SONIC RDL Network Admin

Summary

We are seeking a proactive and detail-oriented RDL Network Administrator to manage the day-to-day operations and administration of our global Research and Development Lab (RDL) networks. Reporting directly to the Lead Network Architect, you will be responsible for the run-and-maintain aspects of our isolated, air-gapped networks across multiple HPS Design Center locations (including San Jose, Richardson, Thailand, Shanghai, SongShan Lake, Penang, Chennai, and future sites). 

This role uniquely focuses on cutting-edge open networking. The majority of our RDL network infrastructure runs on SONiC (Software for Open Networking in the Cloud) deployed on Celestica’s own high-performance network switches. Furthermore, security inside the air-gap relies heavily on Zscaler technology acting as internal firewalls integrated with local VLANs for precise, policy-driven access control.

Since this environment operates under strict security isolation without typical enterprise automated management tools, this role requires a hands-on, highly disciplined administrator who excels at executing manual and semi-automated workflows securely and consistently. Traditional Cisco-based networking skills are considered secondary to expertise in SONiC, Linux networking, and Zscaler-driven zero-trust security.

This role requires regular on-site presence within the RDL environment and participation in a 24x7 on-call rotation supporting global RDL infrastructure, including after-hours incident response and scheduled maintenance activities.

Core Responsibilities

1. SONiC & Open Network Operations
● SONiC Infrastructure Management: Monitor, configure, and maintain the health, performance, and uptime of Celestica’s proprietary open network switches running the SONiC operating system.
● Configuration & Segmentation: Implement localized VLAN adjustments, IP address allocations, and switch port provisioning within the SONiC environment to isolate multi-tenant engineering projects.
● Routine Maintenance: Execute hardware diagnostics, physical cabling checks, and SONiC OS/firmware updates following strict maintenance window guidelines.
● Secondary Infrastructure Support: Perform operational support, troubleshooting, and maintenance of legacy secondary network components, including Check Point 3980 firewalls, Silver Peak SD-WAN appliances, and Cisco Catalyst 9400/9200 switches as required.

2. Zscaler & Internal Security Policy Administration
● Zero-Trust Internal Firewalling: Administer and configure Zscaler ZTNA / App Connectors to serve as internal firewalls, establishing secure boundaries and controlling data flow across isolated local VLANs.
● Access Control & Identity: Provision local user accounts, configure role-based permissions, and manage decentralized credentials on Linux-based jump hosts.
● Remote Session Security: Manage secure engineer connections using CyberArk vPAM (Virtual Privileged Access Management).
● Security Auditing: Conduct weekly audits of active user sessions, ACL configurations, and local accounts to maintain an uncompromising security posture.

3. Data Transfer & Repository Sync Operations
● Multi-Tier Sync Execution: Execute and monitor the secure transfer of "transfer bundles" containing OS packages (Rocky Linux, Ubuntu, CentOS, etc.), drivers, and software libraries across the physical air gap.
● Repository Services Administration: Ensure repository services remain operational, synchronized, and accessible to authorized systems within segmented and isolated RDL environments.
● Integrity Validation: Verify cryptographic hashes (SHA-256 checksums) of all data packages moving from the Global Repository Server to the RDL Local Repository Server.

4. Support Ticket Resolution & SLA Adherence
● End-User Support: Act as the primary technical point of contact for HPS design engineers needing open network troubleshooting, VLAN routing resolution, or new package requests.
● Ticketing Operations: Process, update, and resolve secure lab support tickets in accordance with established Service Level Agreements (SLAs).
● Escalation Point: Identify complex open-networking bugs, design deviations, or routing limitations and escalate them directly to the Lead Network Architect.

5. Compliance & Environment Enforcement
● Software Auditing: Conduct regular logical audits of systems within the RDL to ensure strictly banned corporate agents (e.g., CrowdStrike, Threat Locker, Big Fix, ServiceNow Agents, ClearPass NAC) are not installed.
● Asset Tracking: Maintain a flawless inventory of all HPS-owned assets inside the RDL physical rooms, including servers, switches, wireless access points (Aruba 755), and connected lab machines.

Knowledge/Skills/Competencies

Required Technical Skills:

● Network & Security Hardware: Practical experience configuring and troubleshooting Layer 2 and Layer 3 network environments including VLANs, routing, ACLs, packet capture
analysis, and protocol troubleshooting using tools such as Wireshark and tcpdump.
● Monitoring & Visibility: Experience with SNMP-based monitoring and alerting platforms such as SolarWinds, including device health monitoring, performance analysis, fault
identification, and capacity trending.
● Linux System Administration: Mid-to-senior level Linux administration experience including user management, shell scripting, package management, service administration,
repository hosting, and network troubleshooting.
● Access Tools: Experience working with remote access tools such as Zscaler ZTNA / App Connectors and Privilege Access Management solutions (specifically CyberArk).

● Virtualization Administration: Experience provisioning, maintaining, and troubleshooting virtual machines, clustered hosts, storage resources, and virtual networking within VMware vSphere, Nutanix AHV, and/or Microsoft Hyper-V environments.
● Air-Gap Protocols: Working knowledge of secure file transfer protocols (SFTP, SCP, rsync) and security scanning methodologies.

Preferred Certifications:

• CCNA (Cisco Certified Network Associate)
• Check Point Certified Security Administrator (CCSA)
• CompTIA Security+ or Linux+
• CyberArk Certified Trustee or Defender

Soft Skills & Working Style:

• High Operational Discipline: Ability to strictly adhere to Standard Operating Procedures (SOPs) without cutting corners, even during urgent troubleshooting.
• Excellent Communicator: Strong written and verbal communication skills, necessary for translating technical issues to designers and coordinating with corporate security teams.
• Multi-Tasker: Capable of balancing ticket requests from multiple global labs concurrently while maintaining accurate records.

Physical Demands

• Duties of this position are performed in a normal office environment.
• Duties may require extended periods of sitting and sustained visual concentration on a computer monitor or on numbers and other detailed data. Repetitive manual movements (e.g., data entry, using a computer mouse, using a calculator, etc.) are frequently required.

Education & Experience

• Bachelor’s degree in Network Administration, Information Technology, Computer Science, or equivalent hands-on experience.
• 4+ years of experience in network administration or system administration, preferably managing secure, segmented, or laboratory networks.
• Overall 14+years of work experience is required.

Notes

This job description is not intended to be an exhaustive list of all duties and responsibilities of the position. Employees are held accountable for all duties of the job. Job duties and the % of time identified for any function are subject to change at any time.