Cisco ACI Experts in Germany
matched in minutesHire experts who design ACI fabrics, define application-centric policies and integrate Cisco APIC with security and cloud services. FRATCH connects you with vetted, available freelancers through fast, precise AI matching.
Meet FRATCH Experts in Germany, who have recently used Cisco ACI
Rudolf E.
Last position:
Datacenter Engineer, Network & Security Administrator at International Insurance Group
Operation and further development of the network and security infrastructure.
Monitoring, analysis and resolution of network and security incidents.
Cross-departmental collaboration with other teams on operations and further development, and reporting.
Firewall vulnerability analysis.
Firewall access requests.
Troubleshooting IP communication issues on network and firewall infrastructure.
Security-critical IT infrastructure, processing of personal data, compliance with legal requirements.
Products: Palo Alto Networks Firewalls, Cisco ACI, Checkpoint Firewalls, F5
Technologies: SDN, SDWAN, Cisco EPIC, Cisco ACI
Frank J.
Last position:
Senior Project Manager / IT Manager - Email Gateway Migration & Information Security at Public Authority
- Strategic planning, detailed technical preparation and operational management of an email gateway migration in a security-critical government environment.
- Preparation of the technical specification and development of technical concepts and migration approaches in line with BSI requirements.
- Technical requirements management with business units, information security and operations.
- Coordination of external service providers, integrators and implementation partners; maintenance of project plans, milestones, resources, risks and dependencies.
- Regular reporting to project management, the program environment and internal stakeholders.
Tungi D.
Last position:
Technical PMO | Delivery Master | LLM-Expert at Stealth - NDA
- Owning RAG, LLM-System, ML-ops-Pipelines for various startups in Insurance, Banking, Energy (KRITIS)
Eddy A.
Last position:
Network Administrator at Knauf Bayern
- Management of firewalls (Securepoint)
- Operation and maintenance of the client-server infrastructure (Windows)
- Operation and patching of IoT devices in the hazard management system (cameras, Web IOS, IP-to-serial converters)
- Support with the integration of security technology into existing IT infrastructures
- Planning and implementation of network segmentation and separation
- Transfer and implementation of solutions in other plants
- Tools used: Wireshark, Network Service Manager, PRTG, Cisco Catalyst, Nexus, HP Service, FNT/Command Manager Console, Service Now, Confluence, Active Directory, Wingard, Securepoint FW.
Vicenco K.
Last position:
ITSM Project Manager (self-employed)
Unified ITSM framework
- Definition of a company-wide ITSM target picture
- Introduction of a uniform service structure across all business units
SLA and OLA management
- Building a standardized SLA framework
- Definition of service classes (Business Critical, Standard, Low Priority)
- Introduction of OLAs between internal teams
- Building meaningful SLA reporting
- Definition of KPI and service dashboards for business units
Service portfolio management
- Definition of service descriptions
- If needed, preparing possible cost and service billing
Ticketing & processes
- Incident management
- Uniform ticket categories
- Standardized prioritization
- Escalation matrix
- Automations
- Self-service optimization
Request fulfillment
- Service catalog across all business units
- Approval workflows
Problem management
- Introduction of root cause analysis
- Known error database
- Problem review process
Complete asset management concept
- Hardware lifecycle management
- Software lifecycle management
- Leasing lifecycle
- Mobile device lifecycle
- Monitor lifecycle
- Phone lifecycle
Processes
- Procurement
- Goods receipt
- Inventory
- Assignment
- Return
- Disposal
- Leasing return Goal: single source of truth for all assets
CMDB design
- Definition of all configuration items:
- Workplace
- Notebooks
- Monitors
- Mobile phones
- Printers
Infrastructure
- Servers
- Firewalls
- Switches
- WLAN
- Storage
- Backup systems
Cloud
- Azure resources
- Microsoft 365
- SaaS services
Relationships
- User ↔ Asset
- Asset ↔ Service
- Service ↔ Infrastructure
- Location ↔ Asset
- Goal: make all service dependencies visible
Software asset & license management
- License management concept
- License balancing
- Compliance reporting
- Microsoft license management
- Adobe license management
- SaaS management
- Contract management
- Renewal management
