NetOps Architect

Responsibilities: To designs, builds, and modernizes network infrastructures by blending traditional network architecture with DevOps principles, leveraging automation, virtualization, and programmability to make the infrastructure agile, scalable, and highly responsive to application needs. Lead technical design workshops and translate network requirements into detailed HLD and LLD for enterprise, data center, cloud, and service provider environments. Design and implement Cisco Nexus and Cisco ACI data center fabrics using VXLAN/EVPN, Spine-Leaf, Anycast Gateway, VTEP, VLAN/VNI mapping, VRF, and multi-site/multi-pod architectures. Design and implement BGP EVPN control planes, including route types, route targets, route distinguishers, EVPN route advertisement, underlay/overlay separation, and inter-VRF connectivity. Design and troubleshoot Cisco ACI fabric architecture, including tenants, VRFs, bridge domains, EPGs, contracts, L3Out, route control, fabric policies, and external connectivity. Design and implement enterprise and service provider routing architectures using BGP, OSPF, IS-IS, MPLS, SR-MPLS, SRv6, L3VPN, L2VPN, and segment routing. Design and troubleshoot MPLS L3VPN/L2VPN, including PE-CE routing, MP-BGP, VRF, route-target policies, label distribution, VPNv4/VPNv6, pseudowire, and EVPN services. Design and implement SR-MPLS and SRv6 architectures, including segment routing policies, traffic engineering, underlay routing, SID allocation, and path selection. Design and troubleshoot BGP routing policies, including route filtering, communities, local preference, MED, AS-path manipulation, route reflectors, multipath, and traffic engineering. Design and troubleshoot OSPF and IS-IS underlay networks, including area/level design, adjacency, route summarization, redistribution, metric manipulation, and failure convergence. Design and troubleshoot Layer 2 architectures using STP/RSTP/MST, HSRP/VRRP, VLANs, port-channels, MLAG/vPC, and high-availability mechanisms. Design and implement QoS architectures, including classification, marking, queuing, policing, shaping, congestion management, and application-aware traffic treatment. Design and implement IP SLA and network monitoring mechanisms for path availability, latency, jitter, packet loss, and service verification. Design and implement Cisco SD-WAN architectures, including controllers, overlay tunnels, routing, policies, segmentation, application-aware routing, and centralized management. Design cloud connectivity and network architectures involving VPC/VNet, VPN, dedicated connectivity, cloud routing, load balancing, transit networking, and network overlays. Integrate data center networks with AWS/Azure or equivalent cloud environments, including routing domains, VPN connectivity, dedicated circuits, segmentation, and hybrid-cloud connectivity. Design and troubleshoot VMware network integration, including virtual switching, VLAN/VXLAN connectivity, distributed switching, and integration with physical data center fabrics. Design and troubleshoot Kubernetes networking and container network connectivity, including CNI, service networking, ingress/egress connectivity, and integration with underlying network infrastructure. Design and implement network security controls across routers, switches, firewalls, data center fabrics, VRFs, ACLs, segmentation, and external connectivity. Develop detailed network configurations from approved HLD/LLD and validate configuration consistency against design standards. Build network PoC/CPOC environments, including physical and virtual topology construction, configuration, traffic validation, failure testing, interoperability testing, and performance testing. Perform network staging, pre-production validation, commissioning, migration, upgrade, rollback, and post-implementation verification. Lead complex network migration and upgrade activities, including topology migration, routing migration, data center fabric migration, service migration, traffic cutover, rollback planning, and failure recovery. Perform packet-level and protocol-level troubleshooting using packet captures, routing tables, ARP/MAC tables, BGP/OSPF/IS-IS databases, MPLS labels, EVPN routes, logs, counters, and telemetry. Troubleshoot complex failures involving BGP, OSPF, IS-IS, MPLS, SR-MPLS, SRv6, VXLAN, EVPN, ACI, STP, HSRP/VRRP, QoS, and overlay/underlay connectivity. Analyze network performance using interface statistics, packet loss, latency, jitter, utilization, queue drops, CPU/memory utilization, routing convergence, and traffic-flow data. Develop network automation using Python, Ansible, REST APIs, Linux scripting, and infrastructure automation frameworks. Develop and maintain technical network documentation covering HLD, LLD, topology diagrams, IP addressing, VLAN/VNI mapping, VRF architecture, routing policy, configuration standards, test plans, migration plans, and rollback procedures. Design and support high-performance networking environments using RDMA, RoCEv2, InfiniBand, and Ultra Ethernet, where applicable. Troubleshoot and optimize RoCEv2/RDMA networks, including lossless Ethernet, PFC, ECN, congestion management, QoS, and latency-sensitive traffic requirements Requirements Masters’ or Bachelors’ degree in Computer Engineering, Computer Science, Information Technology or relevant studies. 12–15 years of hands-on experience in network engineering and architecture, including large-scale data center, enterprise, telecommunications, or service provider environments. Demonstrated track records in designs, builds, and modernizes network infrastructures with DevOps principles, leveraging automation, virtualization, and programmability to make the infrastructure agile and scalable. Deep hands-on experience with Cisco Nexus, Cisco ACI, VXLAN/EVPN, Spine-Leaf, Cisco Catalyst, and Cisco SD-WAN. Expert-level knowledge of BGP, OSPF, IS-IS, STP/RSTP/MST, HSRP/VRRP, MPLS, SR-MPLS, SRv6, L3VPN, L2VPN, and EVPN. Strong hands-on experience with Cisco ACI fabric architecture, including tenants, VRFs, bridge domains, EPGs, contracts, L3Out, fabric policies, and external routing. Strong hands-on experience with VXLAN/EVPN, including underlay/overlay architecture, VTEP, VNI, EVPN route types, Anycast Gateway, VRF, route targets, and multi-fabric connectivity. Strong experience with MPLS, MP-BGP, VPNv4/VPNv6, L3VPN, L2VPN, pseudowire, SR-MPLS, and SRv6. Strong understanding of Layer 2 high availability, including STP, HSRP/VRRP, vPC/MLAG, VLANs, port-channels, and failure convergence. Strong knowledge of QoS, IP SLA, network telemetry, performance monitoring, and traffic engineering. Hands-on experience with Cisco SD-WAN and overlay-based WAN architectures. Experience with cloud networking, including VPC/VNet, VPN, dedicated connectivity, cloud routing, transit networking, load balancing, and hybrid-cloud connectivity. Experience integrating network infrastructure with VMware and Kubernetes environments. Strong hands-on troubleshooting skills using packet captures, protocol analysis, routing databases, forwarding tables, logs, counters, telemetry, and network diagnostic tools. Strong experience with network migration, upgrade, staging, commissioning, cutover, rollback, and post-migration validation. Strong experience building PoC/CPOC environments and executing complex network validation and interoperability testing. Strong programming/scripting skills in Python and Linux, with practical experience using Ansible and REST APIs for network automation. Experience with RDMA, RoCEv2, InfiniBand, and/or Ultra Ethernet is advantageous. CCIE or equivalent professional-level certification is required. Dual CCIE is advantageous. HCIE or equivalent professional-level certification is advantageous Mandarin/Chinese and English proficiency is required to communicate technically with Chinese-speaking customers, counterparts, vendors, and engineering teams.