SME - Cisco Application Centric Infrastructure (ACI), Network Automation

Job Summary : Role Summary We are seeking a hands-on Senior Network Engineer with deep expertise in Routing & Switching , ACI and VxLAN/EVPN (must-have). The ideal candidate will lead design, deployment, and operations of modern data center and campus networks, and bring strong capability in either NetDevOps/Automation (Python, Ansible, CI/CD) or VMware NSX for overlay/SDN. Job Responsibilities : Key Responsibilities * Architecture & Design: o Design and implement L2/L3 networks across DC and campus environments. o Lead ACI/VxLAN/EVPN fabric designs (Multi-pod/Multisite, route types, control-plane considerations). o Create high-availability designs (ECMP, MLAG/vPC, BGP/OSPF/IS-IS). * Deployment & Operations: o Configure and maintain leaf-spine architectures, border gateways, and interconnects. o Troubleshoot complex issues across underlay/overlay, control plane, and data plane. o Perform capacity planning, performance tuning, and proactive monitoring. * Security & Segmentation: o Implement micro/macro segmentation (EVPN, NSX policies), firewall integration, and route filtering. o Ensure compliance with internal and industry standards. * Automation / NSX (one or both): o NetDevOps/Automation: Build network automation for config/validation (Python, Ansible, Nornir, Git). o VMware NSX: Design and manage NSX-T overlays, T0/T1, segments, distributed firewall, and integrations. * Documentation & Governance: o Produce HLD/LLD, SOPs, runbooks, and maintain accurate network diagrams and CMDB entries. o Own change requests, risk assessments, and rollback plans. * Collaboration: o Partner with cloud, security, and platform teams on hybrid networking (AWS/Azure/GCP, SD-WAN). o Mentor junior engineers; contribute to standards and best practices. Must-Have Skills * Routing & Switching: BGP, OSPF/IS-IS, eBGP/iBGP, route redistribution, policy-based routing, QoS. * Data Center Fabrics: VxLAN/EVPN (mandatory) with practical experience in DC leaf-spine design. * Vendor Proficiency: One or more-Cisco (Nexus/IOS-XE), Arista EOS, Juniper QFX/EX. * Troubleshooting: Packet analysis, control-plane convergence, FIB/ARP/ND, MTU/MSS, ECMP. Preferred - NetDevOps / Automation * Python (requests, netmiko/paramiko, NAPALM, pyATS), * Ansible (Jinja2, inventories, roles), * Version control (Git), CI/CD (GitHub Actions/GitLab CI), * Network source of truth (Nautilus/NetBox), * Telemetry/observability (SNMP, gNMI, streaming telemetry, Prometheus, Grafana). VMware NSX (SDN) * NSX-T design and operations: T0/T1 gateways, segments, overlay transport zones, * Distributed firewall, security groups, micro-segmentation, * Integration with physical gateways, north-south routing, * Edge clusters, load balancer, policy automation. Nice-to-Have * EVPN route types (RT-2/RT-5), IRB, symmetric/asymmetric routing, * Multisite/Multipod EVPN, DCI, MPLS L3VPN, * SD-WAN (Viptela, Prisma, Fortinet), * Cloud networking (AWS TGW, Azure vWAN, GCP VPC), * Firewalls (Palo Alto, Fortinet, Cisco ASA/FTD), NAC (ISE/Aruba ClearPass).

Skill Requirement : Must-Have Skills * Routing & Switching: BGP, OSPF/IS-IS, eBGP/iBGP, route redistribution, policy-based routing, QoS. * Data Center Fabrics: VxLAN/EVPN (mandatory) with practical experience in DC leaf-spine design. * Vendor Proficiency: One or more-Cisco (Nexus/IOS-XE), Arista EOS, Juniper QFX/EX. * Troubleshooting: Packet analysis, control-plane convergence, FIB/ARP/ND, MTU/MSS, ECMP. Preferred - NetDevOps / Automation * Python (requests, netmiko/paramiko, NAPALM, pyATS), * Ansible (Jinja2, inventories, roles), * Version control (Git), CI/CD (GitHub Actions/GitLab CI), * Network source of truth (Nautilus/NetBox), * Telemetry/observability (SNMP, gNMI, streaming telemetry, Prometheus, Grafana). VMware NSX (SDN) * NSX-T design and operations: T0/T1 gateways, segments, overlay transport zones, * Distributed firewall, security groups, micro-segmentation, * Integration with physical gateways, north-south routing, * Edge clusters, load balancer, policy automation. Nice-to-Have * EVPN route types (RT-2/RT-5), IRB, symmetric/asymmetric routing, * Multisite/Multipod EVPN, DCI, MPLS L3VPN, * SD-WAN (Viptela, Prisma, Fortinet), * Cloud networking (AWS TGW, Azure vWAN, GCP VPC), * Firewalls (Palo Alto, Fortinet, Cisco ASA/FTD), NAC (ISE/Aruba ClearPass)., Other Requirement : * Bachelor’s in CS/EE/IT or equivalent experience. * Certifications (preferred): CCNP/CCIE, JNCIP/JNCIE, Arista ACE, VMware VCP-NV. * Experience: 8+ years in network engineering; 4+ years hands-on VxLAN/EVPN.