ICT Infrastructure Engineer
About the job
About the ICT Infrastructure Engineer role
The ICT Infrastructure Engineer is responsible for designing, implementing, and managing highly resilient, secure, and scalable Cisco ACI-based enterprise network infrastructure that supports hybrid and multicloud environments. Working closely with cross-functional teams, vendors, and stakeholders, this role provides technical leadership in network architecture, automation, and infrastructure transformation, while ensuring operational excellence, governance, and the successful delivery of complex networking solutions that enable business continuity and digital innovation.
Key Responsibilities:
Network Transformation Architecture
- Lead the design, engineering, and execution of next-generation network transformation solutions
- Collaborate with internal teams, including cloud, security, and application stakeholders, to align network infrastructure with business needs
- Provide technical leadership in building highly resilient, scalable, and secure hybrid/multicloud network environments
Design, Deployment, and Operations
- Architect and deploy advanced Cisco ACI infrastructure across active-active datacenters
- Integrate ACI with hybrid cloud and multicloud environments to ensure seamless connectivity and performance
- Manage day-to-day operations, monitoring, and troubleshooting of ACI fabric components
- Collaborate with vendors, Cisco TAC, and internal teams to resolve complex network incidents and escalations
Policy Management and Automation
- Develop and implement policy-driven network architectures using Cisco ACI’s capabilities
- Utilize automation tools (e.g., Ansible, Python) to streamline network operations and ensure efficiency
- Ensure network policies align with industry best practices and compliance requirements
Documentation and Governance
- Maintain accurate network diagrams, policy documentation, and technical procedures
- Ensure all infrastructure and operations meet internal governance and security standards
Mentorship and Knowledge Sharing
- Provide SME-level guidance to internal teams and mentor junior network engineers
- Lead knowledge transfer sessions to enhance team capabilities in ACI and related technologies
Requirements:
- A bachelor’s or master’s degree and 10-15 years of experience in core Network technologies with at least 5 years focused on Cisco ACI
Deep knowledge of Cisco ACI components and concepts:
- Fabric Architecture: Spine-Leaf topology, Fabric Discovery, and Fabric Access Policies
- Application Policy Infrastructure Controller (APIC): Clustering, APIs (REST, XML, JSON), and GUI management
- Endpoint Groups (EPGs), Contracts, and Filters: Policy-based connectivity and segmentation
- Tenant Model: VRFs, Bridge Domains, and Layer 2/3 connectivity across multiple tenants
- ACI Multi-Site and Multi-Pod deployments
- Integration with L4-L7 services (e.g., firewalls, load balancers) using Service Graphs
- Expertise in ACI troubleshooting: Health Scores, Service Graphs, and CLI/APIC diagnostics
- Experience with Cisco Nexus Dashboard Insight for monitoring and managing ACI environments effectively
VXLAN and EVPN Expertise
- VXLAN Fabric Architecture: Understanding of VXLAN encapsulation for scalable Layer 2 and Layer 3 networks
- MP-BGP EVPN (Ethernet VPN): Control plane for VXLAN, providing seamless Layer 2 extension and optimized Layer 3 routing
- Interoperability between ACI and non-ACI environments using VXLAN/EVPN
BGP and OSPF Routing Expertise
- In-depth knowledge of BGP (Border Gateway Protocol) for managing external and internal routing policies
- Experience with BGP peering, route filtering, and path selection in complex ACI and datacenter environments
- Expertise in OSPF (Open Shortest Path First) for building dynamic Layer 3 routing in underlay networks
- Integration of BGP and OSPF within ACI fabric to manage hybrid cloud and multi-pod deployments
Solution Architect: (Preferrable)
- Solution-level understanding of Cisco ACI interoperability with firewalls (e.g., Palo Alto, Check Point, Fortinet), load balancers (e.g., F5 GTM, LTM, ASM), micro-segmentation solutions, policy enforcement, and IPAM, DNS, and DHCP systems
- Added advantage for candidates with hands-on experience integrating ACI with these solutions, though a willingness to learn and adapt to new technologies is acceptable
- Experience with Ansible, Python scripting, and ACI REST APIs for automation
- Knowledge of ACI App Center integrations and customization of ACI apps
- Experience with integrating ACI with multicloud environments (AWS, Azure, GCP)
Soft Skills
- Excellent analytical, problem-solving, and decision-making skills
- Strong communication and collaboration skills, with the ability to engage with stakeholders across departments
- Self-motivated with a continuous learning mindset and ability to work under pressure

