NetOps Architect

Responsibilities:

• To designs, builds, and modernizes network infrastructures by blending traditional network architecture with DevOps principles, leveraging automation, virtualization, and programmability to make the infrastructure agile, scalable, and highly responsive to application needs.
• Lead technical design workshops and translate network requirements into detailed HLD and LLD for enterprise, data center, cloud, and service provider environments.
• Design and implement Cisco Nexus and Cisco ACI data center fabrics using VXLAN/EVPN, Spine-Leaf, Anycast Gateway, VTEP, VLAN/VNI mapping, VRF, and multi-site/multi-pod architectures.
• Design and implement BGP EVPN control planes, including route types, route targets, route distinguishers, EVPN route advertisement, underlay/overlay separation, and inter-VRF connectivity.
• Design and troubleshoot Cisco ACI fabric architecture, including tenants, VRFs, bridge domains, EPGs, contracts, L3Out, route control, fabric policies, and external connectivity.
• Design and implement enterprise and service provider routing architectures using BGP, OSPF, IS-IS, MPLS, SR-MPLS, SRv6, L3VPN, L2VPN, and segment routing.
• Design and troubleshoot MPLS L3VPN/L2VPN, including PE-CE routing, MP-BGP, VRF, route-target policies, label distribution, VPNv4/VPNv6, pseudowire, and EVPN services.
• Design and implement SR-MPLS and SRv6 architectures, including segment routing policies, traffic engineering, underlay routing, SID allocation, and path selection.
• Design and troubleshoot BGP routing policies, including route filtering, communities, local preference, MED, AS-path manipulation, route reflectors, multipath, and traffic engineering.
• Design and troubleshoot OSPF and IS-IS underlay networks, including area/level design, adjacency, route summarization, redistribution, metric manipulation, and failure convergence.
• Design and troubleshoot Layer 2 architectures using STP/RSTP/MST, HSRP/VRRP, VLANs, port-channels, MLAG/vPC, and high-availability mechanisms.
• Design and implement QoS architectures, including classification, marking, queuing, policing, shaping, congestion management, and application-aware traffic treatment.
• Design and implement IP SLA and network monitoring mechanisms for path availability, latency, jitter, packet loss, and service verification.
• Design and implement Cisco SD-WAN architectures, including controllers, overlay tunnels, routing, policies, segmentation, application-aware routing, and centralized management.
• Design cloud connectivity and network architectures involving VPC/VNet, VPN, dedicated connectivity, cloud routing, load balancing, transit networking, and network overlays.
• Integrate data center networks with AWS/Azure or equivalent cloud environments, including routing domains, VPN connectivity, dedicated circuits, segmentation, and hybrid-cloud connectivity.
• Design and troubleshoot VMware network integration, including virtual switching, VLAN/VXLAN connectivity, distributed switching, and integration with physical data center fabrics.
• Design and troubleshoot Kubernetes networking and container network connectivity, including CNI, service networking, ingress/egress connectivity, and integration with underlying network infrastructure.
• Design and implement network security controls across routers, switches, firewalls, data center fabrics, VRFs, ACLs, segmentation, and external connectivity.
• Develop detailed network configurations from approved HLD/LLD and validate configuration consistency against design standards.
• Build network PoC/CPOC environments, including physical and virtual topology construction, configuration, traffic validation, failure testing, interoperability testing, and performance testing.
• Perform network staging, pre-production validation, commissioning, migration, upgrade, rollback, and post-implementation verification.
• Lead complex network migration and upgrade activities, including topology migration, routing migration, data center fabric migration, service migration, traffic cutover, rollback planning, and failure recovery.
• Perform packet-level and protocol-level troubleshooting using packet captures, routing tables, ARP/MAC tables, BGP/OSPF/IS-IS databases, MPLS labels, EVPN routes, logs, counters, and telemetry.
• Troubleshoot complex failures involving BGP, OSPF, IS-IS, MPLS, SR-MPLS, SRv6, VXLAN, EVPN, ACI, STP, HSRP/VRRP, QoS, and overlay/underlay connectivity.
• Analyze network performance using interface statistics, packet loss, latency, jitter, utilization, queue drops, CPU/memory utilization, routing convergence, and traffic-flow data.
• Develop network automation using Python, Ansible, REST APIs, Linux scripting, and infrastructure automation frameworks.
• Develop and maintain technical network documentation covering HLD, LLD, topology diagrams, IP addressing, VLAN/VNI mapping, VRF architecture, routing policy, configuration standards, test plans, migration plans, and rollback procedures.
• Design and support high-performance networking environments using RDMA, RoCEv2, InfiniBand, and Ultra Ethernet, where applicable.
• Troubleshoot and optimize RoCEv2/RDMA networks, including lossless Ethernet, PFC, ECN, congestion management, QoS, and latency-sensitive traffic requirements

Requirements

• Masters or Bachelors degree in Computer Engineering, Computer Science, Information Technology or relevant studies.
• 12-15 years of hands-on experience in network engineering and architecture, including large-scale data center, enterprise, telecommunications, or service provider environments.
• Demonstrated track records in designs, builds, and modernizes network infrastructures with DevOps principles, leveraging automation, virtualization, and programmability to make the infrastructure agile and scalable.
• Deep hands-on experience with Cisco Nexus, Cisco ACI, VXLAN/EVPN, Spine-Leaf, Cisco Catalyst, and Cisco SD-WAN.
• Expert-level knowledge of BGP, OSPF, IS-IS, STP/RSTP/MST, HSRP/VRRP, MPLS, SR-MPLS, SRv6, L3VPN, L2VPN, and EVPN.
• Strong hands-on experience with Cisco ACI fabric architecture, including tenants, VRFs, bridge domains, EPGs, contracts, L3Out, fabric policies, and external routing.
• Strong hands-on experience with VXLAN/EVPN, including underlay/overlay architecture, VTEP, VNI, EVPN route types, Anycast Gateway, VRF, route targets, and multi-fabric connectivity.
• Strong experience with MPLS, MP-BGP, VPNv4/VPNv6, L3VPN, L2VPN, pseudowire, SR-MPLS, and SRv6.
• Strong understanding of Layer 2 high availability, including STP, HSRP/VRRP, vPC/MLAG, VLANs, port-channels, and failure convergence.
• Strong knowledge of QoS, IP SLA, network telemetry, performance monitoring, and traffic engineering.
• Hands-on experience with Cisco SD-WAN and overlay-based WAN architectures.
• Experience with cloud networking, including VPC/VNet, VPN, dedicated connectivity, cloud routing, transit networking, load balancing, and hybrid-cloud connectivity.
• Experience integrating network infrastructure with VMware and Kubernetes environments.
• Strong hands-on troubleshooting skills using packet captures, protocol analysis, routing databases, forwarding tables, logs, counters, telemetry, and network diagnostic tools.
• Strong experience with network migration, upgrade, staging, commissioning, cutover, rollback, and post-migration validation.
• Strong experience building PoC/CPOC environments and executing complex network validation and interoperability testing.
• Strong programming/scripting skills in Python and Linux, with practical experience using Ansible and REST APIs for network automation.
• Experience with RDMA, RoCEv2, InfiniBand, and/or Ultra Ethernet is advantageous.
• CCIE or equivalent professional-level certification is required.
• Dual CCIE is advantageous.
• HCIE or equivalent professional-level certification is advantageous
• Mandarin/Chinese and English proficiency is required to communicate technically with Chinese-speaking customers, counterparts, vendors, and engineering teams.