SME Cisco Application Centric Infrastructure (ACI), Network Automation

Job description

Job Summary : Role Summary We are seeking a hands-on Senior Network Engineer with deep expertise in Routing & Switching , ACI and VxLAN/EVPN (must-have). The ideal candidate will lead design, deployment, and operations of modern data center and campus networks, and bring strong capability in either NetDevOps/Automation (Python, Ansible, CI/CD) or VMware NSX for overlay/SDN. Job Responsibilities : Key Responsibilities • Architecture & Design: o Design and implement L2/L3 networks across DC and campus environments. o Lead ACI/VxLAN/EVPN fabric designs (Multi-pod/Multisite, route types, control-plane considerations). o Create high-availability designs (ECMP, MLAG/vPC, BGP/OSPF/IS-IS). • Deployment & Operations: o Configure and maintain leaf-spine architectures, border gateways, and interconnects. o Troubleshoot complex issues across underlay/overlay, control plane, and data plane. o Perform capacity planning, performance tuning, and proactive monitoring. • Security & Segmentation: o Implement micro/macro segmentation (EVPN, NSX policies), firewall integration, and route filtering. o Ensure compliance with internal and industry standards. • Automation / NSX (one or both): o NetDevOps/Automation: Build network automation for config/validation (Python, Ansible, Nornir, Git). o VMware NSX: Design and manage NSX-T overlays, T0/T1, segments, distributed firewall, and integrations. • Documentation & Governance: o Produce HLD/LLD, SOPs, runbooks, and maintain accurate network diagrams and CMDB entries. o Own change requests, risk assessments, and rollback plans. • Collaboration: o Partner with cloud, security, and platform teams on hybrid networking (AWS/Azure/GCP, SD-WAN). o Mentor junior engineers; contribute to standards and best practices. Must-Have Skills • Routing & Switching: BGP, OSPF/IS-IS, eBGP/iBGP, route redistribution, policy-based routing, QoS. • Data Center Fabrics: VxLAN/EVPN (mandatory) with practical experience in DC leaf-spine design. • Vendor Proficiency: One or more—Cisco (Nexus/IOS-XE), Arista EOS, Juniper QFX/EX. • Troubleshooting: Packet analysis, control-plane convergence, FIB/ARP/ND, MTU/MSS, ECMP. Preferred - NetDevOps / Automation • Python (requests, netmiko/paramiko, NAPALM, pyATS), • Ansible (Jinja2, inventories, roles), • Version control (Git), CI/CD (GitHub Actions/GitLab CI), • Network source of truth (Nautilus/NetBox), • Telemetry/observability (SNMP, gNMI, streaming telemetry, Prometheus, Grafana). VMware NSX (SDN) • NSX-T design and operations: T0/T1 gateways, segments, overlay transport zones, • Distributed firewall, security groups, micro-segmentation, • Integration with physical gateways, north-south routing, • Edge clusters, load balancer, policy automation. Nice-to-Have • EVPN route types (RT-2/RT-5), IRB, symmetric/asymmetric routing, • Multisite/Multipod EVPN, DCI, MPLS L3VPN, • SD-WAN (Viptela, Prisma, Fortinet), • Cloud networking (AWS TGW, Azure vWAN, GCP VPC), • Firewalls (Palo Alto, Fortinet, Cisco ASA/FTD), NAC (ISE/Aruba ClearPass). Key Responsibilities NA Skill Requirements Skill Requirement : Must-Have Skills • Routing & Switching: BGP, OSPF/IS-IS, eBGP/iBGP, route redistribution, policy-based routing, QoS. • Data Center Fabrics: VxLAN/EVPN (mandatory) with practical experience in DC leaf-spine design. • Vendor Proficiency: One or more—Cisco (Nexus/IOS-XE), Arista EOS, Juniper QFX/EX. • Troubleshooting: Packet analysis, control-plane convergence, FIB/ARP/ND, MTU/MSS, ECMP. Preferred - NetDevOps / Automation • Python (requests, netmiko/paramiko, NAPALM, pyATS), • Ansible (Jinja2, inventories, roles), • Version control (Git), CI/CD (GitHub Actions/GitLab CI), • Network source of truth (Nautilus/NetBox), • Telemetry/observability (SNMP, gNMI, streaming telemetry, Prometheus, Grafana). VMware NSX (SDN) • NSX-T design and operations: T0/T1 gateways, segments, overlay transport zones, • Distributed firewall, security groups, micro-segmentation, • Integration