Network Infrastructure Engineer

Job description

Responsibilities

• Design, implementation, security, and ongoing support of the Client enterprise data center and campus network infrastructure.
• Work with Cisco ACI, Software-Defined Access (SDA), Cisco Identity Services Engine (ISE), Cisco Catalyst platforms, and observability tools including Thousand Eyes, Cyber Vision, and DNA Spaces.
• Administration of Palo Alto firewalls supporting statewide systems.
• Cisco ACI fabric design and administration (VRF, BD, EPG/ESG, L3Out).
• ACI integrations with OpenShift VMM and Cilium/Isovalent.
• Catalyst and SDA wired/wireless fabric deployment and support.
• Identity-driven access configuration using Cisco ISE (TACACS, authentication/authorization, device profiling).
• Thousand Eyes monitoring, Cyber Vision integration, and DNA Spaces analytics.
• Palo Alto next-generation firewall configuration, policy development, and troubleshooting.
• Network documentation, lifecycle planning, and support of mission-critical services.

Requirements

• High School education required.
• Minimum of 15 years of experience working with Cisco networking.
• Hands-on experience with Cisco ACI in production environments.
• Deep knowledge of ACI constructs (VRF, BD, EPG, ESG, L3Out, contracts).
• Experience integrating ACI with OpenShift VMM and Cilium/Isovalent.
• Proficiency with Cisco Catalyst platforms and SDA fabric technologies.
• Experience administering Cisco ISE including TACACS and policy-set based NAC.
• Strong understanding of Thousand Eyes, Cyber Vision, and DNA Spaces or comparable tools.
• Solid command of core TCP/IP, routing, switching, QoS, and network security fundamentals.
• Ability to develop clear diagrams, documentation, and architectural artifacts.
• Strong analytical and communication skills with the ability to work in fast-paced, mission-critical environments.
• Ability to support high-availability, enterprise-scale infrastructure.

Required Skills

• Cisco ACI, Nexus platforms, multi-tenant segmentation.
• SDA campus architectures.
• Cisco ISE policy sets and NAC.
• Palo Alto firewall administration and security profiles.
• Strong L2/L3 routing and switching skills.

Preferred Skills

• Hands-on experience with container networking and virtualization integrations.
• Familiarity with NIST frameworks and state-level cybersecurity requirements.
• Experience with network automation tools (Python, Ansible, REST APIs).
• Prior work in state government or large enterprise network environments.
• PCCSA – Palo Alto Networks Certified Cybersecurity Associate.
• PCNSA – Palo Alto Network Security Administrator.

Benefits

Details regarding benefits are typically provided during the interview process or upon request.