Hire the Best Cisco Certified Design Associates (CCDA)

More than 3,000 reviews on G2
Rating is 4.5 out of 5.
4.5/5
of Upwork by G2 peer reviewers
Ahmed O.

Riyadh, Saudi Arabia

$59/hr
5.0
133 jobs

Am a CCIE#26611 with extensive experience in Routing & Switching, Security, Datacenter, Virtualization, Public Cloud, Artificial Intelligence Network Skills & Agentics, Programmability & Automation. Am delivering unique & absolutely different service for the below technologies: * SDN Datacenter: Cisco ACI, VMware NSX, Nutanix Flow, Arista. * SDN Storage: Nutanix HCI, VMware VSAN. * SDN Access: Cisco DNA, LISP Implementation, Cisco Spaces, Cisco ISE, PacketFence. * SDN WAN: Cisco SDWAN, VMware VeloCloud, SilverPeak, PaloAlto SDWAN, FortiGate SDWAN, Meraki. * Programmability & Automation Controllers: Python & API tools to automate business intent & workflows within networks, Ansible, Chef, NSO, Terraform, OpenShift, AI network skills. * Monitoring Applications: Zabbix, SolarWinds, Home Made Custom Tools, Nmap, Packet Tracer (Wireshark), Splunk, Wazuh, ContraForce, ServiceNow and much more. * Routing & Switching and Wireless Technologies: Cisco, Mikrotik, Juniper, FS, Arista, HPE, Huawei. * Security: Cisco, PaloAlto, Meraki, FortiNet, Ubiquiti, VMware MDM, Infoblox. * Datacenter, Cloud Computing, Cloud Native, Virtualization & HCI Solutions. * Public Cloud: Design, Setup & Administer Tenants on AWS, Azure, GCP & OCI. * Micro-segmentation & Containerized Applications: Docker, Kubernetes. * API Gateways & Swagger Documentation. * Python Scripting for DevOps, SecOps, NetOps & I network skills. * Technical Writing & Documentation. Please refer to my LinkedIn account aossama. Certifications: * CCIE Enterprise CCIE#26611. * Cisco CCNP DevNet. * Cisco CCNP Enterprise. * Cisco CCNP Datacenter. * Cisco ACI Certified Specialist.

  • Cisco
  • Software-Defined Networking
  • Cisco Certified Internetwork Expert
  • Information Technology
  • Python
  • Network Engineering
  • Network Monitoring
  • Network Design
  • Palo Alto Firewalls
  • Network Security
  • Cisco Meraki
  • MikroTik
  • Fortinet
  • Server & Virtualization Software
  • Artificial Intelligence
Filip D.

Skopje, North Macedonia

$75/hr
5.0
2 jobs

Brief overview of my experiences and leading goals regarding the networking: As IT Network Engineer i have 5+ years of experience in relationship primarily with Cisco, Fortinet and F5-Load Balancer Technologies. I've been introduced with IT Support Engineer(L1, L2), Engineer on field(installing and connecting the networking device), Data Center Engineer(configuring the ACI architecture). There are several certificates that i arrange through the years such as CCT, CCST, CCNA, CCNP-DCACI, CCNP-ENCOR ,FCA. With everyday hand-on and learning on real production environment i pretend to grow and lead more achievement in future.

  • Network Administration
  • Cisco Certified Entry Networking Technician
  • Cisco Certified Network Associate
  • Load Balancing
  • FortiGate Firewall
  • Google Cloud Platform
  • Data Center Operations
  • Data Center
  • IT Support
  • Network Engineering
  • Network Security
  • Cisco Certified Network Professional
Kashif M.