with physical gateways, north-south routing, • Edge clusters, load balancer, policy automation. Nice-to-Have • EVPN route types (RT-2/RT-5), IRB, symmetric/asymmetric routing, • Multisite/Multipod EVPN, DCI, MPLS L3VPN, • SD-WAN (Viptela, Prisma, Fortinet), • Cloud networking (AWS TGW, Azure vWAN, GCP VPC), • Firewalls (Palo Alto, Fortinet, Cisco ASA/FTD), NAC (ISE/Aruba ClearPass). Other Requirements Other Requirement : • Bachelor’s in CS/EE/IT or equivalent experience. • Certifications (preferred): CCNP/CCIE, JNCIP/JNCIE, Arista ACE, VMware VCP-NV. • Experience: 8+ years in network engineering; 4+ years hands-on VxLAN/EVPN. Maximum Salary (US): 119000 Minimum Salary (US): 113000 Apply now Information at a Glance Why HCLTech? At HCLTech, you'll supercharge your potential. You'll find your career. And you'll find your spark. All at a place that knows that helping its customers stay on top starts by putting its people first. HCLTech is a global technology company, home to more than 223,000 people across 60 countries, delivering industry-leading capabilities centered around digital, engineering, cloud and AI, powered by a broad portfolio of technology services and products. We work with clients across all major verticals, providing industry solutions for Financial Services, Manufacturing, Life Sciences and Healthcare, Technology and Services, Telecom and Media, Retail and CPG, and Public Services. Consolidated revenues as of 12 months ending June 2026 totaled $14.8 billion. Compensation and Benefits A candidate’s pay within the range will depend on their skills, experience, education, and other factors permitted by law. This role may also be eligible for performance-based bonuses subject to company policies. In addition, this role is eligible for the following benefits subject to company policies: medical, dental, vision, pharmacy, life, accidental death & dismemberment, and disability insurance; employee assistance program; 401(k) retirement plan; 10 days of paid time off per year (some positions are eligible for need-based leave with no designated number of leave days per year); and 10 paid holidays per year. Disclaimer Privacy Statement Terms of use Sitemap Raise a Grievance We use cookies on our site. Please read more about cookies policy here. Opens in a new tab. Opens in a new tab. Opens in a new tab. Opens in a new tab. Opens in a new tab. Opens in a new tab. Copyright © 2026 HCL Technologies Limited Cookie Consent Manager When you visit any website, it may store or retrieve information on your browser, mostly in the form of cookies. Because we respect your right to privacy, you can choose not to allow some types of cookies. However, blocking some types of cookies may impact your experience of the site and the services we are able to offer. Required Cookies These cookies are required to use this website and can't be turned off. Required Cookies Required Cookies Provider Description Enabled SAP as service provider We use the following session cookies, which are all required to enable the website to function: "route" is used for session stickiness "careerSiteCompanyId" is used to send the request to the correct data center "JSESSIONID" is placed on the visitor's device during the session so the server can identify the visitor "Load balancer cookie" (actual cookie name may vary) prevents a visitor from bouncing from one instance to another Cookies from provider SAPasserviceprovider are required and cannot be turned off Functional Cookies These cookies provide a better customer experience on this site, such as by remembering your login details, optimizing video performance, or providing us with information about how our site is used. You may freely choose to accept or decline these cookies at any time. Note that certain functionalities that these third-parties make available may be impacted if you do not accept these cookies. Consent to all Functional Cookies Functional Cookies Provider Description Enabled Vimeo Vimeo is a video hosting, sharing, and services