Network Infrastructure Engineer

This position is responsible for the design, implementation, security, and ongoing support of
OIT's enterprise data center and campus network infrastructure. The engineer will work with
Cisco ACI, Software-Defined Access (SDA), Cisco Identity Services Engine (ISE), Cisco
Catalyst platforms, and observability tools including ThousandEyes, Cyber Vision, and DNA
Spaces. The role also includes the administration of Palo Alto firewalls supporting statewide
systems.

Major Responsibilities

▪ Cisco ACI fabric design and administration (VRF, BD, EPG/ESG, L3Out).
▪ ACI integrations with OpenShift VMM and Cilium/Isovalent.
▪ Catalyst and SDA wired/wireless fabric deployment and support.
▪ Identity-driven access configuration using Cisco ISE (TACACS+,
authentication/authorization, device profiling).
▪ ThousandEyes monitoring, Cyber Vision integration, and DNA Spaces analytics.
▪ Palo Alto next-generation firewall configuration, policy development, and
troubleshooting.
▪ Network documentation, lifecycle planning, and support of mission-critical services.

Required Knowledge/Skills

▪ Cisco ACI, Nexus platforms, multi-tenant segmentation.
▪ SDA campus architectures.
▪ Cisco ISE policy sets and NAC.
▪ Palo Alto firewall administration and security profiles.
▪ Strong L2/L3 routing and switching skills.
▪ Ability to support high-availability, enterprise-scale infrastructure.

Recommended Certifications

▪ CCNA
▪ CCNP Data Center
▪ CCNP Enterprise
▪ Cisco Specialist – ACI, SDA, or ISE
▪ PCNSA (Palo Alto)
▪ PCNSE (Palo Alto)
▪ ThousandEyes, Cyber Vision, or related platform training