Network Infrastructure Engineer

Summary:

Client is seeking a highly skilled and experienced Network Infrastructure Engineer to support and advance the enterprise networking environment. This position plays a critical role in designing, deploying, and operating new LDC (Liquor Distribution Center) fabrics, networks, identity-driven access systems, and observability platforms. The engineer will work closely with the infrastructure team to ensure the network services remain reliable, scalable, secure, and aligned with enterprise modernization goals. This is a hands-on engineering position that requires strong technical expertise, effective communication, and the ability to support mission-critical systems across data centers and statewide operations.

Responsibilities:

• Design, implementation, security, and ongoing support of the Client enterprise data center and campus network infrastructure.
• Work with Cisco ACI, Software-Defined Access (SDA), Cisco Identity Services Engine (ISE), Cisco Catalyst platforms, and observability tools including Thousand Eyes, Cyber Vision, and DNA Spaces.
• Administration of Palo Alto firewalls supporting statewide systems.
• Cisco ACI fabric design and administration (VRF, BD, EPG/ESG, L3Out).
• ACI integrations with OpenShift VMM and Cilium/Isovalent.
• Catalyst and SDA wired/wireless fabric deployment and support.
• Identity-driven access configuration using Cisco ISE (TACACS, authentication/authorization, device profiling).
• Thousand Eyes monitoring, Cyber Vision integration, and DNA Spaces analytics.
• Palo Alto next-generation firewall configuration, policy development, and troubleshooting.
• Network documentation, lifecycle planning, and support of mission-critical services.
  
  

Requirements:

• High School education required.
• Minimum of 15 years of experience working with Cisco networking.
• Hands-on experience with Cisco ACI in production environments.
• Deep knowledge of ACI constructs (VRF, BD, EPG, ESG, L3Out, contracts).
• Experience integrating ACI with OpenShift VMM and Cilium/Isovalent.
• Proficiency with Cisco Catalyst platforms and SDA fabric technologies.
• Experience administering Cisco ISE including TACACS and policy-set based NAC.
• Strong understanding of Thousand Eyes, Cyber Vision, and DNA Spaces or comparable tools.
• Solid command of core TCP/IP, routing, switching, QoS, and network security fundamentals.
• Ability to develop clear diagrams, documentation, and architectural artifacts.
• Strong analytical and communication skills with the ability to work in fast-paced, mission-critical environments.
• Ability to support high-availability, enterprise-scale infrastructure.
  
  

Required Skills:

• Cisco ACI, Nexus platforms, multi-tenant segmentation.
• SDA campus architectures.
• Cisco ISE policy sets and NAC.
• Palo Alto firewall administration and security profiles.
• Strong L2/L3 routing and switching skills.
  
  

Preferred Skills:

• Hands-on experience with container networking and virtualization integrations.
• Familiarity with NIST frameworks and state-level cybersecurity requirements.
• Experience with network automation tools (Python, Ansible, REST APIs).
• Prior work in state government or large enterprise network environments.
• PCCSA – Palo Alto Networks Certified Cybersecurity Associate.
• PCNSA – Palo Alto Network Security Administrator.
  
  

Benefits:

Details regarding benefits are typically provided during the interview process or upon request.