We are seeking a hands‑on Senior Network Engineer one of a client with deep expertise in Routing & Switching, Cisco ACI, and VxLAN/EVPN (must-have). The ideal candidate will lead the design, deployment, and operations of modern data center and campus networks and bring strong capabilities in either NetDevOps/Automation (Python, Ansible, CI/CD) or VMware NSX for overlay/SDN.
Job Description
Architecture & Design
- Design and implement L2/L3 networks across DC and campus environments.
- Lead ACI/VxLAN/EVPN fabric designs (Multi-pod/Multisite, route types, control-plane considerations).
- Create high-availability designs (ECMP, MLAG/vPC, BGP/OSPF/IS-IS).
Deployment & Operations
- Configure and maintain leaf-spine architectures, border gateways, and interconnects.
- Troubleshoot complex issues across underlay/overlay, control plane, and data plane.
- Perform capacity planning, performance tuning, and proactive monitoring.
Skill Requirements
- Bachelor’s in CS/EE/IT or equivalent experience.
- Certifications (preferred): CCNP/CCIE, JNCIP/JNCIE, Arista ACE, VMware VCP-NV.
- Experience: 8+ years in network engineering; 4+ years hands‑on VxLAN/EVPN.
Must-Have Skills
- Routing & Switching: BGP, OSPF/IS-IS, eBGP/iBGP, route redistribution, policy-based routing, QoS.
- Data Center Fabrics: VxLAN/EVPN (mandatory) with practical experience in DC leaf‑spine design.
- Vendor Proficiency: One or more—Cisco (Nexus/IOS-XE), Arista EOS, Juniper QFX/EX.
- Troubleshooting: Packet analysis, control‑plane convergence, FIB/ARP/ND, MTU/MSS, ECMP.
- Preferred - NetDevOps / Automation / Python (requests, netmiko/paramiko, NAPALM, pyATS).
- Ansible (Jinja2, inventories, roles).
- Version control (Git).
- CI/CD (GitHub Actions/GitLab CI).
- Network source of truth (Nautilus/NetBox).
- Telemetry/observability (SNMP, gNMI, streaming telemetry, Prometheus, Grafana).
- VMware NSX (SDN) / NSX‑T design and operations: T0/T1 gateways, segments, overlay transport zones, Distributed firewall, security groups, micro‑segmentation, Integration with physical gateways, north‑south routing, Edge clusters, load balancer, policy automation.
Nice‑to‑Have
- EVPN route types (RT-2/RT-5), IRB, symmetric/asymmetric routing.
- Multisite/Multipod EVPN, DCI, MPLS L3VPN.
- SD-WAN (Viptela, Prisma, Fortinet).
- Cloud networking (AWS TGW, Azure vWAN, GCP VPC).
- Firewalls (Palo Alto, Fortinet, Cisco ASA/FTD).
- NAC (ISE/Aruba ClearPass).