SME - Cisco Application Centric Infrastructure (ACI), Network Automation

Sapsf; United States; In loco; USD 140.000 - 180.000; Tempo pieno

Descrizione del lavoro

SAPSF is seeking a hands-on Senior Network Engineer with deep expertise in Routing & Switching, ACI and VxLAN/EVPN. You will lead design, deployment, and operations of modern data center and campus networks, with capability in NetDevOps/Automation or NSX for overlay/SDN.

You will architect leaf-spine fabrics, implement ECMP, and ensure security segmentation. Collaboration with cloud/security teams is essential for hybrid networking across AWS/Azure/GCP.

Competenze

• Bachelor's in CS/EE/IT or equivalent experience.
• 8+ years in network engineering; 4+ years hands-on VxLAN/EVPN.

Mansioni

• Architecture & Design: Design and implement L2/L3 networks across DC and campus environments.
• Deployment & Operations: Configure and maintain leaf-spine architectures, border gateways, and interconnects.
• Security & Segmentation: Implement micro/macro segmentation (EVPN, NSX policies) and ensure policy compliance.
• Automation / NSX: Build network automation for config/validation (Python, Ansible, NAPALM); design and manage NSX-T overlays.
• Documentation & Governance: Produce HLD/LLD, SOPs, runbooks; maintain network diagrams and CMDB entries.
• Collaboration: Partner with cloud, security, and platform teams on hybrid networking; mentor engineers.

Conoscenze

Routing & Switching

VxLAN/EVPN

NetDevOps / Automation

VMware NSX

ACI

Python

Ansible

Nornir / pyATS

Git / CI/CD

Nautilus/NetBox

Formazione

Bachelor's degree in CS/EE/IT or equivalent experience

Strumenti

Cisco Nexus/IOS-XE

Arista EOS

VMware NSX-T

Descrizione del lavoro

Career Opportunities: SME - Cisco Application Centric Infrastructure (ACI), Network Automation (146365)

Requisition ID146365-Posted10/02/2026

Job Summary : Role Summary We are seeking a hands-on Senior Network Engineer with deep expertise in Routing & Switching , ACI and VxLAN/EVPN (must-have). The ideal candidate will lead design, deployment, and operations of modern data center and campus networks, and bring strong capability in either NetDevOps/Automation (Python, Ansible, CI/CD) or VMware NSX for overlay/SDN.

Job Responsibilities

• Architecture & Design:
  • o Design and implement L2/L3 networks across DC and campus environments.
  • o Lead ACI/VxLAN/EVPN fabric designs (Multi-pod/Multisite, route types, control-plane considerations).
  • o Create high-availability designs (ECMP, MLAG/vPC, BGP/OSPF/IS-IS).
• Deployment & Operations:
  • o Configure and maintain leaf-spine architectures, border gateways, and interconnects.
  • o Troubleshoot complex issues across underlay/overlay, control plane, and data plane.
  • o Perform capacity planning, performance tuning, and proactive monitoring.
• Security & Segmentation:
  • o Implement micro/macro segmentation (EVPN, NSX policies), firewall integration, and route filtering.
  • o Ensure compliance with internal and industry standards.
• Automation / NSX (one or both):
  • o NetDevOps/Automation: Build network automation for config/validation (Python, Ansible, Nornir, Git).
  • o VMware NSX: Design and manage NSX-T overlays, T0/T1, segments, distributed firewall, and integrations.
• Documentation & Governance:
  • o Produce HLD/LLD, SOPs, runbooks, and maintain accurate network diagrams and CMDB entries.
  • o Own change requests, risk assessments, and rollback plans.
• Collaboration:
  • o Partner with cloud, security, and platform teams on hybrid networking (AWS/Azure/GCP, SD-WAN).
  • o Mentor junior engineers; contribute to standards and best practices.
• Must-Have Skills:
  • o Routing & Switching: BGP, OSPF/IS-IS, eBGP/iBGP, route redistribution, policy-based routing, QoS.
  • o Data Center Fabrics: VxLAN/EVPN (mandatory) with practical experience in DC leaf-spine design.
  • o Vendor Proficiency: One or more - Cisco (Nexus/IOS-XE), Arista EOS, Juniper QFX/EX.
  • o Troubleshooting: Packet analysis, control-plane convergence, FIB/ARP/ND, MTU/MSS, ECMP.
  • o Preferred - NetDevOps / Automation: Python (requests, netmiko/paramiko, NAPALM, pyATS),
  • o Ansible (Jinja2, inventories, roles),
  • o Version control (Git), CI/CD (GitHub Actions/GitLab CI),
  • o Network source of truth (Nautilus/NetBox),
  • o Telemetry/observability (SNMP, gNMI, streaming telemetry, Prometheus, Grafana).
  • o VMware NSX (SDN): NSX-T design and operations: T0/T1 gateways, segments, overlay transport zones,
  • o Distributed firewall, security groups, micro-segmentation,
  • o Integration with physical gateways, north-south routing,
  • o Edge clusters, load balancer, policy automation.
  • o Nice-to-Have: EVPN route types (RT-2/RT-5), IRB, symmetric/asymmetric routing,
  • o Multisite/Multipod EVPN, DCI, MPLS L3VPN,
  • o SD-WAN (Viptela, Prisma, Fortinet),
  • o Cloud networking (AWS TGW, Azure vWAN, GCP VPC),
  • o Firewalls (Palo Alto, Fortinet, Cisco ASA/FTD), NAC (ISE/Aruba ClearPass).

Key Responsibilities

NA

Skill Requirements

• Routing & Switching: BGP, OSPF/IS-IS, eBGP/iBGP, route redistribution, policy-based routing, QoS.
• Data Center Fabrics: VxLAN/EVPN (mandatory) with practical experience in DC leaf-spine design.
• Vendor Proficiency: One or more - Cisco (Nexus/IOS-XE), Arista EOS, Juniper QFX/EX.
• Troubleshooting: Packet analysis, control-plane convergence, FIB/ARP/ND, MTU/MSS, ECMP.
• Preferred - NetDevOps / Automation: Python (requests, netmiko/paramiko, NAPALM, pyATS),
• Ansible (Jinja2, inventories, roles),
• Version control (Git), CI/CD (GitHub Actions/GitLab CI),
• Network source of truth (Nautilus/NetBox),
• Telemetry/observability (SNMP, gNMI, streaming telemetry, Prometheus, Grafana).
• VMware NSX (SDN): NSX-T design and operations: T0/T1 gateways, segments, overlay transport zones,
• Distributed firewall, security groups, micro-segmentation,
• Integration with physical gateways, north-south routing,
• Edge clusters, load balancer, policy automation.
• Nice-to-Have: EVPN route types (RT-2/RT-5), IRB, symmetric/asymmetric routing,
• Multisite/Multipod EVPN, DCI, MPLS L3VPN,
• SD-WAN (Viptela, Prisma, Fortinet),
• Cloud networking (AWS TGW, Azure vWAN, GCP VPC),
• Firewalls (Palo Alto, Fortinet, Cisco ASA/FTD), NAC (ISE/Aruba ClearPass).

Other Requirements

• Bachelor's in CS/EE/IT or equivalent experience.
• Certifications (preferred): CCNP/CCIE, JNCIP/JNCIE, Arista ACE, VMware VCP-NV.
• Experience: 8+ years in network engineering; 4+ years hands-on VxLAN/EVPN.