Dubai, United Arab Emirates

$15/hr
4.8
1 jobs

Network & Security Architect (SASE, Firewalls, Routing & Switching, Wireless, PAM, IAM, MFA, VPN, WAN-OP, SIEM/SOAR, EDR/XDR) Network & Security Architect with 10+ years delivering design, deployment, and operationalization of enterprise networks and security stacks (Cisco, Juniper, Aruba, Fortinet, HPE, Huawei/H3C, VMware, Veeam). Proven at delivering secure, scalable, highly available solutions—SASE/Zero Trust, firewall consolidation, multi site wireless, SIEM/SOAR and EDR/XDR integrations—with architecture artifacts, automated playbooks, validation testing, and operational handover for SOC and NOC readiness. Projects Delivered 1. Enterprise Core Routing and Switching Modernization Campus and Data Center Redesign for 2,000 Users: Full campus and data center network redesign and deployment — logical and physical topology, IP addressing plan, VLAN/trunking, STP tuning, OSPF/BGP/MPLS routing, HSRP/VRRP high availability, route redistribution, interface optimization, and configuration templates with cutover and rollback plans. Technologies: Cisco, Juniper, Aruba, HPE, Dell, Huawei/H3C, Allied Telesis, Extreme, D Link, industrial grade switches. Outcome: 99.99% availability, reduced broadcast domains, and deterministic QoS for voice and video. 2. Multi Site Wireless Network Rollout Multi Site Wireless Network Rollout: End to end wireless deployment across 25 sites — RF/site surveys, capacity and channel planning, AP placement, controller and standalone configurations, SSID and 802.1X/RADIUS security design, QoS and roaming optimization, NAC integration and monitoring for operational handover. Technologies: Cisco, Aruba. Outcome: Consistent coverage, voice handoff latency <50 ms, documented runbooks and operational readiness. 3. Firewall Consolidation and Perimeter Hardening Consolidation and standardization of firewall estate: architecture, policy matrix, IPsec/SSL VPNs, IPS/IDS tuning, SSL inspection, NAT, HA/clustering, centralized logging and forensics. Technologies: Fortinet, Cisco ASA/FTD. Outcome: reduced policy sprawl and faster incident investigations. 4. SASE and Zero Trust Implementation Phased SASE rollout and Zero Trust controls: SD WAN, SWG, CASB, ZTNA, identity aware policies, micro segmentation, service insertion, and telemetry for enforcement. Outcome: secure remote access, reduced lateral movement, improved branch performance. 5. SIEM, SOAR and EDR/XDR Deployments SOC enablement with centralized telemetry and automated response: log ingestion and normalization, detection engineering, threat intel integration, SOAR playbooks, endpoint telemetry, automated containment, and forensic capture. Outcome: reduced MTTD, automated containment, improved forensic readiness. 6. Virtualization, Backup and AD Resilience VMware ESXi cluster design, Veeam backup/replication, Active Directory hardening and HA, DNS/DHCP optimization, and SQL Server HA guidance. Outcome: met RTO/RPO targets and simplified failover procedures. 7. NAC and Identity Integration 802.1X/RADIUS/TACACS+ deployment, posture checks, RSA MFA integration, and onboarding workflows to enforce device compliance and secure access. Core Technical Expertise • Routing & Switching: Cisco, Juniper, Aruba, HPE, Dell, Huawei/H3C, Allied Telesis, Extreme, D Link, industrial switches; VLANs, STP, OSPF, BGP, MPLS, QoS, HSRP/VRRP, route redistribution, packet level troubleshooting. • Wireless: Multiple end to end Cisco and Aruba deployments; RF surveys, capacity planning, WPA2/WPA3, 802.1X/RADIUS, QoS, roaming, NAC integration. • Security Platforms: Fortinet, Cisco ASA/FTD; policy lifecycle, IPsec/SSL VPNs, IPS/IDS, UTM, SSL/TLS inspection, NAT, HA/clustering, centralized management. • SASE and Zero Trust: SD WAN, SWG, CASB, ZTNA, microsegmentation, identity aware policies, east west controls. • SIEM & SOAR: Log ingestion, correlation, detection rules, threat intel, automated playbooks, case management, tuning for low false positives. • EDR / XDR: Endpoint telemetry, behavioral/ML detection, threat hunting, rapid containment, automated remediation, SIEM/SOAR integration. • Virtualization & Backup: VMware ESXi, Veeam backup/DR orchestration. • Identity & NAC: Active Directory, DNS/DHCP, GPOs, 802.1X, RADIUS, TACACS+. Technical Certifications: CCNP R&S, CCNA R&S, CCNA Security; JNCIP SEC, JNCIA SEC, JNCIS SEC, JNCIA JUNOS, JNCDA; Fortinet NSE4–NSE7; CEH; RSA MFA SolarWinds Certified, MCSA, MCITP. Compliance: ISO 27001 certified ISMS practitioner experienced in risk assessments, control frameworks, audits, and compliance.

  • Network Monitoring
  • ManageEngine ServiceDesk Plus
  • Server
  • Desktop Support
  • Microsoft Active Directory
  • System Monitoring
  • Fortinet
  • Helpdesk
  • Cisco IOS
  • Network Administration
Tanveer D.