Interfaces & automation Existing systems
- Workday
- Joiner
- Mover
- Leaver
TESMA
- Leasing data
- Contract data
Matrix42
- Asset synchronization
- User synchronization
Active Directory / Entra ID
- User management
Microsoft 365
- License assignment
- Group management
Dormakaba
Access processes
Lifecycle services
Monitoring platforms
- PRTG
- Palo Alto
- Cisco
Reporting & KPI framework
- Definition of a management dashboard
- KPIs
- Ticket volume
- SLA fulfillment
- MTTR
- First resolution rate
- Asset accuracy
- License compliance
- Change success rate
- Service availability
- Degree of automation
Network redesign support
- Governance
- Support of the network redesign from an ITSM point of view
- Definition of affected services
- Change management structure
- Communication concept
CMDB integration
- Recording of all network components
- Service mapping
- Dependency analysis
Validation of documentation and knowledge base articles
- Network documentation
- Operations documentation
- Standard changes
Monitoring & event management
- Target picture
- Central monitoring concept
- Event management process
- Alerting strategy
- Escalation model
Systems
Cisco
Palo Alto
Fortinet
Rubrik
Veeam
Matrix42
Azure
Microsoft 365 Automation
Ticket creation from monitoring
Escalations
Standard actions
Audit, compliance & information security
- ISO 27001 consulting
- TISAX consulting
- NIS2 preparation - consulting
- Audit-ready processes
- Documentation structure
- Evidence tracking in Matrix42
Roadmap
- 12-month roadmap
- Prioritization of all measures
- Quick wins
- Medium-term projects
- Long-term target picture
- Documentation
Markus B.
Last position:
Developer / DevOps, Consulting at A state authority in Baden-Württemberg / FSAS Technologies GmbH
Oracle Project Management and Automation
As part of the project, the operation of an Oracle infrastructure was automated by developing and enhancing Puppet modules and migrating existing Bash scripts to a standardized configuration management solution.
The aim of the project was to standardize and automate administrative processes, improve the maintainability of the Oracle platform, and increase the efficiency and traceability of infrastructure management through the use of Infrastructure as Code.
- Analysis and migration of existing Bash shell scripts to a Puppet-based automation solution
- Development and enhancement of Puppet modules for Oracle environments
- Automation of installation, configuration and operational processes using Infrastructure as Code
- Standardization and optimization of configuration management for Oracle systems
- Creation and maintenance of technical and operational documentation
- Planning, coordination and professional support during project implementation
- Operation and automation of Oracle systems on x86-based Linux server platforms
- Testing and quality assurance of the developed Puppet modules
- Analysis and resolution of technical errors as part of the automation and migration
- Close coordination with specialist departments and infrastructure teams to implement automation requirements
Technologies used: Puppet 7/8, SLES 15, Oracle 19, Oracle Grid, SVN, Windows Server, Confluence, VS Code, Ruby, Bash, Pass
Eduard D.
Last position:
Guest Lecturer at Politehnica University Bucharest
"Reasoning Models: From LLM Foundations to NOC Automation."
Ulf H.
Last position:
Configuration Manager (Interim) at In-house Development
- Requirements analysis and replacement of local SharePoint as CMDB with open source NetBox to prepare for deploying Cisco ACI (SD-WAN) with Microsoft Azure
- Coordination with systems like Checkmk and Grasp
- Introduction and coordination of cmdbsyncer as CMDB data hub; further development of the syncer with Kuhn & Ruess GmbH
- Implementation of SNMPv3 on AIX LPAR/VIO, Linux, Windows, SAN/storage, network components (Cisco switches, F5 load balancers, Palo Alto and CheckPoint firewalls, iLO boards)
- Deployment and further development of the network scanner JDisc in cooperation with the vendor (Utimaco HSMs, Linux detection)
- Integration of NetBox, JDisc, and cmdbsyncer into the infrastructure using Docker containers
- End-user training: preparation, creation of materials, and delivery
- Creation of data flow and network diagrams
- Population and planning of IPv4/IPv6 with NetBox including VLAN import
- Dual-stack setup of servers and clients with IPv4 and IPv6
- Connection of REST interfaces for Checkmk, JDisc, vSphere, HMC, i-doit, NetBox Software: Confluence, Jira, MS Office 365, Teams, i-doit, NetBox, JDisc, cmdbsyncer, DB Visualizer, vSphere, HMC
Mario P.
