Network Infrastructure Engineer

• The Mississippi State Department of Revenue's Office of Information Technology is seeking a senior-level Network Infrastructure Engineer to support and modernize its enterprise data center, campus, and statewide networking environment.
• This hands-on role will design, deploy, secure, troubleshoot, and operate Cisco ACI, Cisco Catalyst, Software-Defined Access, Cisco ISE, observability platforms, and Palo Alto firewall infrastructure supporting mission-critical systems.

• Design, implement, administer, and maintain Cisco Nexus platforms operating in ACI mode, including VRFs, Bridge Domains, EPGs, ESGs, L3Outs, contracts, and fabric policies.
• Integrate Cisco ACI with Red Hat OpenShift VMM and Isovalent/Cilium container networking platforms.
• Configure and optimize RoCEv2 within the ACI fabric for high-performance and low-latency workloads.
• Troubleshoot ACI fabric health, faults, endpoint learning, contracts, multi-tenant segmentation, and related production issues.
• Develop and maintain Cisco ACI fabric documentation, standards, architecture diagrams, runbooks, operational procedures, and asset inventories.
• Deploy, configure, and support Cisco Catalyst platforms in campus network environments.
• Design, implement, and maintain Cisco Software-Defined Access architectures, including SDA wired fabric and fabric-enabled wireless.
• Manage SDA underlay and overlay networks, policy mapping, authentication integrations, and assurance operations.
• Collaborate with wireless engineering teams to optimize coverage, performance, and policy enforcement across SDA environments.
• Configure and administer Cisco Identity Services Engine for TACACS+ device administration, authentication and authorization policy sets, endpoint profiling, and network access control.
• Integrate Cisco Cyber Vision intelligence into endpoint profiling, segmentation, and access-control workflows.
• Support Zero Trust initiatives through identity-centric segmentation and policy integration across ACI and SDA fabrics.
• Deploy and manage ThousandEyes for end-to-end visibility, routing-path analysis, and performance monitoring.
• Implement and support Cisco Cyber Vision for OT/IoT asset visibility, device classification, and behavior analysis.
• Manage DNA Spaces for location analytics, telemetry ingestion, device behavior analysis, and wireless intelligence.
• Provide network performance and observability insights to leadership using data from ThousandEyes, Cyber Vision, and DNA Spaces.
• Troubleshoot complex Layer 2 and Layer 3 network issues involving VLANs, OSPF, BGP, STP, multicast, TCP/IP, routing, switching, QoS, and network security.
• Design, implement, configure, and troubleshoot Palo Alto Networks next-generation firewall solutions, including security policies and security profiles.
• Create and maintain architecture diagrams, technical standards, runbooks, documentation, and network asset inventories.
• Support high-availability, enterprise-scale infrastructure across data centers and statewide operations.
• Assist with modernization planning, platform upgrades, procurement activities, lifecycle planning, and statewide technology initiatives.
• Provide ongoing operational support for reliable, scalable, secure, mission-critical network services.
• Perform other duties as assigned, including occasional overtime and occasional in-state or out-of-state travel.

• Minimum of 15 years of professional experience working with Cisco networking technologies.
• Hands-on production experience with Cisco ACI and Cisco Nexus platforms.
• Deep knowledge of Cisco ACI constructs, including VRFs, Bridge Domains, EPGs, ESGs, L3Outs, contracts, fabric policies, endpoint learning, and multi-tenant segmentation.
• Experience integrating Cisco ACI with Red Hat OpenShift VMM and Isovalent/Cilium.
• Proficiency with Cisco Catalyst platforms and Software-Defined Access campus architectures, including wired and wireless fabric technologies.
• Experience administering Cisco Identity Services Engine, including TACACS+, authentication and authorization policy sets, endpoint profiling, and policy-based NAC.
• Strong understanding of ThousandEyes, Cisco Cyber Vision, and DNA Spaces or comparable observability and network analytics platforms.
• Palo Alto Networks firewall administration experience, including next-generation firewall configuration, security policies, security profiles, NAT, App-ID, URL filtering, and WildFire.
• Strong Layer 2 and Layer 3 networking skills, including TCP/IP, VLANs, OSPF, BGP, STP, multicast, routing, switching, QoS, and network security fundamentals.
• Ability to support high-availability, enterprise-scale, data center, campus, and statewide network infrastructure.
• Ability to develop clear network diagrams, architecture documentation, technical standards, runbooks, and other architectural artifacts.
• Strong analytical, troubleshooting, written, and verbal communication skills.
• Ability to work effectively in fast-paced, mission-critical environments.
• High school education is the stated minimum education level.
• The position is 100% onsite in Clinton, Mississippi; local candidates are required and remote candidates should not be submitted.
• Recommended or relevant certifications include CCNA, CCNP Data Center, CCNP Enterprise, Cisco Specialist certifications in ACI, SDA, or ISE, PCNSA, PCNSE, and ThousandEyes or Cyber Vision platform training.

• Cisco certifications such as CCNP Data Center, CCNP Enterprise, CCIE, or equivalent experience.
• Hands-on experience with container networking and virtualization integrations.
• Familiarity with NIST frameworks and state-level cybersecurity requirements.
• Experience with network automation tools and technologies, including Python, Ansible, and REST APIs.
• Prior experience working in state government or large enterprise network environments.
• PCCSA (Palo Alto Networks Certified Cybersecurity Associate).
• PCNSA (Palo Alto Networks Certified Network Security Administrator).
• Knowledge of Palo Alto NGFW fundamentals, threat prevention, App-ID, policy configuration, security profiles, NAT, URL filtering, and WildFire.
• ThousandEyes, Cisco Cyber Vision, DNA Spaces, or related platform training.

To apply for this exciting opportunity, please contact:

1. Update Your Resume: Please add any missing skills or certifications that align with the role.
2. Apply Online: Click the "Apply" button at the end of the job description and complete the required details.
3. Submit Supporting Documents: Completed skills Matrix(see below), Upload a photo ID. If you are not a U.S. citizen or Green Card holder (GC-EAD), please include your work authorization details.
4. Confirmation: Once submitted, reply to this email to let me know. I'll review your updated materials and, if there's a match, schedule a video interview to discuss further.

Required Qualifications

# of Required Years

Candidate Response

Experience working with Cisco networking

15 Years

________________ (Years of Experience)

Hands-on experience with Cisco ACI in production environments.

5-7+ Years

________________ (Years of Experience)

 Deep knowledge of ACI constructs (VRF, BD, EPG, ESG, L3Out, contracts).

5-7+ Years

________________ (Years of Experience)

 Experience integrating ACI with OpenShift VMM and Cilium/Isovalent.

5-7+ Years

________________ (Years of Experience)

 Proficiency with Cisco Catalyst platforms and SDA fabric technologies.

5-7+ Years

________________ (Years of Experience)

 Experience administering Cisco ISE including TACACS+ and policy-set based NAC.

5-7+ Years

________________ (Years of Experience)

 Strong understanding of ThousandEyes, Cyber Vision, and DNA Spaces or comparable tools.

5-7+ Years