SME - Cisco Application Centric Infrastructure (ACI), Network Automation

Job Summary

Job Summary : Role Summary We are seeking a hands-on Senior Network Engineer with deep expertise in Routing & Switching , ACI and VxLAN/EVPN (must-have). The ideal candidate will lead design, deployment, and operations of modern data center and campus networks, and bring strong capability in either NetDevOps/Automation (Python, Ansible, CI/CD) or VMware NSX for overlay/SDN.

Job Responsibilities : Key Responsibilities

• Architecture & Design: o Design and implement L2/L3 networks across DC and campus environments. o Lead ACI/VxLAN/EVPN fabric designs (Multi-pod/Multisite, route types, control-plane considerations). o Create high-availability designs (ECMP, MLAG/vPC, BGP/OSPF/IS-IS).
• Deployment & Operations: o Configure and maintain leaf-spine architectures, border gateways, and interconnects. o Troubleshoot complex issues across underlay/overlay, control plane, and data plane. o Perform capacity planning, performance tuning, and proactive monitoring.
• Security & Segmentation: o Implement micro/macro segmentation (EVPN, NSX policies), firewall integration, and route filtering. o Ensure compliance with internal and industry standards.
• Automation / NSX (one or both): o NetDevOps/Automation: Build network automation for config/validation (Python, Ansible, Nornir, Git). o VMware NSX: Design and manage NSX-T overlays, T0/T1, segments, distributed firewall, and integrations.
• Documentation & Governance: o Produce HLD/LLD, SOPs, runbooks, and maintain accurate network diagrams and CMDB entries. o Own change requests, risk assessments, and rollback plans.
• Collaboration: o Partner with cloud, security, and platform teams on hybrid networking (AWS/Azure/GCP, SD-WAN). o Mentor junior engineers; contribute to standards and best practices. Must-Have Skills
• Routing & Switching: BGP, OSPF/IS-IS, eBGP/iBGP, route redistribution, policy-based routing, QoS.
• Data Center Fabrics: VxLAN/EVPN (mandatory) with practical experience in DC leaf-spine design.
• Vendor Proficiency: One or more-Cisco (Nexus/IOS-XE), Arista EOS, Juniper QFX/EX.
• Troubleshooting: Packet analysis, control-plane convergence, FIB/ARP/ND, MTU/MSS, ECMP. Preferred - NetDevOps / Automation
• Python (requests, netmiko/paramiko, NAPALM, pyATS),
• Ansible (Jinja2, inventories, roles),
• Version control (Git), CI/CD (GitHub Actions/GitLab CI),
• Network source of truth (Nautilus/NetBox),
• Telemetry/observability (SNMP, gNMI, streaming telemetry, Prometheus, Grafana). VMware NSX (SDN)
• NSX-T design and operations: T0/T1 gateways, segments, overlay transport zones,
• Distributed firewall, security groups, micro-segmentation,
• Integration with physical gateways, north-south routing,
• Edge clusters, load balancer, policy automation. Nice-to-Have
• EVPN route types (RT-2/RT-5), IRB, symmetric/asymmetric routing,
• Multisite/Multipod EVPN, DCI, MPLS L3VPN,
• SD-WAN (Viptela, Prisma, Fortinet),
• Cloud networking (AWS TGW, Azure vWAN, GCP VPC),
• Firewalls (Palo Alto, Fortinet, Cisco ASA/FTD), NAC (ISE/Aruba ClearPass).

Key Responsibilities

NA

Skill Requirements

Skill Requirement : Must-Have Skills

• Routing & Switching: BGP, OSPF/IS-IS, eBGP/iBGP, route redistribution, policy-based routing, QoS.
• Data Center Fabrics: VxLAN/EVPN (mandatory) with practical experience in DC leaf-spine design.
• Vendor Proficiency: One or more-Cisco (Nexus/IOS-XE), Arista EOS, Juniper QFX/EX.
• Troubleshooting: Packet analysis, control-plane convergence, FIB/ARP/ND, MTU/MSS, ECMP. Preferred - NetDevOps / Automation
• Python (requests, netmiko/paramiko, NAPALM, pyATS),
• Ansible (Jinja2, inventories, roles),
• Version control (Git), CI/CD (GitHub Actions/GitLab CI),
• Network source of truth (Nautilus/NetBox),
• Telemetry/observability (SNMP, gNMI, streaming telemetry, Prometheus, Grafana). VMware NSX (SDN)
• NSX-T design and operations: T0/T1 gateways, segments, overlay transport zones,
• Distributed firewall, security groups, micro-segmentation,
• Integration with physical gateways, north-south routing,
• Edge clusters, load balancer, policy automation. Nice-to-Have
• EVPN route types (RT-2/RT-5), IRB, symmetric/asymmetric routing,
• Multisite/Multipod EVPN, DCI, MPLS L3VPN,
• SD-WAN (Viptela, Prisma, Fortinet),
• Cloud networking (AWS TGW, Azure vWAN, GCP VPC),
• Firewalls (Palo Alto, Fortinet, Cisco ASA/FTD), NAC (ISE/Aruba ClearPass).

Other Requirements

Other Requirement :

• Bachelor’s in CS/EE/IT or equivalent experience.
• Certifications (preferred): CCNP/CCIE, JNCIP/JNCIE, Arista ACE, VMware VCP-NV.
• Experience: 8+ years in network engineering; 4+ years hands-on VxLAN/EVPN.