Key Responsibilities

• Lead design review and migration planning for the campus SD-Access fabric and dual-data-center environments.

• Deploy and validate SD-Access fabric components, including underlay, border nodes, control-plane nodes, edge nodes, and Virtual Networks (VN) with Scalable Group Tags (SGT).

• Configure and validate Nexus VXLAN BGP EVPN or ACI fabric topologies (spine/leaf or aggregation, VRF, Layer-2 extension, and inter-DC connectivity).

• Design and implement Cisco ISE integration with Catalyst Center and the SD-Access fabric, including TrustSec / SGT policy, authorization profiles, and pxGrid connectivity.

• Drive cross-functional integration between campus and data-center fabrics, Cisco ISE, existing NAC platforms (Forescout / ClearPass), and enterprise firewalls (Palo Alto / Fortinet).

• Support User Acceptance Testing (UAT) of fabric connectivity, ISE policy enforcement, and identity-based traffic flows.

• Maintain accurate as-built documentation and prepare operational runbooks for Day-2 teams covering both fabric and ISE operations.

• Troubleshoot complex design, routing, fabric, and ISE-related issues and escalate to Cisco TAC when required.

• Provide technical guidance to junior engineers and participate in knowledge transfer.

Desired Candidate Profile

Technical Expertise

• Strong production experience with Cisco SD-Access and Catalyst Center (formerly DNA Center).

• Deep hands-on experience with Cisco Nexus platforms running VXLAN BGP EVPN and/or Cisco ACI.

• Solid understanding of overlay protocols, specifically VXLAN encapsulation and BGP EVPN control plane.

• Hands-on familiarity with Cisco ISE, TrustSec, and SGT within an SD-Access design.

• Strong knowledge of enterprise campus design (Catalyst 9000, StackWise / SVL) and data-center technologies (vPC, underlay/overlay routing, 100G/400G).

• Proven track record in complex brownfield migrations, including dual-running legacy and next-generation fabrics.

• Experience integrating networks with third-party NAC solutions (Forescout, Aruba ClearPass) and next-generation firewalls (Palo Alto Networks, Fortinet).

Professional & Soft Skills

• Ability to lead and collaborate effectively in a multi-vendor, multi-team project environment.

• Strong troubleshooting mindset and attention to detail during critical cutover windows.

• Excellent documentation and communication skills.

• Comfortable working on-site and flexible for after-hours maintenance windows.

Qualifications

• CCIE Enterprise Infrastructure, CCIE Data Center, or equivalent proven production experience.

• Minimum 8–10 years of enterprise networking experience, with at least 3 years hands-on in SD-Access and data-center fabric technologies.