Lead Network Engineer/Architect - Cisco SD-Access & DNA Center

About the Role

We are seeking an experienced Lead Network Engineer / Architect to drive an end\-to\-end Enterprise Network Transformation project. In this role, you will lead the migration of a legacy Layer\-2/Layer\-3 campus switching network to a modern Cisco Software\-Defined Access (SD\-Access / SDA) fabric architecture.

Key Responsibilities

• Assessment \& Readiness: Evaluate existing campus network architecture across all sites, conduct gap analyses for SDA readiness, and analyze VLANs, routing, and segmentation dependencies to establish migration prerequisites.
• Architecture \& Solution Design: Design SDA underlays/overlays, fabric domains, IP pools, Virtual Networks (VNs), Scalable Group Tags (SGTs), and control\-plane/border\-node architectures. Develop comprehensive High\-Level Design (HLD) and Low\-Level Design (LLD) documents for Architecture Review Board (ARB) approval.
• Fabric Deployment \& Automation: Set up and configure Cisco DNA Center (DNAC) in Fabric Mode, execute LAN automation for underlays, onboard access switches (\~230 stackable IDF units) and access points (\~250 APs), and configure control\-plane and border nodes.
• Identity \& Wireless Integration: Integrate existing Cisco Identity Services Engine (ISE) for macro\-/micro\-segmentation and role\-based access controls. Deploy a mixed\-mode wireless architecture (SDA Fabric\-enabled at campus sites and FlexConnect for non\-fabric sites) with redundant Wireless LAN Controllers (WLCs) per data center.
• Multi\-Site Migration Execution: Formulate phased migration strategies, maintenance runbooks, risk mitigation plans, and rollback procedures. Lead on\-site/remote cutovers of switches, APs, VLANs, and routing across all assigned sites:
• Abu Dhabi HQ \& Branch Sites: 11 sites / HQ 4 (\~33 deployment days)
• Al Ain Site: 1 site (\~3 deployment days)
• Dubai Site: 1 site (\~3 deployment days)
• Resource Direction \& Support: Coordinate, guide, and supervise 3 x CCNA\-level security\-cleared field/support engineers for on\-site physical execution, cabling validation, site cutover tasks, and baseline user testing.
• Testing, Hardening \& Handover: Conduct fabric stability, failover, and policy enforcement testing. Complete baseline hardening, integrate with ITSM platforms, produce updated network documentation, and deliver knowledge transfer (KT) workshops to operational teams.

Qualifications \& RequirementsRequired Technical Skills:

• Certifications: CCNP Enterprise / Security or CCIE (Enterprise Infrastructure / Wireless / Security) preferred.
• Hands\-on Experience: Proven track record in designing, deploying, and migrating networks using Cisco SD\-Access (SDA) and Cisco DNA Center (DNAC) in Fabric Mode.
• Identity \& Policy: Strong proficiency in Cisco ISE, including posture assessment, AAA, profiling, and SGT\-based policy enforcement (macro/micro\-segmentation).
• Wireless Expertise: Experience configuring and deploying Cisco Centralized, FlexConnect, and Fabric\-enabled wireless architectures using Cisco WLCs.
• Routing \& Switching: In\-depth knowledge of L2/L3 switching architectures, BGP, OSPF, IS\-IS, LISP, VXLAN, and stackable access switch architectures (IDF stacks).

Security Clearance \& Site Logistics:

• Active Security Clearance: Mandatory requirement for accessing project sites.
• Site Mobility: Willingness to travel between designated project sites in Abu Dhabi, Al Ain, and Dubai according to the migration schedule.

Application Question(s):

• It is on freelance contract, and part time role. Are you willing for it?
• Do you have valid work permit in UAE?
• Can you join us immediately?

Language:

• Arabic (Required)
• English (Required)

License/Certification:

• CCNA (Required)
• Security Clearance (Required)

Location:

• Abu Dhabi (Required)

Work Location: In person