Network Infrastructure Engineer 159547

Come build, innovate, disrupt, and thrive!

KēSTA I.T is actively seeking a Network Infrastructure Engineer for an immediate contract engagement with our government client.

Work Location: This position is Onsite

Job Description:

We Are Seeking an experienced Network Infrastructure Engineer to design, implement, secure, and support enterprise network and data center infrastructure environments. This role will be responsible for managing and optimizing modern network architectures, including software-defined networking, identity-based access controls, network security platforms, observability tools, and high-availability enterprise systems. The ideal candidate will possess deep expertise in Cisco networking technologies, network segmentation, security administration, and large-scale infrastructure operations while providing technical leadership in mission-critical environments.

Responsibilities:

·         Design, implement, administer, and support enterprise network and data center infrastructure environments.

·         Configure and maintain Cisco ACI fabrics, including VRFs, Bridge Domains (BDs), EPGs, ESGs, L3Outs, contracts, and multi-tenant segmentation.

·         Integrate Cisco ACI environments with containerized and virtualized platforms, including OpenShift VMM and Cilium/Isovalent technologies.

·         Deploy, manage, and support Cisco Catalyst switching platforms and Software Defined Access (SDA) wired and wireless network architectures.

·         Configure and administer Cisco Identity Services Engine (ISE), including TACACS+, authentication, authorization, device profiling, and network access control (NAC) policies.

·         Implement and maintain identity-driven access controls and security policies across enterprise network environments.

·         Administer and support Palo Alto next-generation firewalls, including security policies, NAT, App-ID, URL filtering, security profiles, and threat prevention services.

·         Utilize network observability and monitoring tools such as ThousandEyes, Cyber Vision, and DNA Spaces to improve visibility, performance, and operational intelligence.

·         Monitor, troubleshoot, and optimize enterprise routing, switching, QoS, and network security services.

·         Support highly available, enterprise-scale network environments and mission-critical services.

·         Develop network architecture diagrams, technical documentation, operational procedures, and lifecycle management plans.

·         Participate in network modernization initiatives, infrastructure upgrades, and technology evaluations.

·         Collaborate with technical teams, security personnel, and business stakeholders to ensure reliable and secure network operations.

·         Troubleshoot complex infrastructure, connectivity, performance, and security issues across enterprise environments.

·         Support compliance, cybersecurity, and operational requirements through secure infrastructure design and implementation.

Required Skills:

·         Minimum 15 years of experience working with Cisco networking technologies in enterprise environments.

·         Hands-on experience administering Cisco ACI in production environments.

·         Deep knowledge of Cisco ACI constructs including VRF, BD, EPG, ESG, L3Out, contracts, and segmentation strategies.

·         Experience integrating Cisco ACI with OpenShift VMM, container networking, and Cilium/Isovalent technologies.

·         Strong experience with Cisco Catalyst switching platforms and Software Defined Access (SDA) architectures.

·         Experience administering Cisco ISE, including TACACS+, policy sets, authentication, authorization, and NAC solutions.

·         Strong understanding of ThousandEyes, Cyber Vision, DNA Spaces, or comparable observability and analytics platforms.

·         Advanced knowledge of TCP/IP, routing, switching, QoS, network segmentation, and enterprise security principles.

·         Experience administering Palo Alto Networks next-generation firewalls and security services.

·         Ability to design and support highly available, enterprise-scale infrastructure environments.

·         Experience developing network architecture documentation, diagrams, standards, and operational procedures.

·         Strong analytical, troubleshooting, problem-solving, and decision-making skills.

·         Excellent verbal and written communication skills with the ability to work effectively in fast-paced, mission-critical environments.

Preferred Skills:

·         Cisco certifications such as CCNP Data Center, CCNP Enterprise, CCIE, or equivalent experience.

·         Palo Alto certifications including PCCSA, PCNSA, or PCNSE.

·         Experience with network automation technologies such as Python, Ansible, and REST APIs.

·         Familiarity with NIST cybersecurity frameworks and enterprise security standards.

·         Experience supporting container networking and virtualization technologies.

·         Previous experience supporting large enterprise or government network environments.

·         Training or experience with ThousandEyes, Cyber Vision, DNA Spaces, or related observability platforms.

Available Benefits:

·         Medical Benefits (Platinum level plans available)

·         Work from home / Hybrid / Onsite options

·         PTO

·         Holiday Pay

·         VTO

·         401K

·         Charitable Match

·         Training reimbursement

About KēSTA I.T.:

Our name says it all; KēSTA I.T. (Keys-to-I.T.) AND our people are our keys to our success!

KēSTA I.T. is a premier Utah-based technical staffing and consulting services firm. We specialize in temporary and permanent placement of Software, Hardware, Network, Cloud, CRM/ERP, Data, End-User support, Web and Executive / leadership-based positions on a full time and consulting basis.

If you're interested in a role where top performance is rewarded, personal time is valued, and excellence is demanded at every level we want to talk to you today! 

Where do you want to go? We've got the keys! ~ KēSTA I.T.

WWW.KeSTAIT.COM