SME - Cisco Application Centric Infrastructure (ACI), Network Automation

Job Summary

Job Summary : Role Summary We are seeking a hands-on Senior Network Engineer with deep expertise in Routing & Switching , ACI and VxLAN/EVPN (must-have). The ideal candidate will lead design, deployment, and operations of modern data center and campus networks, and bring strong capability in either NetDevOps/Automation (Python, Ansible, CI/CD) or VMware NSX for overlay/SDN.
Job Responsibilities : Key Responsibilities • Architecture & Design: o Design and implement L2/L3 networks across DC and campus environments. o Lead ACI/VxLAN/EVPN fabric designs (Multi-pod/Multisite, route types, control-plane considerations). o Create high-availability designs (ECMP, MLAG/vPC, BGP/OSPF/IS-IS). • Deployment & Operations: o Configure and maintain leaf-spine architectures, border gateways, and interconnects. o Troubleshoot complex issues across underlay/overlay, control plane, and data plane. o Perform capacity planning, performance tuning, and proactive monitoring. • Security & Segmentation: o Implement micro/macro segmentation (EVPN, NSX policies), firewall integration, and route filtering. o Ensure compliance with internal and industry standards. • Automation / NSX (one or both): o NetDevOps/Automation: Build network automation for config/validation (Python, Ansible, Nornir, Git). o VMware NSX: Design and manage NSX-T overlays, T0/T1, segments, distributed firewall, and integrations. • Documentation & Governance: o Produce HLD/LLD, SOPs, runbooks, and maintain accurate network diagrams and CMDB entries. o Own change requests, risk assessments, and rollback plans. • Collaboration: o Partner with cloud, security, and platform teams on hybrid networking (AWS/Azure/GCP, SD-WAN). o Mentor junior engineers; contribute to standards and best practices. Must-Have Skills • Routing & Switching: BGP, OSPF/IS-IS, eBGP/iBGP, route redistribution, policy-based routing, QoS. • Data Center Fabrics: VxLAN/EVPN (mandatory) with practical experience in DC leaf-spine design. • Vendor Proficiency: One or more—Cisco (Nexus/IOS-XE), Arista EOS, Juniper QFX/EX. • Troubleshooting: Packet analysis, control-plane convergence, FIB/ARP/ND, MTU/MSS, ECMP. Preferred - NetDevOps / Automation • Python (requests, netmiko/paramiko, NAPALM, pyATS), • Ansible (Jinja2, inventories, roles), • Version control (Git), CI/CD (GitHub Actions/GitLab CI), • Network source of truth (Nautilus/NetBox), • Telemetry/observability (SNMP, gNMI, streaming telemetry, Prometheus, Grafana). VMware NSX (SDN) • NSX-T design and operations: T0/T1 gateways, segments, overlay transport zones, • Distributed firewall, security groups, micro-segmentation, • Integration with physical gateways, north-south routing, • Edge clusters, load balancer, policy automation. Nice-to-Have • EVPN route types (RT-2/RT-5), IRB, symmetric/asymmetric routing, • Multisite/Multipod EVPN, DCI, MPLS L3VPN, • SD-WAN (Viptela, Prisma, Fortinet), • Cloud networking (AWS TGW, Azure vWAN, GCP VPC), • Firewalls (Palo Alto, Fortinet, Cisco ASA/FTD), NAC (ISE/Aruba ClearPass). 

Key Responsibilities

NA

Skill Requirements

Skill Requirement : Must-Have Skills • Routing & Switching: BGP, OSPF/IS-IS, eBGP/iBGP, route redistribution, policy-based routing, QoS. • Data Center Fabrics: VxLAN/EVPN (mandatory) with practical experience in DC leaf-spine design. • Vendor Proficiency: One or more—Cisco (Nexus/IOS-XE), Arista EOS, Juniper QFX/EX. • Troubleshooting: Packet analysis, control-plane convergence, FIB/ARP/ND, MTU/MSS, ECMP. Preferred - NetDevOps / Automation • Python (requests, netmiko/paramiko, NAPALM, pyATS), • Ansible (Jinja2, inventories, roles), • Version control (Git), CI/CD (GitHub Actions/GitLab CI), • Network source of truth (Nautilus/NetBox), • Telemetry/observability (SNMP, gNMI, streaming telemetry, Prometheus, Grafana). VMware NSX (SDN) • NSX-T design and operations: T0/T1 gateways, segments, overlay transport zones, • Distributed firewall, security groups, micro-segmentation, • Integration with physical gateways, north-south routing, • Edge clusters, load balancer, policy automation. Nice-to-Have • EVPN route types (RT-2/RT-5), IRB, symmetric/asymmetric routing, • Multisite/Multipod EVPN, DCI, MPLS L3VPN, • SD-WAN (Viptela, Prisma, Fortinet), • Cloud networking (AWS TGW, Azure vWAN, GCP VPC), • Firewalls (Palo Alto, Fortinet, Cisco ASA/FTD), NAC (ISE/Aruba ClearPass).

Other Requirements

Other Requirement : • Bachelor’s in CS/EE/IT or equivalent experience. • Certifications (preferred): CCNP/CCIE, JNCIP/JNCIE, Arista ACE, VMware VCP-NV. • Experience: 8+ years in network engineering; 4+ years hands-on VxLAN/EVPN.