Lyndhurst, Australia

$59/hr
4.9
29 jobs

I am a Certified Information Security Manager (CISM) with strong work ethics and a productive self-starter. A seasoned network engineer having more than 15 years of Networks & Information security experience. Much of my experience comes from working with the networking giant, Cisco. I have experience with network technology vendors such as Juniper, PaloAlto, Checkpoint, Azure, AWS, Fortinet to name a few. I have participated in multiple large and small projects, collaborating with teams, effectively co-working with other professionals to achieve the desired outcomes for businesses in US and Australia. Some of my IT Certifications: CISM, Cisco CCNP, CheckPoint, Microsoft, Juniper JNCIS Network Firewalls I can manage: Cisco ASA, Firepower, CheckPoint, PaloAlto, Fortigate, and more. Cisco Skills: Cisco DNA Centre, ACI, APIC, Prime, FTD, NGIPS, ISE, Nexus 5k 7k 9k, CSR, ASR, ISR Routers SDN and SD-WAN: Cisco, Viptela, VeloCloud, Citrix Netscaler, Versa, Meraki AWS and Azure Skills: Compute, Storage, Load Balancer, WAF, Azure SQL VOIP technologies: CUCM, CME, Voice Gateway, Voice Gatekeeper, CUBE, Jabber, 3CX, FreePBX, SIP Trunk Load Balancers: F5, Radware Alteon, Citrix Netscaler Network Protocols: BGP, VPN, MPLS, OSPF, EIGRP, TCP, UDP

  • Microsoft Azure
  • F5, Inc.
  • Cisco Meraki
  • Cisco Firepower Threat Defense
  • Palo Alto Firewalls
  • Network Security
  • Security Assessment & Testing
  • Azure App Service
  • Virtual LAN
  • Cisco ISE
  • AWS CloudFormation
  • Check Point
  • FortiGate Firewall
  • Network Administration
  • Fortinet
Kevin B.

Chicago, Illinois

$150/hr
5.0
117 jobs

Senior Infrastructure Engineer | Citrix, Microsoft 365, Network Security & Virtualization Are you dealing with a complex Citrix environment, Microsoft 365 migration, network security issue, or virtualization project? I help businesses design, implement, migrate, secure, and optimize IT infrastructure with hands on experience across Citrix, Microsoft 365, Cisco Meraki, Ubiquiti, FortiGate, Palo Alto, VMware, Hyper V, Azure, and enterprise networking. What I Can Help You With ✅ Citrix & VDI: Citrix Virtual Apps & Desktops, XenApp, XenDesktop, NetScaler, ADC, MCS, PVS, DaaS, and VDI troubleshooting ✅ Microsoft 365: New tenant setup, GoDaddy to Microsoft 365 migrations, Exchange Online, Microsoft Teams, Entra ID, Active Directory, MFA, SPF, DKIM, and DMARC ✅ Network Infrastructure: Cisco Meraki, Ubiquiti UniFi, VLANs, routing, switching, WiFi, site to site VPN, and high availability network design ✅ Network Security: FortiGate, Palo Alto, firewall configuration, VPN security, access control, DNS security, and infrastructure hardening ✅ Virtualization & Cloud: VMware ESXi, vSphere, Hyper V, XenServer, Azure, Azure Virtual Desktop, server migrations, and infrastructure upgrades ✅ Infrastructure Assessments: Health checks and technical assessments to identify security, performance, configuration, and reliability issues before implementation Projects I Specialize In • Citrix implementation, migration, and troubleshooting • Microsoft 365 migrations and new tenant implementations • Network redesign and high availability infrastructure • Site to site VPN and firewall implementations • VMware and Hyper V virtualization projects • Network security assessments and remediation • Cloud and infrastructure migrations • Infrastructure upgrades and modernization My approach is straightforward: understand the existing environment, identify the right technical solution, implement it carefully, test the result, and ensure the completed system meets the project requirements. I focus on project based technical work, migrations, implementations, upgrades, and complex infrastructure challenges rather than general help desk or end user support. I work particularly well with MSPs, mid market companies, healthcare organizations, and professional services businesses that need an experienced engineer for a defined infrastructure project. ⭐ Recent Client Feedback “Kevin was extremely helpful in getting our office’s UniFi network back up and running. He is very knowledgeable, professional, and was able to set up a new network.” “Kevin quickly understood our requirements and delivered exactly what we needed. Communication was clear, and turnaround time was fast.” Have a Citrix, Microsoft 365, networking, security, or virtualization project that needs an experienced engineer? 📩 Let’s have a FREE consultation call to discuss your requirements and determine the right technical approach.

