Lead Network Engineer / Architect – Cisco SD-Access & DNA Center

About the Role

We are seeking an experienced Lead Network Engineer / Architect to drive an end-to-end Enterprise Network Transformation project. In this role, you will lead the migration of a legacy Layer-2/Layer-3 campus switching network to a modern Cisco Software-Defined Access (SD-Access / SDA) fabric architecture.

Key Responsibilities

• Assessment & Readiness: Evaluate existing campus network architecture across all sites, conduct gap analyses for SDA readiness, and analyze VLANs, routing, and segmentation dependencies to establish migration prerequisites.
• Architecture & Solution Design: Design SDA underlays/overlays, fabric domains, IP pools, Virtual Networks (VNs), Scalable Group Tags (SGTs), and control-plane/border-node architectures. Develop comprehensive High-Level Design (HLD) and Low-Level Design (LLD) documents for Architecture Review Board (ARB) approval.
• Fabric Deployment & Automation: Set up and configure Cisco DNA Center (DNAC) in Fabric Mode, execute LAN automation for underlays, onboard access switches (~230 stackable IDF units) and access points (~250 APs), and configure control-plane and border nodes.
• Identity & Wireless Integration: Integrate existing Cisco Identity Services Engine (ISE) for macro-/micro-segmentation and role-based access controls. Deploy a mixed-mode wireless architecture (SDA Fabric-enabled at campus sites and FlexConnect for non-fabric sites) with redundant Wireless LAN Controllers (WLCs) per data center.
• Multi-Site Migration Execution: Formulate phased migration strategies, maintenance runbooks, risk mitigation plans, and rollback procedures. Lead on-site/remote cutovers of switches, APs, VLANs, and routing across all assigned sites:
• Abu Dhabi HQ & Branch Sites: 11 sites / HQ 4 (~33 deployment days)
• Al Ain Site: 1 site (~3 deployment days)
• Dubai Site: 1 site (~3 deployment days)
• Resource Direction & Support: Coordinate, guide, and supervise 3 x CCNA-level security-cleared field/support engineers for on-site physical execution, cabling validation, site cutover tasks, and baseline user testing.
• Testing, Hardening & Handover: Conduct fabric stability, failover, and policy enforcement testing. Complete baseline hardening, integrate with ITSM platforms, produce updated network documentation, and deliver knowledge transfer (KT) workshops to operational teams.

Qualifications & RequirementsRequired Technical Skills:

• Certifications: CCNP Enterprise / Security or CCIE (Enterprise Infrastructure / Wireless / Security) preferred.
• Hands-on Experience: Proven track record in designing, deploying, and migrating networks using Cisco SD-Access (SDA) and Cisco DNA Center (DNAC) in Fabric Mode.
• Identity & Policy: Strong proficiency in Cisco ISE, including posture assessment, AAA, profiling, and SGT-based policy enforcement (macro/micro-segmentation).
• Wireless Expertise: Experience configuring and deploying Cisco Centralized, FlexConnect, and Fabric-enabled wireless architectures using Cisco WLCs.
• Routing & Switching: In-depth knowledge of L2/L3 switching architectures, BGP, OSPF, IS-IS, LISP, VXLAN, and stackable access switch architectures (IDF stacks).

Security Clearance & Site Logistics:

• Active Security Clearance: Mandatory requirement for accessing project sites.
• Site Mobility: Willingness to travel between designated project sites in Abu Dhabi, Al Ain, and Dubai according to the migration schedule.

Application Question(s):

• It is on freelance contract, and part time role. Are you willing for it?
• Do you have valid work permit in UAE?
• Can you join us immediately?

Language:

• Arabic (Required)
• English (Required)

License/Certification:

• CCNA (Required)
• Security Clearance (Required)

Location:

• Abu Dhabi (Required)

Work Location: In person