Last position:
Senior IT Project Manager / Program Lead – Network Strategy 2030 at ALDB GmbH
- Holistic responsibility for modernizing and expanding federal networks and upgrading critical data center and telecom infrastructure in the high-security agency environment of BDBOS
- Planning and management of the expansion of national BOS network infrastructure in the VS-NfD/KRITIS environment with technical decision authority at the architecture and component level (Cisco, Layer 2/3, WAN redundancy)
- Planning, tendering (EVB-IT/UVgO) and oversight of the upgrade of security-critical telecom infrastructure for emergency call 110/112 (ACD)
- Capacity planning, rack integration, structured cabling, power supply, cooling concept (CRAC/In-Row) and DCIM monitoring for data center expansion
- Building the IT department from scratch: structures, governance, processes, team recruiting, vendor selection and long-term IT strategy
- Planning and managing infrastructure and application migrations: migration strategies, batch planning, hypercare stabilization and rollback concepts
- Creating vendor-neutral specifications (telecom systems, signature solutions) according to EVB-IT and UVgO; contract award and vendor management
- Setting up a secure IT environment according to BSI basic protection, ISO 27001 and VS-NfD; developing IT security concepts and CMDB analyses
- Hands-on program leadership: decision papers for management and steering committees, risk management, reporting and change request control
Charles J.
Last position:
Network Architect at RedGlobal GmbH
- Configuration of Dell switches, routers, and access points.
- Troubleshooting and issue resolution.
- Extreme, Cisco and Dell switches and routers environment, Extreme A3 NAC, Extreme CloudIQ.
Majid A.
Last position:
Lead Consultant at Infosys
- Network automation
- CI/CD and Docker environment
- Python Nornir for network automation
- pyATS for monitoring and test case automation
- Network Access Control (Radius) and Device Admin Access Control (TACACS) with AAA and Cisco ISE with Cisco/HP/Aruba Devices
- Cisco ISE Clusters (2/4/8 nodes) configuration
- Cisco ISE Authentication and Authorization configuration
- Cisco/HP/Aruba Switch/WLC Tacacs/dot1x/Radius configuration
- Cisco ISE automation with Restconf and Python
Oumarou B.
Last position:
WAN & Data Center Network Administrator at Teamative Germany GmbH
- Implementation, administration, configuration and operation of Cisco network components (PE-CE routers, provider routers, SD-WAN, switches, access gateways)
- Ensuring the availability, performance, further development and operation of the network infrastructure of the state access network WAN
- Creation of technical documentation in FNT-Command
- Troubleshooting and handling of incidents, changes, requests and problems tickets
- Tools: ITSM, Command-FNT, Orion, ASDM, Panorama
- Scripting: Bash Shell, Python, Ansible
- Protocols: IS-IS, BGP, MPLS, VRF, GETVPN, Segment-Routing, Static routing
- Devices: NCS-57C3 Series, ASR-1000 Series, ISR-4331, ISR-4451 SD-WAN, Catalyst 9k Series, Nexus 9k Series
- Firewall: Check Point, Palo Alto, Cisco ASA-5585, FWSM
Pascal F.
Last position:
Senior Network Security Consultant at IT-Systemhaus
- Provided expert level consulting for lifecycle, upgrades and refresh activities
- Used Remedy for effort recording and billing to customers
- Used ServiceNow for service management and workflow
- Used Jira for project management with agile/Scrum methods
- Used Confluence for documentation
- Worked with customer-specific software tools
- Worked with customer-provided and secured hardware suitable for IT security operations infrastructure setup for customers
- Built firewall rule sets and handed over to service owner and delivery teams
- Environment: Cisco ASA, Cisco Firepower, CSM, Cisco AnyConnect, Cisco ISE, Check Point VSX and gateways
Axel D.