  • Firewall
  • Network Security
  • Network Administration
  • Microsoft Active Directory
  • Citrix
  • Cisco Meraki
  • VMWare
  • Server Virtualization
  • Storage Area Network
  • Ubiquiti
  • Hosting Setup
  • Cloud Migration
  • Email Security
  • Office 365
  • Fortinet
  • GoDaddy
  • Microsoft Hyper-V Server
  • Palo Alto Firewalls
  • WiFi
  • Microsoft Azure
Rohan P.

Calgary, Canada

$90/hr
4.9
17 jobs

A versatile professional who consults with complex diverse project teams on creative projects amid tight dead-lines. Introduce new concepts and champion best practices. Execute project objectives while working auto-no-mously. 10 Years of total experience in the Networks & Infrastructure 10 years experience on Cisco Routers & Switches. 8+ Years experience on Cisco Nexus Switches and Cisco Wireless 8+ Years experience on Firewalls (Juniper & ASA), Load Balancers (F5 & ACE) 8+ Years experience on Vmware Infrastructure 8+ Years experience with Cisco Ironports, Cisco ISE 2 Years of Experience on MPLS (Alcatel), DWDM (Fujitsu & Alcatel) Cisco Certifications - - CCNP Certified - CCNA Voice Certified - CCNA certified Completed Cisco Nexus, Wireless, and Infoblox boot camps.

  • Security Infrastructure
  • Network Analysis
  • Network Design
  • Network Monitoring
  • Network Engineering
  • Network Administration
  • Network Security
  • Wireless Security
  • Project Management

How it works

Post a job for freePost a job

Tell us what you need. Create your own job post or generate one with AI then filter talent matches.

Hire top talent fast

Consult, interview, and hire quickly, so you can meet the freelancers you're excited about.

Collaborate easily

Use Upwork to chat or video call, share files, and track project progress right from the app.

Payment simplified

Manage payments in one place with flexible billing options. Only pay for approved work, hourly or by milestone.

Don't just take our word for it

What does a Cisco Certified Design Associate (CCDA) do?

A Cisco Certified Design Associate (CCDA) architects routed and switched network infrastructures that support enterprise LAN and WAN operations. This specialist translates business requirements into technical blueprints that prioritize modularity, hierarchy, and resiliency across campus, data center, and edge environments. The role focuses on the planning phase of the network lifecycle to characterize existing systems and define scalable addressing schemes before implementation begins.

  • Characterize existing network performance and traffic patterns using diagnostic tools such as SNMP, NBAR, and NetFlow to establish a baseline for design changes. This analysis identifies bottlenecks and capacity limits that inform the structural requirements of the new infrastructure.
  • Design modular and hierarchical network topologies for enterprise campuses, data centers, and branch offices to meet specific scalability and redundancy goals. These layouts separate core, distribution, and access layers to isolate faults and simplify future expansion efforts.
  • Develop comprehensive IP addressing schemes and select appropriate enterprise routing protocols to ensure efficient data flow across wide area networks. This work includes defining IPv4 and IPv6 subnets that align with security policies and operational management needs.
  • Create detailed construction documents and specifications that guide the build phase of the network deployment process. These deliverables outline hardware configurations, cabling standards, and service integration points for engineering teams executing the physical installation.

How to hire a Cisco Certified Design Associate (CCDA) on Upwork

Step 1: Post a job

Define your network infrastructure goals clearly to attract qualified designers. The Job Post Generator powered by Uma™, Upwork's Mindful AI drafts a post from a few sentences about your needs. You can write a new post, update a saved draft, or reuse an existing post.

  • Specify requirements for designing routed and switched LAN/WAN infrastructures that support your business operations.
  • List necessary skills in characterizing existing networks using tools like SNMP, NBAR, and NetFlow for accurate baseline data.
  • Include deliverables such as modular network designs, IP addressing schemes, and routing protocol configurations for enterprise campuses.

Step 2: Evaluate candidates

Look for portfolios that demonstrate applied knowledge of the Cisco design lifecycle including plan, build, and manage phases. Uma runs instant video interviews and builds shortlists with side-by-side comparisons to speed up your review process.

