Senior Network Architect

We are seeking a highly experienced Senior Network Architect / Lead Network Engineer with extensive expertise in enterprise networking, data center networking, cloud, SDN, network security, and network automation.

The ideal candidate will have proven experience designing, implementing, supporting, and optimizing large-scale Cisco-based network infrastructures, including Cisco ACI, Nexus Data Centers, SD-WAN, DDI (DNS/DHCP/IPAM), load balancing, wireless networking, and network security solutions.

This role will be responsible for network architecture, operational excellence, technology modernization, automation initiatives, and providing L3/SME support for mission-critical network environments., * Architect and manage Cisco Nexus, Cisco Catalyst, Arista, and Cisco ACI environments.

• Design and implement Spine-Leaf architectures, VXLAN, EVPN, VRFs, VLANs, VPCs, and Data Center Interconnect solutions.
• Lead network transformation and migration initiatives from legacy environments to SDN-based architectures.
• Develop High-Level Designs (HLD), Low-Level Designs (LLD), implementation plans, migration strategies, and technical documentation.
• Perform capacity planning, lifecycle management, and infrastructure optimization.

1. Routing & Switching

• Design, configure, and troubleshoot:
• BGP
• OSPF
• EIGRP
• Static Routing
• Route Maps
• Prefix Lists
• ACLs
• Implement and support Layer 2/Layer 3 technologies, including:
• STP/RSTP
• VTP
• Port Channels
• VPC
• HSRP
• VRRP
• VRF
• Troubleshoot complex routing and switching issues in enterprise and data center environments.

1. Cisco ACI & SDN

• Design, deploy, and support Cisco ACI environments.
• Configure and manage:
• APIC Controllers
• Tenants
• EPGs
• Bridge Domains
• VRFs
• Contracts
• Filters
• L3Outs
• Manage Cisco Nexus Dashboard solutions, including:
• NDO
• NDFC
• NDI
• Perform ACI upgrades, migrations, capacity planning, optimization, and compliance activities.
• Support VXLAN/EVPN-based data center architectures and SDN transformation initiatives.

1. WAN & SD-WAN

• Design and support enterprise WAN architectures, including:
• Cisco SD-WAN
• MPLS
• DMVPN
• IPSec VPN
• GRE Tunnels
• Configure and support Cisco ISR, ASR, and Catalyst 8000 platforms.
• Manage WAN resiliency, optimization, and modernization initiatives.
• Troubleshoot complex WAN connectivity and performance issues.

1. Network Security

• Manage and support:
• Palo Alto Firewalls
• Cisco Firepower
• Cisco Secure Client
• TACACS+
• RADIUS
• Implement and support:
• Network Segmentation
• Zero Trust Architecture
• Micro-Segmentation
• VPN Technologies
• Network Access Control (NAC)
• AAA Services
• Participate in vulnerability remediation and network security lifecycle initiatives.

1. Load Balancing & Application Delivery

• Configure and administer:
• F5 BIG-IP LTM/GTM
• F5 AFM
• Citrix NetScaler
• Azure Load Balancer
• Implement and support:
• SSL Offloading
• Content Switching
• Load Balancing Policies
• Health Monitoring
• Global Traffic Management

1. DDI - DNS, DHCP & IPAM

• Manage enterprise Infoblox DDI solutions.
• Administer:
• DNS
• DHCP
• IPAM
• Grid Masters
• DNS Zones
• DNS Records
• DHCP Reservations
• Support enterprise-wide DNS architecture, availability, security, and service delivery.

1. Wireless Infrastructure

• Design, implement, and support enterprise Cisco wireless environments.
• Manage:
• Cisco Wireless LAN Controllers (WLCs)
• Cisco Access Points
• Cisco Prime
• Aruba Wireless Solutions
• Implement secure 802.1X authentication and enterprise wireless security solutions.

1. Network Automation

• Develop and maintain network automation solutions using:
• Ansible
• Terraform
• Python
• REST APIs
• Postman
• Automate:
• Network provisioning
• Configuration management
• Compliance validation
• Monitoring
• Reporting
• Operational workflows
• Integrate automation frameworks with Cisco ACI, Nexus Dashboard, and SD-WAN environments.
• Develop reusable automation workflows and support infrastructure-as-code initiatives.

1. Monitoring & Network Operations

• Support network operations using:
• SolarWinds
• ThousandEyes
• Grafana
• Cisco DNA Center
• NetBrain
• ServiceNow
• Lead root cause analysis (RCA) and major incident resolution activities.
• Provide L3/SME support for complex network issues.
• Drive vulnerability remediation, infrastructure lifecycle management, and operational improvement initiatives.
• Develop and maintain network standards, runbooks, and operational documentation.

• Cisco Nexus 5K/7K/9K
• Cisco Catalyst 9K Series
• Arista Switching
• Cisco ISR/ASR Routers
• Enterprise LAN/WAN Architecture
• Data Center Networking
• Routing & Switching
• BGP
• OSPF
• EIGRP
• MPLS
• SD-WAN
• VRF

Data Center & SDN

• Cisco ACI
• VXLAN
• EVPN
• Cisco Nexus Dashboard
• NDO
• NDFC
• NDI
• Spine-Leaf Architecture
• VPC
• Data Center Interconnect

Network Security

• Palo Alto
• Cisco Firepower
• Cisco Secure Client
• IPSec VPN
• NAC
• TACACS+
• RADIUS
• AAA
• Network Segmentation
• Zero Trust
• Micro-Segmentation

Load Balancing

• F5 LTM/GTM
• F5 AFM
• Citrix NetScaler
• Azure Load Balancer

DDI

• Infoblox
• DNS
• DHCP
• IPAM

Automation

• Ansible
• Terraform
• REST APIs
• Postman
• Python preferred

Monitoring & Operations

• SolarWinds
• ThousandEyes
• Grafana
• NetBrain
• Cisco DNA Center
• ServiceNow

Preferred Certifications

• CCNP Enterprise
• CCNP Data Center
• Cisco Certified Specialist - ACI Implementation
• Cisco Certified Specialist - Data Center Core
• Cisco Certified Specialist - Enterprise Core
• Cisco SD-WAN Certification
• Palo Alto Certifications preferred
• F5 Certifications preferred

Experience Requirements

• 10+ years of enterprise and data center network engineering experience.
• 5+ years of hands-on Cisco ACI and data center architecture experience.
• Proven experience supporting large-scale, global enterprise environments with mission-critical infrastructure.
• Experience leading network migration, modernization, transformation, and SDN adoption initiatives.
• Strong L3/SME troubleshooting and incident management experience.
• Demonstrated ability to develop network architecture, HLD/LLD documentation, implementation plans, and technical standards.
• Strong experience collaborating with infrastructure, security, cloud, application, and operations teams.

Ampcus Inc. is a certified global provider of a broad range of Technology and Business consulting services. We are in search of a highly motivated candidate to join our talented Team.