SME - Cisco Application Centric Infrastructure (ACI), Network Automation
United States
Apply now
Job Description
SME - Cisco Application Centric Infrastructure (ACI), Network Automation
Miami-Dade, Florida

Job Summary

Job Summary : Role Summary We are seeking a hands-on Senior Network Engineer with deep expertise in Routing & Switching , ACI and VxLAN/EVPN (must-have). The ideal candidate will lead design, deployment, and operations of modern data center and campus networks, and bring strong capability in either NetDevOps/Automation (Python, Ansible, CI/CD) or VMware NSX for overlay/SDN.
Job Responsibilities : Key Responsibilities • Architecture & Design: o Design and implement L2/L3 networks across DC and campus environments. o Lead ACI/VxLAN/EVPN fabric designs (Multi-pod/Multisite, route types, control-plane considerations). o Create high-availability designs (ECMP, MLAG/vPC, BGP/OSPF/IS-IS). • Deployment & Operations: o Configure and maintain leaf-spine architectures, border gateways, and interconnects. o Troubleshoot complex issues across underlay/overlay, control plane, and data plane. o Perform capacity planning, performance tuning, and proactive monitoring. • Security & Segmentation: o Implement micro/macro segmentation (EVPN, NSX policies), firewall integration, and route filtering. o Ensure compliance with internal and industry standards. • Automation / NSX (one or both): o NetDevOps/Automation: Build network automation for config/validation (Python, Ansible, Nornir, Git). o VMware NSX: Design and manage NSX-T overlays, T0/T1, segments, distributed firewall, and integrations. • Documentation & Governance: o Produce HLD/LLD, SOPs, runbooks, and maintain accurate network diagrams and CMDB entries. o Own change requests, risk assessments, and rollback plans. • Collaboration: o Partner with cloud, security, and platform teams on hybrid networking (AWS/Azure/GCP, SD-WAN). o Mentor junior engineers; contribute to standards and best practices. Must-Have Skills • Routing & Switching: BGP, OSPF/IS-IS, eBGP/iBGP, route redistribution, policy-based routing, QoS. • Data Center Fabrics: VxLAN/EVPN (mandatory) with practical experience in DC leaf-spine design. • Vendor Proficiency: One or more—Cisco (Nexus/IOS-XE), Arista EOS, Juniper QFX/EX. • Troubleshooting: Packet analysis, control-plane convergence, FIB/ARP/ND, MTU/MSS, ECMP. Preferred - NetDevOps / Automation • Python (requests, netmiko/paramiko, NAPALM, pyATS), • Ansible (Jinja2, inventories, roles), • Version control (Git), CI/CD (GitHub Actions/GitLab CI), • Network source of truth (Nautilus/NetBox), • Telemetry/observability (SNMP, gNMI, streaming telemetry, Prometheus, Grafana). VMware NSX (SDN) • NSX-T design and operations: T0/T1 gateways, segments, overlay transport zones, • Distributed firewall, security groups, micro-segmentation, • Integration with physical gateways, north-south routing, • Edge clusters, load balancer, policy automation. Nice-to-Have • EVPN route types (RT-2/RT-5), IRB, symmetric/asymmetric routing, • Multisite/Multipod EVPN, DCI, MPLS L3VPN, • SD-WAN (Viptela, Prisma, Fortinet), • Cloud networking (AWS TGW, Azure vWAN, GCP VPC), • Firewalls (Palo Alto, Fortinet, Cisco ASA/FTD), NAC (ISE/Aruba ClearPass). 

Key Responsibilities

NA

Skill Requirements

Skill Requirement : Must-Have Skills • Routing & Switching: BGP, OSPF/IS-IS, eBGP/iBGP, route redistribution, policy-based routing, QoS. • Data Center Fabrics: VxLAN/EVPN (mandatory) with practical experience in DC leaf-spine design. • Vendor Proficiency: One or more—Cisco (Nexus/IOS-XE), Arista EOS, Juniper QFX/EX. • Troubleshooting: Packet analysis, control-plane convergence, FIB/ARP/ND, MTU/MSS, ECMP. Preferred - NetDevOps / Automation • Python (requests, netmiko/paramiko, NAPALM, pyATS), • Ansible (Jinja2, inventories, roles), • Version control (Git), CI/CD (GitHub Actions/GitLab CI), • Network source of truth (Nautilus/NetBox), • Telemetry/observability (SNMP, gNMI, streaming telemetry, Prometheus, Grafana). VMware NSX (SDN) • NSX-T design and operations: T0/T1 gateways, segments, overlay transport zones, • Distributed firewall, security groups, micro-segmentation, • Integration with physical gateways, north-south routing, • Edge clusters, load balancer, policy automation. Nice-to-Have • EVPN route types (RT-2/RT-5), IRB, symmetric/asymmetric routing, • Multisite/Multipod EVPN, DCI, MPLS L3VPN, • SD-WAN (Viptela, Prisma, Fortinet), • Cloud networking (AWS TGW, Azure vWAN, GCP VPC), • Firewalls (Palo Alto, Fortinet, Cisco ASA/FTD), NAC (ISE/Aruba ClearPass).

Other Requirements

Other Requirement : • Bachelor’s in CS/EE/IT or equivalent experience. • Certifications (preferred): CCNP/CCIE, JNCIP/JNCIE, Arista ACE, VMware VCP-NV. • Experience: 8+ years in network engineering; 4+ years hands-on VxLAN/EVPN.
Maximum Salary (US): 
Minimum Salary (US): 
Apply now
Information at a Glance

Why HCLTech?

At HCLTech, you'll supercharge your potential. You'll find your career. And you'll find your spark. All at a place that knows that helping its customers stay on top starts by putting its people first.

HCLTech is a global technology company, home to more than 223,000 people across 60 countries, delivering industry-leading capabilities centered around digital, engineering, cloud and AI, powered by a broad portfolio of technology services and products. We work with clients across all major verticals, providing industry solutions for Financial Services, Manufacturing, Life Sciences and Healthcare, Technology and Services, Telecom and Media, Retail and CPG, and Public Services. Consolidated revenues as of 12 months ending June 2026 totaled $14.8 billion. 

 

Compensation and Benefits

A candidate’s pay within the range will depend on their skills, experience, education, and other factors permitted by law. This role may also be eligible for performance-based bonuses subject to company policies. In addition, this role is eligible for the following benefits subject to company policies: medical, dental, vision, pharmacy, life, accidental death & dismemberment, and disability insurance; employee assistance program; 401(k) retirement plan; 10 days of paid time off per year (some positions are eligible for need-based leave with no designated number of leave days per year); and 10 paid holidays per year.