Network Infrastructure Engineer

Network Infrastructure Engineer – SMELocation: Clinton, MSWork Arrangement: 100% OnsiteContract Duration: Through March 31, 2027Schedule: Monday–Friday, 8:00 AM–5:00 PMOpenings: 3Travel: Occasional in-state travelEmployment Type: ContractPosition OverviewWe are seeking a highly skilled Network Infrastructure Engineer / Network SME to support and advance a large enterprise networking environment. This is a hands-on engineering position focused on data center networking, Cisco ACI, Software-Defined Access, identity-driven networking, network security, and network observability.The ideal candidate will have extensive Cisco networking experience and a strong background designing, implementing, troubleshooting, and supporting mission-critical network infrastructure.Key ResponsibilitiesCisco ACI & Data Center NetworkingDesign, implement, and maintain Cisco Nexus platforms running ACI.Work with VRFs, Bridge Domains, EPGs, ESGs, L3Out, contracts, and fabric policies.Integrate ACI with virtualization and container platforms, including OpenShift and Cilium/Isovalent.Troubleshoot ACI fabric health, endpoint learning, contracts, faults, and segmentation.Support high-performance networking and RoCEv2 environments.Create and maintain network architecture documentation, standards, and procedures.Cisco Catalyst & SDADeploy and support Cisco Catalyst platforms.Design and maintain Software-Defined Access (SDA) environments.Support SDA wired and wireless fabric architectures.Manage fabric underlay/overlay, policy mapping, authentication integrations, and assurance.Collaborate with wireless teams to optimize network performance and policy enforcement.Identity-Driven Networking & SecurityConfigure and administer Cisco ISE.Support TACACS+, authentication/authorization policy sets, and endpoint profiling.Integrate identity and security technologies to support network segmentation and Zero Trust initiatives.Work with Cyber Vision for OT/IoT visibility, profiling, and segmentation.Network Visibility & ObservabilitySupport ThousandEyes for end-to-end network visibility and performance monitoring.Utilize Cisco Cyber Vision for OT/IoT asset visibility and behavior analysis.Support DNA Spaces for location analytics, telemetry, and wireless intelligence.Analyze network data and provide meaningful technical insights to leadership.Core Network EngineeringTroubleshoot complex Layer 2 and Layer 3 network issues.Work with VLANs, OSPF, BGP, STP, multicast, TCP/IP, routing, switching, and QoS.Design and implement Palo Alto Networks security solutions.Develop architecture diagrams, runbooks, standards, and asset documentation.Support network modernization, upgrades, procurement, and enterprise technology initiatives.Required Qualifications15+ years of Cisco networking experience.Hands-on Cisco ACI production experience.Strong knowledge of VRF, BD, EPG, ESG, L3Out, and contracts.Experience integrating ACI with OpenShift and Cilium/Isovalent.Strong experience with Cisco Catalyst and SDA technologies.Hands-on Cisco ISE administration, including TACACS+ and NAC policy sets.Knowledge of ThousandEyes, Cyber Vision, DNA Spaces, or comparable network observability technologies.Strong L2/L3 networking knowledge, including OSPF, BGP, STP, VLANs, multicast, routing, switching, and QoS.Palo Alto Networks experience.Strong network troubleshooting and analytical skills.Ability to create clear network diagrams, documentation, and architectural artifacts.Strong communication skills and ability to work in mission-critical environments.Preferred QualificationsCCNP Data Center, CCNP Enterprise, CCIE, or equivalent experience.Container networking and virtualization integration experience.Network automation experience with Python, Ansible, and REST APIs.Familiarity with NIST frameworks and cybersecurity requirements.Experience working in state government or large enterprise environments.PCCSA or PCNSA certification.Important Work Requirements100% onsite in Clinton, MississippiMonday–Friday, 8:00 AM–5:00 PMOccasional in-state travelCandidates must be able to work onsite; remote candidates will not be considered.Interested candidates: Please send your updated resume along with your current location, work authorization, availability, and pay rate expectation.