Network Infrastructure Engineer

Key Responsibilities

Cisco ACI &Data Center Networking

• Design implement and maintain CiscoNexus platforms runningACI mode including VRFs Bridge Domains EPGs/ESGs L3Out contracts and fabric policies.
• Integrate ACI with virtualization and container platforms including Red Hat OpenShift VMMand Isovalent/Cilium.
• Configure and optimize RoCEv2within the ACI fabric for high-performance low-latency workloads.
• Conduct advanced troubleshooting of ACI fabric healthfaults endpoint learning contracts and multi-tenant segmentation.
• Develop and maintain fabricdocumentation standards and operational procedures. Cisco Catalyst & Software-Defined Access
• Deploy and support CiscoCatalyst platforms withincampus environments.
• Design andmaintain Software-Defined Access(SDA) architectures including SDA Wired Fabricand Fabric-Enabled Wireless.

• Manage fabricunderlay and overlay policy mapping authentication integrations and assurance operations.
• Collaborate with wireless engineers to optimize coverage performance andpolicy enforcement across SDA.

Identity-Driven Networking & Security Technologies

• Configure andadminister Cisco Identity Services Engine (ISE)for TACACS deviceadministration authentication and authorization policy sets and endpoint profiling.
• Integrate CyberVision intelligence into profiling segmentation and access controlworkflows.
• Support ZeroTrust efforts through identity-centric segmentation and policy integration across ACI and SDA fabrics.

Visibility Analytics &Observability

• Deploy and manage ThousandEyes for end-to-end visibility routing path analysis and performance monitoring.
• Implement and support CiscoCyber Vision for OT/IoT assetvisibility device classification and behavior analysis.
• Manage DNASpaces for location analytics telemetry ingestion device behavior and wireless intelligence.
• Provide meaningful insights to leadership using data from these observability platforms. Core Network Engineering
• Troubleshoot complex L2/L3 network issuesacross multiple environments including VLANs OSPF BGP STP and multicast.
• Designing and implementing PaloAlto Networks security solutions across enterprise environments.
• Create andmaintain documentation including architecture diagrams standards runbooks and asset inventories.
• Assist in modernization planning platform upgrades procurement processes and statewide technology initiatives.

Other dutiesas assigned.

Required Skills/Experience

Provide the minimum required skills and/or experience the contractor must possess to qualify for this position. These requirements willbe transferred to the ScoreSheet and candidates without these requirements reflected on theirresume will

NOT be presented to the manager for consideration.

The DOR SME must possess:

• Minimum of 15 yearsof experience working with Cisco networking.

Required Skills& Qualifications

• Hands-on experience with Cisco ACI in production environments.
• Deep knowledge of ACI constructs (VRF BD EPGESG L3Out contracts).
• Experience integrating ACI with OpenShift VMM and Cilium/Isovalent.
• Proficiency withCisco Catalyst platforms and SDA fabrictechnologies.
• Experience administering Cisco ISE including TACACS and policy-set based NAC.
• Strong understanding of ThousandEyes CyberVision and DNA Spaces or comparable tools.
• Solid commandof core TCP/IP routing switching QoSand network security fundamentals.
• Ability to develop cleardiagrams documentation andarchitectural artifacts.
• Strong analytical and communication skillswith the abilityto work in fast-paced mission-critical environments.

Preferred/Not Required

Provide any skills/experience that would be helpful forthe candidate to possess but not required. Examples: Previous supervisory experience WebLogic experience helpful etc.

• Cisco certifications such as CCNP Data Center CCNP Enterprise CCIEor equivalent experience.
• Hands-on experience with container networking and virtualization integrations.
• Familiarity withNIST frameworks and state-level cybersecurity requirements.
• Experience withnetwork automation tools(Python Ansible REST APIs).
• Prior workin state government or large enterprise network environments.
• PCCSA Palo Alto Networks Certified Cybersecurity Associate Foundational security NGFWbasics threats App-ID and policy.
• PCNSA Palo AltoNetworks Certified Network Security Administrator