  • Verify experience in designing hierarchical network structures that meet specific scalability and resiliency objectives for growing organizations.
  • Check for documented work on edge, branch, and WAN connectivity designs that include redundancy considerations for high availability.
  • Review samples of network addressing plans that show clear logic for IPv4 or IPv6 deployment across complex enterprise environments.

Step 3: Interview your top choices

Discuss how candidates approach network characterization and design validation during real-world projects. Schedule and conduct interviews within Upwork Messages to receive an immediate transcript and summary after each session.

  • Ask how they apply top-down or bottom-up design approaches to solve specific connectivity challenges in your industry sector.
  • Request examples of how they integrated security-relevant design components into previous routed and switched infrastructure projects.
  • Evaluate their ability to explain technical routing protocol choices to non-technical stakeholders during the planning phase.

Step 4: Agree on scope and begin work

Set clear milestones for design deliverables such as construction documents and specification sheets. Use Upwork Messages and the contract workroom for communication and project management, plus identity verification, payment protection, hourly tracking, and project funds for security.

  • Define milestones for submitting initial network topology diagrams and receiving feedback before finalizing the detailed design.
  • Agree on specific formats for exporting IP addressing tables and routing configuration guidelines for your internal engineering teams.
  • Establish criteria for validating that the proposed design meets all stated modularity and hierarchy goals before final approval.

Upwork is not affiliated with and does not sponsor or endorse any of the tools or services discussed in this article. These tools and services are provided only as potential options, and each reader and company should take the time needed to adequately analyze and determine the tools or services that would best fit their specific needs and situation.

The rates and information provided in this article are based on current data and industry sources available at the time of publication. Freelance rates can vary depending on factors such as experience, location, project scope, and market conditions. Readers are encouraged to conduct their own research to confirm current rates and trends, as this information may change over time.

How much does hiring a Cisco Certified Design Associate (CCDA) cost?

$500-$2,500 per project is a typical range for focused Cisco Certified Design Associate (CCDA) work. Final pricing depends on scope, technical complexity, required integrations, source-material quality, revision needs, and the freelancer's experience level.

Network assessment

$500-$1,000/project

Entry-level to mid-level
  • Characterized existing network using SNMP and NetFlow data
  • Documented current infrastructure gaps and constraints
  • Listed initial design objectives for scalability and resiliency

LAN design

$1,000-$2,000/project

Mid-level
  • Designed modular enterprise campus switched infrastructure
  • Created IPv4 or IPv6 addressing scheme for local segments
  • Defined hardware requirements for access and distribution layers

WAN connectivity

$2,000-$3,500/project

Mid-level to senior-level
  • Designed edge and branch connectivity with redundancy considerations
  • Selected enterprise routing protocols for wide area links
  • Mapped hierarchical WAN structure for scalability

Data center design

$3,500-$5,000/project

Senior-level
  • Designed routed and switched data center network elements
  • Integrated network service and security components into plan
  • Compiled construction documents and technical specifications

Full infrastructure plan

$5,000-$8,000/project

Expert-level
  • Combined LAN, WAN, and data center designs into unified architecture
  • Outlined phased build and manage steps for implementation
  • Submitted complete design package for vendor procurement

Frequently asked questions

Is hiring a Cisco Certified Design Associate (CCDA) worth it?

For most businesses, yes: hiring a Cisco Certified Design Associate (CCDA) is worthwhile. This certification validates the ability to design routed and switched LAN/WAN infrastructures that meet specific scalability and resiliency goals. You gain a structured approach to characterizing existing networks and planning upgrades using industry-standard protocols.

How do I evaluate Cisco Certified Design Associate (CCDA) candidates?

Review their experience with the Plan, Build, Manage (PBM) lifecycle and ask for examples of modular network designs they have authored. A strong candidate explains how they used tools like NetFlow or SNMP to characterize an existing network before proposing changes to addressing or routing protocols.

What deliverables does a Cisco Certified Design Associate (CCDA) produce?

A Cisco Certified Design Associate (CCDA) produces design solutions for enterprise campus, data center, and WAN connectivity components. They also generate IP addressing schemes and routing protocol plans that support network hierarchy and redundancy.

Which tools do Cisco Certified Design Associates (CCDA) use for network analysis?

These professionals use Network Based Application Recognition (NBAR), Simple Network Management Protocol (SNMP), and NetFlow to analyze traffic patterns. This data informs their decisions on bandwidth requirements and quality of service policies within the design.