Network Engineer With Cisco Ccie, Ccnp, Or Ccna Required

Responsibilities:

• BA or BS degree in Computer Science, Information Security, or related field.
• Five+ years of progressive experience in the field of Network Engineering managing large scale environments.
• Current Cisco CCIE, CCNP, or CCNA certifications are required – no candidates will be considered without certification.
• Additional experience and certifications related to Cisco and Microsoft Azure networking and information security are desirable.

Preferred/Desirable knowledge:

• Cisco Secure Firewall running in ASA mode, including configuring routed and transparent deployments, single and multiple contexts, firewall rules, NAT, service policies/inspection, site-to-site and remote access VPN, etc.
• Cisco Secure Firewall running in Threat Defense mode, including configuring IPS.
• Cisco ISE running in a medium distributed deployment, including configuring PAN, MNT and PSN nodes, policy sets, device administration policies, external identity sources, TACACS, RADIUS, etc.
• Cisco VOIP and QoS
• Cisco Spaces
• Cisco Catalyst Center
• Cisco SD-Access
• Cisco ACI

Required Experience:

• Stacks of Cisco Catalyst 9300 access switches, including upgrading IOS-XE on stacked switches, configuring stacking data and power, port-channels, L2 VLANs, access/trunk port assignment, rapid-pvst, VLAN pruning, etc.
• Cisco Industrial Ethernet 1000 and 4000 access switches, including upgrading IOS, configuring port-channels, L2 VLANs, access/trunk port assignment, rapid- pvst, VLAN pruning, etc.
• Cisco Catalyst 6500 and 9600 chassis core and distribution switches, including upgrading IOS/IOS-XE on redundant supervisor engines, configuring OSPF, BGP, VSS, HSRP, port-channels, L2 VLANs, L3 SVIs, access/trunk port assignment, rapid-pvst, VLAN pruning, etc.
• Cisco Nexus 7700 and 9300 data center switches, including upgrading NX-OS, configuring DCI, VDC, VPC, high availability and failover, resilient connections to VMware host server farms, OSPF, BGP, HSRP, port-channels, L2 VLANS, L3 SVIs, rapid-pvst, VLAN pruning, etc.
• Large MPLS networks, including configuring MPLS VPNs, RD/RT values, VRFs, P/PE/CE devices, eBGP/iBGP peering, route reflectors, BFD, etc.
• Cisco ASR 1000 Internet edge routers, including upgrading IOS-XE, configuring eBGP peering with ISPs for Internet routes, load balancing with IP prefix-list, NetFlow, etc.
• Cisco 9800 Wireless LAN Controllers, including configuring SSIDs, policies, policy tags, site tags, CAPWAP tunnels, etc.
• Hardware and software life cycle of network equipment, including planning, working with vendors, submitting purchase requests, inventory management, customer coordination, configuring, deploying in a manner that minimizes network down time, documenting, monitoring, troubleshooting, patching, decommissioning, etc.
• SolarWinds modules to monitor network environments, including NPM, NCM, IPAM, UDT, NTA and SAM.
• Proficiency troubleshooting connectivity issues using tools such as Wireshark or other packet analyzers.
• Proficiency with using MS Visio to diagram and document detailed network designs and configurations.
• MS Azure network infrastructure resources such as Vnet, Application Gateway, Private DNS Zone and Resolver, Key Vault, Application Service Plan, Application Programming Interface Management (APIM), Azure Firewall, Network Security Group, Virtual and Local Network Gateway, Connections, Public IPs and Private Endpoints.