Lead Enterprise & Data Center Network Architect

Key Responsibilities • Lead design review and migration planning for the campus SD-Access fabric and dual-data-center environments. • Deploy and validate SD-Access fabric components, including underlay, border nodes, control-plane nodes, edge nodes, and Virtual Networks (VN) with Scalable Group Tags (SGT). • Configure and validate Nexus VXLAN BGP EVPN or ACI fabric topologies (spine/leaf or aggregation, VRF, Layer-2 extension, and inter-DC connectivity). • Design and implement Cisco ISE integration with Catalyst Center and the SD-Access fabric, including TrustSec / SGT policy, authorization profiles, and pxGrid connectivity. • Drive cross-functional integration between campus and data-center fabrics, Cisco ISE, existing NAC platforms (Forescout / ClearPass), and enterprise firewalls (Palo Alto / Fortinet). • Support User Acceptance Testing (UAT) of fabric connectivity, ISE policy enforcement, and identity-based traffic flows. • Maintain accurate as-built documentation and prepare operational runbooks for Day-2 teams covering both fabric and ISE operations. • Troubleshoot complex design, routing, fabric, and ISE-related issues and escalate to Cisco TAC when required. • Provide technical guidance to junior engineers and participate in knowledge transfer. Technical Expertise • Strong production experience with Cisco SD-Access and Catalyst Center (formerly DNA Center). • Deep hands-on experience with Cisco Nexus platforms running VXLAN BGP EVPN and/or Cisco ACI. • Solid understanding of overlay protocols, specifically VXLAN encapsulation and BGP EVPN control plane. • Hands-on familiarity with Cisco ISE, TrustSec, and SGT within an SD-Access design. • Strong knowledge of enterprise campus design (Catalyst 9000, StackWise / SVL) and data-center technologies (vPC, underlay/overlay routing, 100G/400G). • Proven track record in complex brownfield migrations, including dual-running legacy and next-generation fabrics. • Experience integrating networks with third-party NAC solutions (Forescout, Aruba ClearPass) and next-generation firewalls (Palo Alto Networks, Fortinet). Professional & Soft Skills • Ability to lead and collaborate effectively in a multi-vendor, multi-team project environment. • Strong troubleshooting mindset and attention to detail during critical cutover windows. • Excellent documentation and communication skills. • Comfortable working on-site and flexible for after-hours maintenance windows. Qualifications • CCIE Enterprise Infrastructure, CCIE Data Center, or equivalent proven production experience. • Minimum 8–10 years of enterprise networking experience, with at least 3 years hands-on in SD-Access and data-center fabric technologies.