Senior Network Security Engineer - ACI

About the role

The Senior Network Engineer is responsible for the design, operation and support of enterprise network and data centre environments, with a strong focus on Cisco ACI, Software-Defined Access (SDA) and network security operations. The role provides Level 3 support, ensures service availability, leads incident and change activities and acts as a Subject Matter Expert (SME) for network and security technologies.

Key responsibilities

• Manage and operate the Cisco ACI fabric (APIC controllers, spine and leaf switches), monitor fabric health and troubleshoot faults, endpoint learning and policy issues.
• Configure tenants, VRFs, bridge domains, EPGs, contracts and filters; implement L2/L3 connectivity, L3Out, vPC and port-channel integrations.
• Execute change requests under ITIL processes, support ACI upgrades and patching, and perform device optimisation across data centres, campus and branch networks.
• Drive security incidents, changes and problems, perform root cause analysis, resolve tickets within SLAs/OLAs and provide after-hours on-call support.
• Maintain core switches, routers, firewalls and access switches, support systems, virtualisation and application teams, and assist branch IT technicians.
• Develop network SOPs, runbooks and incident playbooks, and plan, implement and test disaster recovery and business continuity plans.
• Coordinate with vendors and partners, raise TAC cases, travel to client sites and data centres, and follow ITIL and information security best practices.

Required profile

• Bachelor's degree in a relevant discipline.
• 10+ years of full-time experience in enterprise network environments.
• Experience in a Network Operations Centre (NOC) supporting large enterprise or multinational clients.
• Excellent written and verbal communication skills.

Required skills

• Cisco ACI: hands-on support, administration, installation, upgrades, multi-pod and multi-site architecture, and integration with VMware NSX.
• Cisco SDA and ISE: campus fabric, NAC policies, TrustSec SGTs, wired and wireless performance monitoring.
• Routing and switching: OSPF, EIGRP, BGP, VXLAN, Nexus, Catalyst, ISR/ASR routers and wireless LAN.
• ITIL certification or strong ITIL process knowledge; CCNP / CCIE preferred.