What are the responsibilities and job description for the ACI Datacenter Segmentation Engineer -Onsite- Houston- W2 only- No C2C. position at EPMA?
One of our major clients in the Oil & Gas industry is looking for an ACI Datacenter Segmentation Engineer to join their team.
Long term Contract- 1 year (Extendable)
Location – Houston Downtown - Onsite (5 days a week)
W2 Employment only/ No C2C/ No Sponsorship
Job Summary:
We are seeking a skilled and detail-oriented ACI Datacenter Segmentation Engineer to design, implement, and manage segmentation strategies in Application Centric Infrastructure (ACI) environments. This role will focus on ensuring secure, scalable, and efficient network segmentation within enterprise datacenters. The ideal candidate will have a deep understanding of ACI technologies, network security, and virtualization concepts to maintain and optimize modern datacenter infrastructure.
Key Responsibilities:
- Design and Implementation:
- Develop and implement ACI-based segmentation strategies, including Endpoint Groups (EPGs), contracts, and VRFs, to support business and security requirements.
- Configure and manage policies for micro-segmentation and application-centric architectures in ACI.
- Operations and Maintenance:
- Monitor ACI environments to ensure proper segmentation and security.
- Troubleshoot and resolve network segmentation-related issues within the ACI fabric.
- Policy Management:
- Define and enforce security policies across segmented workloads.
- Optimize traffic flow using contracts and filters between EPGs.
- Collaboration:
- Work closely with security, application, and infrastructure teams to align segmentation strategies with organizational goals.
- Document best practices and maintain comprehensive network diagrams and documentation.
- Innovation:
- Evaluate new technologies and methodologies for improving segmentation and network efficiency.
- Propose enhancements to existing ACI configurations to support emerging business needs.
Required Qualifications:
- Experience:
- 3 years of experience in Cisco ACI environments.
- Strong background in network engineering, with a focus on segmentation and security.
Preferred Qualifications:
- Cisco certifications (e.g., CCNP, CCIE in Data Center).
- Experience with automation and scripting (e.g., Python, Ansible).
Knowledge Areas:
- Cisco ACI:
- ACI architecture, components (APIC, leaf, and spine), and policy model.
- Designing and configuring VRFs, Bridge Domains (BDs), and Endpoint Groups (EPGs).
- Understanding and managing ACI contracts, filters, and micro-segmentation.
- Network Security and Segmentation:
- Firewalls, access control policies, and securing east-west traffic.
- VLANs, VXLANs, and their role in modern datacenter segmentation.
- Virtualization and Cloud Integration:
- Integration of ACI with VMware.
- Overlay and underlay network concepts.
- Automation and Orchestration:
- Using REST APIs and tools like Postman for managing ACI configurations.
- Scripting with Python or Ansible for configuration management and automation.
- Troubleshooting and Monitoring:
- Utilizing tools like Cisco Nexus Dashboard, Splunk, or other network monitoring platforms.
- Analyzing logs, flow data, and metrics to identify and resolve segmentation issues.
- Compliance and Security Standards:
- Knowledge of industry standards like PCI-DSS, HIPAA, or ISO 27001 as they pertain to network segmentation.
Soft Skills:
- Strong analytical and problem-solving abilities.
- Excellent communication skills, with the ability to explain complex concepts to non-technical stakeholders.
- Ability to work collaboratively in a team environment.
In compliance with federal law, all persons hired will be required to verify identity and eligibility to work in the United States and to complete the required employment eligibility verification document form upon hire.