Last position:
Instructor at Cimdata
- Delivered training courses for IT specialists (Fachinformatiker)
Martin F.
Last position:
IT Security Consultant at Freelance
Discover over 15,000 top freelancers
Statistics of experts using Cisco ACI
Aggregated from the professional profiles of matched freelancers.
Experience
26 years
Position duration
1.9 years
Positions per freelancer
18
Top business areas
Information Technology, Operations, Project Management
Top industries
Information Technology, Banking and Finance, Telecommunication
Certification focus areas
Information Technology, Business Intelligence, Product Development
Bachelor's degree or higher
69%
Master's degree or higher
46%
Doctorate
8%
Certifications per freelancer
7
Most common languages
German, English, French
Speak two or more languages
100%
Based on our profile pool as of 29 Oct 2026.
Daily rate distribution
The chart shows how the daily rates of experts in this technology in Germany are distributed, based on recent contracts on our platform. Each bar covers a rate range — its height shows the share of experts charging within that range.
Average rates of experts in Germany using Cisco ACI
Rates are based on recent contracts and do not include FRATCH margin.
The average daily rate is the mean of all daily rates from recent contracts of comparable freelancers on our platform.
The median daily rate is the middle value of all daily rates — half of comparable freelancers charge less, half charge more. Unlike the average, it is barely affected by outliers.
Calculated based on our freelancers’ daily rates as of 29 Oct 2026. Actual rates may vary depending on seniority level, experience, skill specialization, project complexity, and engagement length.
Cisco ACI experts industry focus
See which industries our matched freelancers work in most often — every figure is calculated live from the freelancers on FRATCH.
- Information Technology (100%)
- Banking and Finance (81%)
- Telecommunication (69%)
- Automotive (56%)
- Manufacturing (56%)
- Energy (44%)
- Healthcare (38%)
- Insurance (38%)
Please note that freelancers can work across multiple industries, so percentages overlap.
About the technology
What Cisco ACI does
Cisco ACI, or Cisco Application Centric Infrastructure, is a policy-based approach to managing data center networks. It uses the Cisco APIC controller to express application requirements and apply them across a leaf-and-spine fabric. Teams use it to connect workloads, segment traffic and make network behavior consistent across physical and virtual environments.
Fabric and policy
An ACI fabric combines Nexus leaf and spine switches with APIC controllers. Specialists define tenants, bridge domains, endpoint groups, contracts and filters to control how applications communicate. They also plan VLAN and VXLAN integration, external routed networks, Layer 3 connectivity and physical or virtual endpoint attachment.
- Model application connectivity with endpoint groups and contracts
- Build resilient leaf-and-spine fabric designs
- Connect data centers, WANs and external networks
- Apply segmentation and security policy consistently
Ecosystem and tooling
Cisco ACI projects often include Nexus switching, APIC automation and integration with VMware vCenter, Microsoft Hyper-V or container environments. Useful adjacent skills include BGP, OSPF, VXLAN, firewall policy, load balancing and identity-aware segmentation. Strong specialists also work with REST APIs, Ansible, Terraform and Cisco Intersight where automation is part of the operating model.
When companies need support
Companies bring in freelance Cisco ACI expertise during fabric design, data center migration, network segmentation and operating-model changes. Germany-based teams may need on-site work for hardware, cabling or migration windows, while policy design, documentation and troubleshooting can often happen remotely. Clear German or English communication helps when network, security and application teams share ownership.
- Replace manual switch configuration with policy-driven operations
- Migrate workloads into a new ACI fabric
- Investigate endpoint learning, contract and forwarding issues
- Connect ACI with VMware, firewalls or load balancers
Delivery and operations
A reliable engagement starts with a documented topology, application dependency map and migration plan. Professionals validate fabric health, controller redundancy, firmware compatibility and external connectivity before changes reach production. They should leave behind tested policies, repeatable automation, monitoring guidance and runbooks that internal teams can use.
