> Markdown version of [/jobs/ext/4182455-sme-cisco-application-centric-infrastructure-aci-network-automation](https://www.wearedevelopers.com/jobs/ext/4182455-sme-cisco-application-centric-infrastructure-aci-network-automation). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # SME - Cisco Application Centric Infrastructure (ACI), Network Automation - **Company:** HCL America, Inc. - **Location:** United States - **Experience:** Expert - **Salary:** $113,000.0 - $119,000.0 - **Contract:** Permanent contract - **Skills:** Amazon Web Services, Microsoft Azure, Border Gateway Protocol, Cisco PIX, Cloud Computing, Configuration Management Databases, Continuous Integration, Data Centers, Github, Multi-protocol Systems, Jinja (Template Engine), Python (Programming Language), Network Control, Network Diagrams, Network Segmentation, Packet Analyzer, Cisco Nexus Switches, Open Shortest Path First (OSPF), Performance Tuning, Ansible, Prometheus, Simple Network Management Protocols, Wide Area Networks, Load Balancing, Grafana, Firewalls (Computer Science), Amazon Virtual Private Cloud (VPC), Juniper, Git, Gitlab-ci, Palo Alto Networks, Performance Monitor, Fortinet, Routing & Switching, Open Network Automation Platform, Software Version Control, Cisco, Vmware - **Published:** October 11, 2026 - **Apply:** https://www.indeed.com/viewjob?jk=59dd0df17cfae696 ## About the Role Skill Requirement : Must-Have Skills * Routing & Switching: BGP, OSPF/IS-IS, eBGP/iBGP, route redistribution, policy-based routing, QoS. * Data Center Fabrics: VxLAN/EVPN (mandatory) with practical experience in DC leaf-spine design. * Vendor Proficiency: One or more-Cisco (Nexus/IOS-XE), Arista EOS, Juniper QFX/EX. * Troubleshooting: Packet analysis, control-plane convergence, FIB/ARP/ND, MTU/MSS, ECMP. Preferred - NetDevOps / Automation * Python (requests, netmiko/paramiko, NAPALM, pyATS), * Ansible (Jinja2, inventories, roles), * Version control (Git), CI/CD (GitHub Actions/GitLab CI), * Network source of truth (Nautilus/NetBox), * Telemetry/observability (SNMP, gNMI, streaming telemetry, Prometheus, Grafana). VMware NSX (SDN) * NSX-T design and operations: T0/T1 gateways, segments, overlay transport zones, * Distributed firewall, security groups, micro-segmentation, * Integration with physical gateways, north-south routing, * Edge clusters, load balancer, policy automation. Nice-to-Have * EVPN route types (RT-2/RT-5), IRB, symmetric/asymmetric routing, * Multisite/Multipod EVPN, DCI, MPLS L3VPN, * SD-WAN (Viptela, Prisma, Fortinet), * Cloud networking (AWS TGW, Azure vWAN, GCP VPC), * Firewalls (Palo Alto, Fortinet, Cisco ASA/FTD), NAC (ISE/Aruba ClearPass)., Other Requirement : * Bachelor's in CS/EE/IT or equivalent experience. * Certifications (preferred): CCNP/CCIE, JNCIP/JNCIE, Arista ACE, VMware VCP-NV. * Experience: 8+ years in network engineering; 4+ years hands-on VxLAN/EVPN. ## Description Job Summary : Role Summary We are seeking a hands-on Senior Network Engineer with deep expertise in Routing & Switching , ACI and VxLAN/EVPN (must-have). The ideal candidate will lead design, deployment, and operations of modern data center and campus networks, and bring strong capability in either NetDevOps/Automation (Python, Ansible, CI/CD) or VMware NSX for overlay/SDN. Job Responsibilities : Key Responsibilities * Architecture & Design: o Design and implement L2/L3 networks across DC and campus environments. o Lead ACI/VxLAN/EVPN fabric designs (Multi-pod/Multisite, route types, control-plane considerations). o Create high-availability designs (ECMP, MLAG/vPC, BGP/OSPF/IS-IS). * Deployment & Operations: o Configure and maintain leaf-spine architectures, border gateways, and interconnects. o Troubleshoot complex issues across underlay/overlay, control plane, and data plane. o Perform capacity planning, performance tuning, and proactive monitoring. * Security & Segmentation: o Implement micro/macro segmentation (EVPN, NSX policies), firewall integration, and route filtering. o Ensure compliance with internal and industry standards. * Automation / NSX (one or both): o NetDevOps/Automation: Build network automation for config/validation (Python, Ansible, Nornir, Git). o VMware NSX: Design and manage NSX-T overlays, T0/T1, segments, distributed firewall, and integrations. * Documentation & Governance: o Produce HLD/LLD, SOPs, runbooks, and maintain accurate network diagrams and CMDB entries. o Own change requests, risk assessments, and rollback plans. * Collaboration: o Partner with cloud, security, and platform teams on hybrid networking (AWS/Azure/GCP, SD-WAN). o Mentor junior engineers; contribute to standards and best practices. Must-Have Skills * Routing & Switching: BGP, OSPF/IS-IS, eBGP/iBGP, route redistribution, policy-based routing, QoS. * Data Center Fabrics: VxLAN/EVPN (mandatory) with practical experience in DC leaf-spine design. * Vendor Proficiency: One or more-Cisco (Nexus/IOS-XE), Arista EOS, Juniper QFX/EX. * Troubleshooting: Packet analysis, control-plane convergence, FIB/ARP/ND, MTU/MSS, ECMP. Preferred - NetDevOps / Automation * Python (requests, netmiko/paramiko, NAPALM, pyATS), * Ansible (Jinja2, inventories, roles), * Version control (Git), CI/CD (GitHub Actions/GitLab CI), * Network source of truth (Nautilus/NetBox), * Telemetry/observability (SNMP, gNMI, streaming telemetry, Prometheus, Grafana). VMware NSX (SDN) * NSX-T design and operations: T0/T1 gateways, segments, overlay transport zones, * Distributed firewall, security groups, micro-segmentation, * Integration with physical gateways, north-south routing, * Edge clusters, load balancer, policy automation. Nice-to-Have * EVPN route types (RT-2/RT-5), IRB, symmetric/asymmetric routing, * Multisite/Multipod EVPN, DCI, MPLS L3VPN, * SD-WAN (Viptela, Prisma, Fortinet), * Cloud networking (AWS TGW, Azure vWAN, GCP VPC), * Firewalls (Palo Alto, Fortinet, Cisco ASA/FTD), NAC (ISE/Aruba ClearPass).