersecurity requirements.
- Experience with network automation technologies such as:
- Previous experience supporting state government or large enterprise network environments.
- PCCSA Palo Alto Networks Certified Cybersecurity Associate, with knowledge of NGFW fundamentals, threats, App-ID, and security policies.
- PCNSA Palo Alto Networks Certified Network Security Administrator, with experience in NGFW configuration, security profiles, NAT, App-ID, URL filtering, and WildFire.