Network Infrastructure Engineer

VISA-

CLIENT- CONFIDENTIAL

TITLE- Network Infrastructure Engineer x 3

LOCATION- On site Jackson, Mississippi   need local

DURATION-  12 MONTHS

INTERVIEW- video

Need strong candidate with reference.

Our client is seeking a highly skilled and experienced Network Infrastructure Engineer to support and advance a large-scale enterprise networking environment. This is a hands-on engineering position responsible for designing, deploying, maintaining, and troubleshooting modern network infrastructure across data centers, campus environments, and statewide operations.

The Network Infrastructure Engineer will play a critical role in the deployment of new data center network fabrics, identity-driven access systems, network security solutions, and enterprise observability platforms.

The ideal candidate will have deep experience with Cisco ACI, Cisco Nexus, Cisco Catalyst, Software-Defined Access (SDA), Cisco ISE, and enterprise routing/switching, along with experience supporting modern virtualization, container, security, and network observability technologies.

Key Responsibilities

Cisco ACI & Data Center Networking

 Design, implement, and maintain Cisco Nexus platforms operating in ACI mode.

Configure and manage ACI constructs including:

VRFs

Bridge Domains (BDs)

Endpoint Groups (EPGs)

Endpoint Security Groups (ESGs)

L3Out

Contracts

Fabric policies

Integrate Cisco ACI with virtualization and container platforms, including Red Hat OpenShift and Cilium/Isovalent.

Configure and optimize RoCEv2 within ACI environments supporting high-performance, low-latency workloads.

Troubleshoot complex ACI fabric issues involving fabric health, faults, endpoint learning, contracts, connectivity, and multi-tenant segmentation.

Develop and maintain network architecture documentation, standards, diagrams, and operational procedures.

Cisco Catalyst & Software-Defined Access

Deploy, configure, and support Cisco Catalyst platforms across enterprise campus environments.

Design, implement, and maintain Cisco Software-Defined Access (SDA) architectures.

Support SDA wired and wireless fabric environments.

Manage fabric underlay and overlay technologies, policy mapping, authentication integrations, and network assurance.

Collaborate with wireless engineering teams to optimize network coverage, performance, security, and policy enforcement.

Identity-Driven Networking & Security

Configure and administer Cisco Identity Services Engine (ISE).

Develop and manage TACACS+ device administration and authentication/authorization policies.

Implement endpoint profiling and identity-based network access controls.

Integrate Cisco Cyber Vision intelligence into endpoint profiling, segmentation, and access control workflows.

Support Zero Trust initiatives through identity-centric segmentation and policy integration across ACI and SDA environments.

Network Visibility, Analytics & Observability

Deploy and manage ThousandEyes for end-to-end network visibility, routing path analysis, and application performance monitoring.

Implement and support Cisco Cyber Vision for OT/IoT asset visibility, device classification, and behavioral analysis.

Manage Cisco DNA Spaces for location analytics, telemetry, device behavior, and wireless intelligence.

Analyze data from network observability platforms and provide meaningful technical insights to engineering teams and leadership.

Core Network Engineering

Troubleshoot complex Layer 2 and Layer 3 network issues across enterprise environments.

Support and troubleshoot:

VLANs

OSPF

BGP

STP

Multicast

TCP/IP

QoS

Routing and switching

Design, implement, and support Palo Alto Networks security solutions across enterprise environments.

Develop and maintain architecture diagrams, technical standards, runbooks, network documentation, and asset inventories.

Assist with network modernization initiatives, platform upgrades, technology evaluations, procurement activities, and enterprise infrastructure projects.

Perform other related duties as assigned.

Required Qualifications

Candidates must possess a minimum of 15 years of professional experience working with Cisco networking technologies.

Candidates should also have:

Hands-on production experience with Cisco ACI.

Deep knowledge of ACI constructs, including VRF, BD, EPG, ESG, L3Out, and contracts.

Experience integrating ACI with OpenShift, virtualization platforms, and Cilium/Isovalent.

Strong experience with Cisco Catalyst platforms and SDA technologies.

Hands-on experience administering Cisco ISE, including TACACS+ and policy-based Network Access Control (NAC).

Strong understanding of network observability and analytics technologies such as ThousandEyes, Cyber Vision, and DNA Spaces, or comparable enterprise platforms.

Advanced knowledge of TCP/IP, routing, switching, QoS, network security, and enterprise networking fundamentals.

Experience troubleshooting complex enterprise network environments.

Ability to develop clear network architecture diagrams, technical documentation, standards, and operational runbooks.

Strong analytical, troubleshooting, communication, and collaboration skills.

Ability to work effectively in a fast-paced, mission-critical enterprise environment.

Preferred Qualifications

The following experience or certifications is preferred but not required:

Cisco certifications such as:

CCNP Data Center

CCNP Enterprise

CCIE

Equivalent advanced Cisco networking experience

Experience with container networking and virtualization integrations.

Experience with network automation using Python, Ansible, REST APIs, or similar technologies.

Familiarity with NIST cybersecurity frameworks and state-level cybersecurity requirements.

Previous experience supporting state government or large enterprise network environments.

Experience with Palo Alto Networks security technologies.

PCCSA – Palo Alto Networks Certified Cybersecurity Associate, including knowledge of:

Next-generation firewall fundamentals

Threat prevention

App-ID

Security policies

PCNSA – Palo Alto Networks Certified Network Security Administrator, including experience with:

NGFW configuration

Security profiles

NAT

App-ID

URL filtering

WildFire

Ideal Candidate

The ideal candidate is a senior-level network engineer who can operate across data center, campus, security, identity, and network observability environments. They should be comfortable working hands-on with complex Cisco technologies while also contributing to architecture, modernization, documentation, and long-term enterprise networking strategy.