Senior Cisco ACI Consultant / Network Segmentation

Project overview

For our client in the healthcare sector, we are looking for an experienced Senior Cisco ACI Consultant (m/f/d) for the conception and implementation of secure network segmentation in a complex IT infrastructure. The project focuses on the further development of a network zone model according to BSI and KRITIS requirements as well as the technical implementation of segmentation using Cisco ACI, Endpoint Security Groups (ESGs) and Contracts.

In addition to profound technical expertise, a communicative and consulting-strong personality is sought who will drive the project forward professionally, develop technical concepts and support internal colleagues in implementation.

Responsibilities

The profile sought

Language requirements

• Analysis and evaluation of the existing network environment with a focus on Cisco ACI and Palo Alto Firewalls
• Conception and further development of a network zone and segmentation model, taking into account BSI and KRITIS requirements
• Creation of a technical blueprint as well as definition of architectural specifications and security guardrails
• Planning and implementation of network segmentation using Cisco ACI, especially ESGs and Contracts
• Development of a migration concept for transferring existing systems into the defined network zones
• Coordination of required firewall integrations with the responsible service providers
• Identification of suitable pilot groups as well as creation and execution of test and validation concepts
• Analysis of technical dependencies and creation of a structured migration and wave plan
• Preparation and technical support of the migration, including change implementation and hypercare
• Review and adaptation of existing operational documentation and operating manuals
• Professional coaching and knowledge transfer to internal colleagues in the areas of network and infrastructure
• Several years of professional experience as a network architect, network security consultant, or Cisco ACI specialist
• Very good practical knowledge of Cisco ACI, especially in the configuration and implementation of ESGs, Contracts, and network segmentation
• Profound knowledge in the conception and implementation of complex network and security architectures
• Experience with network zone models, micro-segmentation, and security-oriented network architectures
• Knowledge of BSI IT baseline protection and KRITIS requirements in the area of network and information security
• Experience in analyzing existing network environments and creating technical blueprints and migration concepts
• Knowledge of working with Palo Alto Firewalls and integrating firewall solutions into segmented network architectures
• Experience in planning, executing, and validating complex infrastructure migrations
• Strong communication and consulting skills as well as the ability to professionally guide technical colleagues and impart knowledge
• Independent, structured, and solution-oriented way of working
• German: Fluent
• English: Advanced knowledge

Project details

• Start: nächstmöglich
• Duration: nächstmöglich - 31.12.2026
• Remote: hybrid
• Location: Hannover, Niedersachsen, DE, DE
• Languages: German, English