Senior Network Engineer - CISCO ACI​/ISE

We are seeking an experienced Cybersecurity Network Engineer to support the design, integration, configuration, testing, and security of advanced network infrastructure within a lab-based engineering environment. This position requires a strong combination of traditional network engineering, cybersecurity, and modern software-defined networking experience.

The ideal candidate will have extensive hands‑on experience with Cisco Application Centric Infrastructure (ACI), Software-Defined Networking (SDN), Cisco routing and switching, enterprise firewalls, IP addressing and subnetting, network segmentation, and virtualization technologies.

This position will work directly with engineering, cybersecurity, systems administration, and test teams to build, configure, secure, troubleshoot, and validate network architectures prior to deployment into operational environments.

• Design, configure, integrate, secure, and troubleshoot enterprise network infrastructure within a lab and test environment.
• Engineer and support Cisco ACI architectures, including APIC controllers, leaf/spine architectures, tenants, VRFs, bridge domains, endpoint groups (EPGs), contracts, and external connectivity.
• Support Software-Defined Networking (SDN) technologies and network automation concepts used to centrally manage and secure network infrastructure.
• Configure and troubleshoot Cisco routers and switches, including Layer 2 and Layer 3 networking.
• Develop and maintain IP addressing and subnetting schemes, VLANs, VRFs, routing domains, and network segmentation strategies.
• Configure and troubleshoot routing protocols such as BGP, OSPF, and static routing.
• Engineer and support enterprise firewall and network security solutions, including security policies, access control rules, NAT, VPN connectivity, network segmentation, and traffic inspection.
• Analyze network traffic and connectivity using packet captures, logs, monitoring platforms, and other network diagnostic tools.
• Perform cybersecurity hardening of network infrastructure in accordance with applicable security requirements and organizational standards.
• Identify network vulnerabilities, configuration weaknesses, unnecessary services, and segmentation issues and recommend appropriate remediation.
• Support implementation of Zero Trust and defense-in-depth network architectures, including segmentation and least-privilege communications between systems and security zones.
• Build and maintain representative network environments used for integration, testing, troubleshooting, cybersecurity validation, and engineering development.
• Develop network diagrams, interface documentation, IP address plans, configuration documentation, test procedures, and engineering artifacts.
• Conduct configuration testing and validation prior to implementation within production or mission environments.
• Troubleshoot complex connectivity issues across routers, switches, firewalls, virtual networks, servers, and applications.
• Coordinate with cybersecurity, systems, virtualization, application, and engineering teams to identify and resolve cross-domain infrastructure issues.
• Support change management, configuration management, technical documentation, and engineering review processes.
• Candidates should possess hands-on experience with Cisco Application Centric Infrastructure (ACI) and software-defined networking concepts, including:
• Cisco APIC administration and configuration
• ACI leaf/spine architecture
• Tenants and VRFs
• Bridge Domains (BDs)
• Application Profiles
• ACI Contracts and Filters
• Physical and virtual domains
• VLAN pools
• External Layer 2/Layer 3 connectivity
• L3
  
  Out configuration
• Routing…