Senior Network Engineer

JOB TITLE: Senior Network Engineer

JOB DETAILS:

The Senior Network Engineer designs, implements, operates, and provides Level 3 support for enterprise data center and campus networks, with a focus on Cisco ACI, Cisco DNA Center (Catalyst Center) / SD-Access, enterprise wireless, and Cisco ISE, and acts as the subject-matter expert for these technologies.

KEY ACCOUNTABILITIES & ACTIVITIES

• ACI: Operate and support the Cisco ACI fabric (APIC, Spine, Leaf), including tenants, VRFs, BDs, EPGs, contracts, L3Out/vPC, upgrades, and fault troubleshooting.


• DNAC & SD-Access: Administer Cisco DNA Center (Catalyst Center) and SD-Access fabric (Edge, Border, Control Plane) using automation, templates, SWIM, and Assurance


• Wireless: Manage Catalyst 9800 WLCs and APs, SSIDs, RF, and fabric-enabled wireless; troubleshoot client connectivity and roaming.


• NAC: Administer Cisco ISE for 802.1X, MAB, guest, BYOD, profiling, posture, and TrustSec SGT segmentation


• Automation & Assurance: Automate provisioning and compliance checks using Python/Ansible and APIC/Catalyst Center REST APIs; monitor fabric and client health proactively.


• Incident & Change: Provide L3 support and lead incident, problem, and change management with RCA within SLAs; participate in the 24/7 on-call rotation and respond out of hours as required


• Documentation & DR: Maintain SOPs, runbooks, topology diagrams, and inventory; plan and test DR/BCP.


• Coordination: Drive vendor TAC cases, support migrations and upgrades, and work with NOC/SOC, server, and application teams; visit client and remote sites as required.


• Standards: Apply ITIL and information security best practices across all network and security operations

Minimum Requirements:

• Bachelor’s degree in a relevant discipline with 8–10 years of enterprise networking experience.


• Proven hands-on experience with Cisco ACI, DNAC/SD-Access, wireless, and Cisco ISE (NAC), including design, deployment, and day-2 operations at enterprise scale.


• CCNP Data Center or CCNP Enterprise essential; CCNP Security (ISE), CCNP Wireless and CCIE preferred (see page 2).


• ITIL knowledge and experience in a NOC supporting large enterprise or multi-national client


• Excellent written and verbal communication skills.


• Willing to work 24/7 on-call shifts when needed and to travel to client and remote sites

Technology Expertise 

• ACI: Multi-Pod/Multi-Site, PBR, L2Out/L3Out, VMware NSX integration, firmware upgrades.


• DNAC & SD-Access: fabric provisioning, LAN automation, Assurance, SWIM, IPv6.


• Wireless: Catalyst 9800/AireOS, Wi-Fi 6/6E, RF design and site surveys, WPA3-Enterprise.


• NAC (Cisco ISE): 802.1X, MAB, RADIUS/TACACS+, profiling, posture, TrustSec, pxGrid.


• Automation: Python, Ansible, Terraform (ACI provider), REST APIs, Catalyst Center templates and Assurance.


• Routing & Switching: OSPF, EIGRP, BGP, VXLAN, Nexus, Catalyst, ISR/ASR.

CERTIFICATION NOTES

• Minimum: at least one of CCNP Data Center or CCNP Enterprise (*Essential – one of the two is sufficient). Holding both is highly desirable.


• Specialist certifications: each CCNP concentration exam passed earns a Cisco Certified Specialist credential (e.g., Specialist – Data Center ACI Implementation, Specialist – Security Identity Management Implementation). These are accepted as evidence of expertise in the individual technology.


• Wireless: Cisco moved the wireless exams out of CCNP Enterprise into the new CCNP Wireless track in March 2026; recent ENWLSI/ENWLSD passes still count within their validity period


• Process: ITIL 4 Foundation or equivalent service-management certification.