Note: The job is a remote job and is open to candidates in USA. Ampcus Inc. is a certified global provider of a broad range of Technology and Business consulting services. We are seeking a highly experienced Senior Network Architect / Lead Network Engineer with extensive expertise in enterprise networking, data center networking, cloud, SDN, network security, and network automation. This role will be responsible for network architecture, operational excellence, technology modernization, automation initiatives, and providing L3/SME support for mission-critical network environments.
Responsibilities
- Design, deploy, and support large-scale enterprise and data center networks
- Architect and manage Cisco Nexus, Cisco Catalyst, Arista, and Cisco ACI environments
- Design and implement Spine-Leaf architectures, VXLAN, EVPN, VRFs, VLANs, VPCs, and Data Center Interconnect solutions
- Lead network transformation and migration initiatives from legacy environments to SDN-based architectures
- Develop High-Level Designs (HLD), Low-Level Designs (LLD), implementation plans, migration strategies, and technical documentation
- Perform capacity planning, lifecycle management, and infrastructure optimization
- Design, configure, and troubleshoot: BGP, OSPF, EIGRP, Static Routing, Route Maps, Prefix Lists, ACLs
- Implement and support Layer 2/Layer 3 technologies, including: STP/RSTP, VTP, Port Channels, VPC, HSRP, VRRP, VRF
- Troubleshoot complex routing and switching issues in enterprise and data center environments
- Design, deploy, and support Cisco ACI environments
- Configure and manage: APIC Controllers, Tenants, EPGs, Bridge Domains, VRFs, Contracts, Filters, L3Outs
- Manage Cisco Nexus Dashboard solutions, including: NDO, NDFC, NDI
- Perform ACI upgrades, migrations, capacity planning, optimization, and compliance activities
- Support VXLAN/EVPN-based data center architectures and SDN transformation initiatives
- Design and support enterprise WAN architectures, including: Cisco SD-WAN, MPLS, DMVPN, IPSec VPN, GRE Tunnels
- Configure and support Cisco ISR, ASR, and Catalyst 8000 platforms
- Manage WAN resiliency, optimization, and modernization initiatives
- Troubleshoot complex WAN connectivity and performance issues
- Manage and support: Palo Alto Firewalls, Cisco Firepower, Cisco Secure Client, TACACS+, RADIUS
- Implement and support: Network Segmentation, Zero Trust Architecture, Micro-Segmentation, VPN Technologies, Network Access Control (NAC), AAA Services
- Participate in vulnerability remediation and network security lifecycle initiatives
- Configure and administer: F5 BIG-IP LTM/GTM, F5 AFM, Citrix NetScaler, Azure Load Balancer
- Implement and support: SSL Offloading, Content Switching, Load Balancing Policies, Health Monitoring, Global Traffic Management
- Manage enterprise Infoblox DDI solutions
- Administer: DNS, DHCP, IPAM, Grid Masters, DNS Zones, DNS Records, DHCP Reservations
- Support enterprise-wide DNS architecture, availability, security, and service delivery
- Design, implement, and support enterprise Cisco wireless environments
- Manage: Cisco Wireless LAN Controllers (WLCs), Cisco Access Points, Cisco Prime, Aruba Wireless Solutions
- Implement secure 802.1X authentication and enterprise wireless security solutions
- Develop and maintain network automation solutions using: Ansible, Terraform, Python, REST APIs, Postman
- Automate: Network provisioning, Configuration management, Compliance validation, Monitoring, Reporting, Operational workflows
- Integrate automation frameworks with Cisco ACI, Nexus Dashboard, and SD-WAN environments
- Develop reusable automation workflows and support infrastructure-as-code initiatives
- Support network operations using: SolarWinds, ThousandEyes, Grafana, Cisco DNA Center, NetBrain, ServiceNow
- Lead root cause analysis (RCA) and major incident resolution activities
- Provide L3/SME support for complex network issues
- Drive vulnerability remediation, infrastructure lifecycle management, and operational improvement initiatives
- Develop and maintain network standards, runbooks, and operational documentation
Skills
- 10+ years of enterprise and data center network engineering experience
- 5+ years of hands-on Cisco ACI and data center architecture experience
- Proven experience supporting large-scale, global enterprise environments with mission-critical infrastructure
- Experience leading network migration, modernization, transformation, and SDN adoption initiatives
- Strong L3/SME troubleshooting and incident management experience
- Demonstrated ability to develop network architecture, HLD/LLD documentation, implementation plans, and technical standards
- Strong experience collaborating with infrastructure, security, cloud, application, and operations teams
- Cisco Nexus 5K/7K/9K
- Cisco Catalyst 9K Series
- Arista Switching
- Cisco ISR/ASR Routers
- Enterprise LAN/WAN Architecture
- Data Center Networking
- Routing & Switching
- BGP
- OSPF
- EIGRP
- MPLS
- SD-WAN
- VRF
- Cisco ACI
- VXLAN
- EVPN
- Cisco Nexus Dashboard
- NDO
- NDFC
- NDI
- Spine-Leaf Architecture
- VPC
- Data Center Interconnect
- Palo Alto
- Cisco Firepower
- Cisco Secure Client
- IPSec VPN
- NAC
- TACACS+
- RADIUS
- AAA
- Network Segmentation
- Zero Trust
- Micro-Segmentation
- F5 LTM/GTM
- F5 AFM
- Citrix NetScaler
- Azure Load Balancer
- Infoblox
- DNS
- DHCP
- IPAM
- Ansible
- Terraform
- REST APIs
- Postman
- Python preferred
- SolarWinds
- ThousandEyes
- Grafana
- NetBrain
- Cisco DNA Center
- ServiceNow
- CCNP Enterprise
- CCNP Data Center
- Cisco Certified Specialist – ACI Implementation
- Cisco Certified Specialist – Data Center Core
- Cisco Certified Specialist – Enterprise Core
- Cisco SD-WAN Certification
- Palo Alto Certifications preferred
- F5 Certifications preferred
Benefits
- Remote
Company Overview
Company H1B Sponsorship