Summary

We are seeking a proactive and detail-oriented RDL Network Administrator to manage theday-to-day operations and administration of our global Research and Development Lab (RDL)networks. Reporting directly to the Lead Network Architect, you will be responsible for therun-and-maintain aspects of our isolated, air-gapped networks across multiple HPS DesignCenter locations (including San Jose, Richardson, Thailand, Shanghai, SongShan Lake, Penang,Chennai, and future sites).

This role uniquely focuses on cutting-edge open networking. The majority of our RDL networkinfrastructure runs on SONiC (Software for Open Networking in the Cloud) deployed onCelestica's own high-performance network switches. Furthermore, security inside the air-gaprelies heavily on Zscaler technology acting as internal firewalls integrated with local VLANs forprecise, policy-driven access control.

Since this environment operates under strict security isolation without typical enterpriseautomated management tools, this role requires a hands-on, highly disciplined administratorwho excels at executing manual and semi-automated workflows securely and consistently.Traditional Cisco-based networking skills are considered secondary to expertise in SONiC,Linux networking, and Zscaler-driven zero-trust security.

This role requires regular on-site presence within the RDL environment and participation in a24x7 on-call rotation supporting global RDL infrastructure, including after-hours incidentresponse and scheduled maintenance activities.

Core Responsibilities

1. SONiC & Open Network Operations
. SONiC Infrastructure Management: Monitor, configure, and maintain the health,performance, and uptime of Celestica's proprietary open network switches running theSONiC operating system.
. Configuration & Segmentation: Implement localized VLAN adjustments, IP addressallocations, and switch port provisioning within the SONiC environment to isolatemulti-tenant engineering projects.
. Routine Maintenance: Execute hardware diagnostics, physical cabling checks, andSONiC OS/firmware updates following strict maintenance window guidelines.
. Secondary Infrastructure Support: Perform operational support, troubleshooting, andmaintenance of legacy secondary network components, including Check Point 3980firewalls, Silver Peak SD-WAN appliances, and Cisco Catalyst 9400/9200 switches asrequired.

2. Zscaler & Internal Security Policy Administration
. Zero-Trust Internal Firewalling: Administer and configure Zscaler ZTNA / AppConnectors to serve as internal firewalls, establishing secure boundaries andcontrolling data flow across isolated local VLANs.
. Access Control & Identity: Provision local user accounts, configure role-basedpermissions, and manage decentralized credentials on Linux-based jump hosts.
. Remote Session Security: Manage secure engineer connections using CyberArk vPAM(Virtual Privileged Access Management).
. Security Auditing: Conduct weekly audits of active user sessions, ACL configurations,and local accounts to maintain an uncompromising security posture.

3. Data Transfer & Repository Sync Operations
. Multi-Tier Sync Execution: Execute and monitor the secure transfer of transferbundles containing OS packages (Rocky Linux, Ubuntu, CentOS, etc.), drivers, andsoftware libraries across the physical air gap.
. Repository Services Administration: Ensure repository services remain operational,synchronized, and accessible to authorized systems within segmented and isolated RDLenvironments.
. Integrity Validation: Verify cryptographic hashes (SHA-256 checksums) of all datapackages moving from the Global Repository Server to the RDL Local RepositoryServer.

4. Support Ticket Resolution & SLA Adherence
. End-User Support: Act as the primary technical point of contact for HPS designengineers needing open network troubleshooting, VLAN routing resolution, or newpackage requests.
. Ticketing Operations: Process, update, and resolve secure lab support tickets inaccordance with established Service Level Agreements (SLAs).
. Escalation Point: Identify complex open-networking bugs, design deviations, or routinglimitations and escalate them directly to the Lead Network Architect.

5. Compliance & Environment Enforcement
. Software Auditing: Conduct regular logical audits of systems within the RDL to ensurestrictly banned corporate agents (e.g., CrowdStrike, Threat Locker, Big Fix, ServiceNowAgents, ClearPass NAC) are not installed.
. Asset Tracking: Maintain a flawless inventory of all HPS-owned assets inside the RDLphysical rooms, including servers, switches, wireless access points (Aruba 755), andconnected lab machines.

Knowledge/Skills/Competencies

Required Technical Skills:

. Network & Security Hardware: Practical experience configuring and troubleshootingLayer 2 and Layer 3 network environments including VLANs, routing, ACLs, packet capture
analysis, and protocol troubleshooting using tools such as Wireshark and tcpdump.
. Monitoring & Visibility: Experience with SNMP-based monitoring and alerting platformssuch as SolarWinds, including device health monitoring, performance analysis, fault
identification, and capacity trending.
. Linux System Administration: Mid-to-senior level Linux administration experienceincluding user management, shell scripting, package management, service administration,
repository hosting, and network troubleshooting.
. Access Tools: Experience working with remote access tools such as Zscaler ZTNA / AppConnectors and Privilege Access Management solutions (specifically CyberArk).

. Virtualization Administration: Experience provisioning, maintaining, and troubleshootingvirtual machines, clustered hosts, storage resources, and virtual networking withinVMware vSphere, Nutanix AHV, and/or Microsoft Hyper-V environments.
. Air-Gap Protocols: Working knowledge of secure file transfer protocols (SFTP, SCP,rsync) and security scanning methodologies.

Preferred Certifications:

CCNA (Cisco Certified Network Associate)
Check Point Certified Security Administrator (CCSA)
CompTIA Security+ or Linux+
CyberArk Certified Trustee or Defender

Soft Skills & Working Style:

High Operational Discipline: Ability to strictly adhere to Standard Operating Procedures (SOPs) without cutting corners, even during urgent troubleshooting.
Excellent Communicator: Strong written and verbal communication skills, necessary for translating technical issues to designers and coordinating with corporate security teams.
Multi-Tasker: Capable of balancing ticket requests from multiple global labs concurrently while maintaining accurate records.

Physical Demands

Duties of this position are performed in a normal office environment.
Duties may require extended periods of sitting and sustained visual concentration on a computer monitor or on numbers and other detailed data. Repetitive manual movements (e.g., data entry, using a computer mouse, using a calculator, etc.) are frequently required.

Education & Experience

Bachelor's degree in Network Administration, Information Technology, Computer Science, or equivalent hands-on experience.
4+ years of experience in network administration or system administration, preferably managing secure, segmented, or laboratory networks.
Overall 14+years of work experience is required.

Notes

This job description is not intended to be an exhaustive list of all duties and responsibilities of the position. Employees are held accountable for all duties of the job. Job duties and the % of time identified for any function are subject to change at any time.

SONIC RDL Network Admin