NetOps Architect

Responsibilities: • To designs, builds, and modernizes network infrastructures by blending traditional network architecture with DevOps principles, leveraging automation, virtualization, and programmability to make the infrastructure agile, scalable, and highly responsive to application needs. • Lead technical design workshops and translate network requirements into detailed HLD and LLD for enterprise, data center, cloud, and service provider environments. • Design and implement Cisco Nexus and Cisco ACI data center fabrics using VXLAN/EVPN, Spine-Leaf, Anycast Gateway, VTEP, VLAN/VNI mapping, VRF, and multi-site/multi-pod architectures. • Design and implement BGP EVPN control planes, including route types, route targets, route distinguishers, EVPN route advertisement, underlay/overlay separation, and inter-VRF connectivity. • Design and troubleshoot Cisco ACI fabric architecture, including tenants, VRFs, bridge domains, EPGs, contracts, L3Out, route control, fabric policies, and external connectivity. • Design and implement enterprise and service provider routing architectures using BGP, OSPF, IS-IS, MPLS, SR-MPLS, SRv6, L3VPN, L2VPN, and segment routing. • Design and troubleshoot MPLS L3VPN/L2VPN, including PE-CE routing, MP-BGP, VRF, route-target policies, label distribution, VPNv4/VPNv6, pseudowire, and EVPN services. • Design and implement SR-MPLS and SRv6 architectures, including segment routing policies, traffic engineering, underlay routing, SID allocation, and path selection. • Design and troubleshoot BGP routing policies, including route filtering, communities, local preference, MED, AS-path manipulation, route reflectors, multipath, and traffic engineering. • Design and troubleshoot OSPF and IS-IS underlay networks, including area/level design, adjacency, route summarization, redistribution, metric manipulation, and failure convergence. • Design and troubleshoot Layer 2 architectures using STP/RSTP/MST, HSRP/VRRP, VLANs, port-channels, MLAG/vPC, and high-availability mechanisms. • Design and implement QoS architectures, including classification, marking, queuing, policing, shaping, congestion management, and application-aware traffic treatment. • Design and implement IP SLA and network monitoring mechanisms for path availability, latency, jitter, packet loss, and service verification. • Design and implement Cisco SD-WAN architectures, including controllers, overlay tunnels, routing, policies, segmentation, application-aware routing, and centralized management. • Design cloud connectivity and network architectures involving VPC/VNet, VPN, dedicated connectivity, cloud routing, load balancing, transit networking, and network overlays. • Integrate data center networks with AWS/Azure or equivalent cloud environments, including routing domains, VPN connectivity, dedicated circuits, segmentation, and hybrid-cloud connectivity. • Design and troubleshoot VMware network integration, including virtual switching, VLAN/VXLAN connectivity, distributed switching, and integration with physical data center fabrics. • Design and troubleshoot Kubernetes networking and container network connectivity, including CNI, service networking, ingress/egress connectivity, and integration with underlying network infrastructure. • Design and implement network security controls across routers, switches, firewalls, data center fabrics, VRFs, ACLs, segmentation, and external connectivity. • Develop detailed network configurations from approved HLD/LLD and validate configuration consistency against design standards. • Build network PoC/CPOC environments, including physical and virtual topology construction, configuration, traffic validation, failure testing, interoperability testing, and performance testing. • Perform network staging, pre-production validation, commissioning, migration, upgrade, rollback, and post-implementation verification. • Lead complex network migration and upgrade activities, including topology migration, routing migration, data center fabric migration, service migration, traffic cutover, rollback planning, and failure recovery. • Perform packet-level and protocol-level troubleshooting using packet captures, routing tables, ARP/MAC tables, BGP/OSPF/IS-IS databases, MPLS labels, EVPN routes, logs, counters, and telemetry. • Troubleshoot complex failures involving BGP, OSPF, IS-IS, MPLS, SR-MPLS, SRv6, VXLAN, EVPN, ACI, STP, HSRP/VRRP, QoS, and overlay/underlay connectivity. • Analyze network performance using interface statistics, packet loss, latency, jitter, utilization, queue drops, CPU/memory utilization, routing convergence, and traffic-flow data. • Develop network automation using Python, Ansible, REST APIs, Linux scripting, and infrastructure automation frameworks. • Develop and maintain technical network documentation covering HLD, LLD, topology diagrams, IP addressing, VLAN/VNI mapping, VRF architecture, routing policy, configuration standards, test plans, migration plans, and rollback procedures. • Design and support high-performance networking environments using RDMA, RoCEv2, InfiniBand, and Ultra Ethernet, where applicable. • Troubleshoot and optimize RoCEv2/RDMA networks, including lossless Ethernet, PFC, ECN, congestion management, QoS, and latency-sensitive traffic requirements Requirements • Masters’ or Bachelors’ degree in Computer Engineering, Computer Science, Information Technology or relevant studies. • 12–15 years of hands-on experience in network engineering and architecture, including large-scale data center, enterprise, telecommunications, or service provider environments. • Demonstrated track records in designs, builds, and modernizes network infrastructures with DevOps principles, leveraging automation, virtualization, and programmability to make the infrastructure agile and scalable. • Deep hands-on experience with Cisco Nexus, Cisco ACI, VXLAN/EVPN, Spine-Leaf, Cisco Catalyst, and Cisco SD-WAN. • Expert-level knowledge of BG…