Work Model: Onsite

Allows Relocation: NO

SUMMARY

This position is responsible for the design, implementation, security, and ongoing support of OIT’s enterprise data center and campus network infrastructure. The engineer will work with Cisco ACI, Software‑Defined Access (SDA), Cisco Identity Services Engine (ISE), Cisco Catalyst platforms, and observability tools including ThousandEyes, Cyber Vision, and DNA Spaces. The role also includes the administration of Palo Alto firewalls supporting statewide systems.

DOR - Office of Information Technology (OIT) is seeking a highly skilled and experienced Network Infrastructure

Engineer to support and advance the State’s enterprise networking environment. This position plays a critical role in designing, deploying, and operating new LDC (Liquor Distribution Center) fabrics, networks, identity-driven access systems, and observability platforms.

The engineer will work closely with infrastructure team to ensure the State’s network services remain reliable, scalable, secure, and aligned with enterprise modernization goals. This is a hands-on engineering position that requires strong technical expertise, effective communication, and the ability to support mission-critical systems across data centers and statewide operations.

KEY RESPONSIBILITIES

• Cisco ACI fabric design and administration (VRF, BD, EPG/ESG, L3Out).
• ACI integrations with OpenShift VMM and Cilium/Isovalent.
• Catalyst and SDA wired/wireless fabric deployment and support.
• Identity‑driven access configuration using Cisco ISE (TACACS+, authentication/authorization, device profiling).
• ThousandEyes monitoring, Cyber Vision integration, and DNA Spaces analytics.
• Palo Alto next‑generation firewall configuration, policy development, and troubleshooting.
• Network documentation, lifecycle planning, and support of mission‑critical services

QUALIFICATIONS

Required: 

• Cisco ACI, Nexus platforms, multi‑tenant segmentation.
• SDA campus architectures.
• Cisco ISE policy sets and NAC.
• Palo Alto firewall administration and security profiles.
• Strong L2/L3 routing and switching skills.
• Ability to support high‑availability, enterprise‑scale infrastructure.

Preferred:

• Cisco certifications such as CCNP Data Center, CCNP Enterprise, CCIE, or equivalent experience.
• Hands-on experience with container networking and virtualization integrations.
• Familiarity with NIST frameworks and state-level cybersecurity requirements.
• Experience with network automation tools (Python, Ansible, REST APIs).
• Prior work in state government or large enterprise network environments.
• PCCSA – Palo Alto Networks Certified Cybersecurity Associate
• Foundational security, NGFW basics, threats, App-ID, and policy.
• PCNSA – Palo Alto Networks Certified Network Security Administrator
• Focuses on NGFW configuration, security profiles, NAT, App-ID, URL filtering, WildFire

Recommended Certifications: 

• CCNA
• CCNP Data Center
• CCNP Enterprise
• Cisco Specialist – ACI, SDA, or ISE
• PCNSA (Palo Alto)
• PCNSE (Palo Alto)
• ThousandEyes, Cyber Vision, or related platform training

MANAGER NOTES

A little in-state occasional travel

PRE-EMPLOYEMENT & CLIENT SUBMISSION REQUIREMENTS

Employment and/or client submission is contingent upon successful completion of required pre-employment screening and verification processes. These requirements include:

• Background check: Candidates must successfully complete the required background screening in accordance with company policy and applicable law.
• Drug screening: Candidates must successfully complete the required drug screening in accordance with company policy, applicable client requirements, and applicable law.
• Identity and location verification: Candidates may be required to complete identity and/or location verification using a secure verification tool prior to client submission.
• Employment eligibility: Candidates must provide appropriate documentation to verify employment eligibility as required by law.
• Qualification verification: Information provided during the application and recruiting process, including employment history, education, certifications, licenses, and professional references, may be verified as applicable.
• Additional client requirements: Additional screening, documentation, or verification may be required based on the client, position, work location, or applicable requirements.

All screening and verification activities will be conducted in accordance with applicable company policies, client requirements, and federal, state, and local laws.

BENEFITS

This is a contract opportunity with a great organization. As a contractor for Smith Johnson, you are eligible for medical, dental, life, disability. Smith Johnson pays for 70% of your medical and dental and 100% of life and disability. The contract is also eligible for PTO/holiday accrued monthly. You are also eligible for a 3% retirement matching plan. Smith Johnson believes in taking care of our contractors.