Signs of strong expertise
Look for specialists who can explain both the application intent and the packet path through the ACI fabric. Practical experience should cover APIC health, endpoint tracking, contracts, faults, fabric discovery and controlled change management. Ask for examples of migrations, segmentation work and incident analysis, then test whether the professional can make complex policy choices clear to network and security stakeholders.
Frequently asked questions
Questions about Cisco ACI? Start with the answers below.
Cisco ACI is used to operate data center networks through application-aware policies rather than isolated device configuration. It supports workload connectivity, segmentation, multi-tenant environments, data center migrations and integration with virtualization, security and cloud services.
Cisco Application Centric Infrastructure centralizes policy through APIC and applies intent across a leaf-and-spine fabric. Traditional networking often relies more heavily on per-device configuration, while ACI adds endpoint groups, contracts, telemetry and automation. The right choice depends on the operating model, existing hardware and the level of policy standardization required.
A strong Cisco ACI specialist commonly understands Nexus switching, VXLAN, VLANs, BGP, OSPF, firewalls and load balancers. Experience with VMware, container networking, REST APIs, Ansible or Terraform is valuable when the fabric must integrate with wider infrastructure automation.
The required depth depends on the scope. A fabric design, migration or segmentation program calls for a professional who has handled production APIC operations, dependency analysis and controlled cutovers. A focused troubleshooting or policy review may need a narrower engagement, provided the specialist can work from accurate topology and application data.
Cisco ACI integrates with VMware environments and can connect to other virtualization, container, security and load-balancing systems. The exact design depends on endpoint placement, integration method, traffic flows and ownership of policy. A specialist should define these boundaries before implementation.
Cisco Application Centric Infrastructure work can often be performed remotely for design, policy, documentation, automation and troubleshooting. On-site collaboration may still be useful for hardware installation, cabling and major migration windows in Germany. Agree on access controls, change procedures and German or English communication expectations at the start.
Ask how the professional approaches fabric design, endpoint groups, contracts, external connectivity and migration risk. Cisco ACI quality is easier to judge when candidates can show clear diagrams, explain packet paths, discuss APIC faults and describe how they validate changes without disrupting dependent applications.
Cisco ACI projects can suffer from unclear application dependencies, poorly scoped contracts, incompatible integrations or changes made without a tested rollback plan. Weak documentation and unclear ownership between network, security and application teams create further risk. A disciplined specialist reduces it through discovery, staged validation, monitoring and precise runbooks.
The average hourly rate of freelancers in Germany who have used Cisco ACI in their recent projects is 96 €, which corresponds to a daily rate of about 766 € based on an 8-hour working day.
Of the freelancers in Germany who have used Cisco ACI in their recent projects, 69% hold at least a Bachelor's degree, 46% hold at least a Master's degree, and 8% hold a doctorate.
On average, freelancers in Germany who have used Cisco ACI in their recent projects have 26 years of professional experience, with a single engagement typically lasting around 1.9 years.
The most common languages among freelancers in Germany who have used Cisco ACI in their recent projects are German (100%), English (100%), and French (19%).
The most common industries among freelancers in Germany who have used Cisco ACI in their recent projects are Information Technology (100%), Banking and Finance (81%), and Telecommunication (69%).
The most common business areas among freelancers in Germany who have used Cisco ACI in their recent projects are Information Technology (100%), Operations (81%), and Project Management (75%).
Main locations of FRATCH Experts, who have recently used Cisco ACI
Our freelancers and interim experts are at home across the DACH region — available on-site in the major business hubs or fully remote. Choose a location to discover matched specialists, local market insights and up-to-date availability.
Berlin Hamburg Munich Cologne Frankfurt Stuttgart Dusseldorf Leipzig Dortmund Essen Bremen Dresden Hanover Nuremberg Request a free demo
Get in touch with the FRATCH team and we will get back to you within 4 hours.
Would you rather directly get in touch?
We always have the time for a call or email!
Philipp Thomaschewski
FRATCH CEO
