16284 - Network Infrastructure Engineer

Smith Johnson Tech•Clinton, MS

2d•Onsite

About The Position

DOR - Office of Information Technology (OIT) is seeking a highly skilled and experienced Network Infrastructure Engineer to support and advance the State’s enterprise networking environment. This position plays a critical role in designing, deploying, and operating new LDC (Liquor Distribution Center) fabrics, networks, identity-driven access systems, and observability platforms. The engineer will work closely with infrastructure team to ensure the State’s network services remain reliable, scalable, secure, and aligned with enterprise modernization goals. This is a hands-on engineering position that requires strong technical expertise, effective communication, and the ability to support mission-critical systems across data centers and statewide operations.

Requirements

Cisco ACI, Nexus platforms, multi‑tenant segmentation.
SDA campus architectures.
Cisco ISE policy sets and NAC.
Palo Alto firewall administration and security profiles.
Strong L2/L3 routing and switching skills.
Ability to support high‑availability, enterprise‑scale infrastructure.

Nice To Haves

Cisco certifications such as CCNP Data Center, CCNP Enterprise, CCIE, or equivalent experience.
Hands-on experience with container networking and virtualization integrations.
Familiarity with NIST frameworks and state-level cybersecurity requirements.
Experience with network automation tools (Python, Ansible, REST APIs).
Prior work in state government or large enterprise network environments.
PCCSA – Palo Alto Networks Certified Cybersecurity Associate Foundational security, NGFW basics, threats, App-ID, and policy.
PCNSA – Palo Alto Networks Certified Network Security Administrator Focuses on NGFW configuration, security profiles, NAT, App-ID, URL filtering, WildFire

Responsibilities

Cisco ACI fabric design and administration (VRF, BD, EPG/ESG, L3Out).
ACI integrations with OpenShift VMM and Cilium/Isovalent.
Catalyst and SDA wired/wireless fabric deployment and support.
Identity‑driven access configuration using Cisco ISE (TACACS+, authentication/authorization, device profiling).
ThousandEyes monitoring, Cyber Vision integration, and DNA Spaces analytics.
Palo Alto next‑generation firewall configuration, policy development, and troubleshooting.
Network documentation, lifecycle planning, and support of mission‑critical services.