We are seeking a highly experienced and meticulous Lead Network & Security Architect to join the IT Support team for the Hardware Platform Solutions (HPS) group. In this role, you will take ownership of our global Research and Development Lab (RDL) reference architecture and drive its deployment, management, and scaling across all current and future HPS Design Centers (including Silicon Valley, Richardson, Thailand, and other global hubs). The successful candidate will be responsible for implementing and maintaining a completely isolated, air-gapped network environment that operates independently of standard corporate IT networks. You will manage complex secure access paths, isolated VLAN provisioning, private full-mesh SD-WAN overlays, and a multi-tiered global data package replication and distribution system. You will also serve as the key enablement architect, helping project teams quickly spin up new project-specific instantiations of the RDL network model while adhering to strict security constraints. Architectural Implementation & Governance Support New Instantiations: Act as the primary technical design authority to spin up new RDL network instances (allocating subnets, configuring dedicated VLANs, establishing local jump hosts, and defining user authentication parameters) for upcoming HPS design projects. Maintain absolute isolation of the RDL environments. Ensure zero direct or indirect public internet connectivity and guarantee that out-of-scope systems or agents (e.g., CrowdStrike, Threat Locker, Big Fix, ServiceNow Agents, ClearPass NAC, and Windows Domain joins) are strictly excluded from the lab network. Network Infrastructure & Security Design, configure, and maintain the private, full-mesh SD-WAN overlay connecting global RDL sites.



Manage core and access layer switches (Cisco Catalyst 9400/9200 series, Celestica DS2000, ES1500 switches) to segment the RDL into logical, multi-tenant VLAN environments—specifically separating Export Controlled and Non-Export Controlled network zones. Identity and Remote Access Management Remote Customer Access: Oversee the implementation and administration of CyberArk vPAM (Virtual Privileged Access Management) for remote customer connections. Corporate Remote Access: Configure and maintain Zscaler ZTNA (Zero Trust Network Access) and App Connectors to terminate connections securely on Linux-based local jump hosts. Decentralized Authentication: Design and maintain a secure user management protocol on jump hosts and local RDL nodes. As the RDL operates without Windows Active Directory, you will define standard operating procedures for the manual/programmatic creation of local system accounts and localized role-based access control (RBAC). Secure Data Package Management & DevOps Repo Architecture Maintain the multi-tier secure data distribution system: IT Repository Server: Global Repository Server: The middle-layer relay that acts as a secure, scanned transit point between the corporate IT network and the isolated RDL network. RDL Local Repository Server: Coordinate with corporate IT and security teams to execute periodic vulnerability scanning and patching of repository servers,



ensuring all packages undergo integrity checks before reaching the inner RDL networks. Required Technical Skills Solid administration experience in VMware vSphere Enterprise and/or Microsoft Hyper‑V running on bare‑metal systems (e.g., Linux Administration: Strong proficiency with Linux environments (Rocky Linux, Ubuntu, CentOS) for jump host configuration and secure local web repository servers (Nginx/Apache). Network Segmentation & Protocols: Expert in VLAN tagging, inter‑VLAN routing, subnetting, IP address management (IPAM), and secure file transfer protocols. Automated Data Pipelines: Familiarity with script‑based file synchronization and automated extraction/integrity validation mechanisms (e.g., hashing, checksums) for software deployment across isolated boundaries. Cisco Certified Network Skilled (CCNP)
- Enterprise or Security Certified Information Systems Security Professional (CISSP) Ability to collaborate closely with HPS Design Engineers, Project Managers, Corporate IT Security, and external Customers. Ability to work closely with procurement to specify, justify, and size bill of materials (BOM) for both upgrading existing sites and provisioning new infrastructure. Duties of this position are performed in a normal office environment. Duties may require extended periods of sitting and sustained visual concentration on a computer monitor or on numbers and other detailed data. data entry, using a computer mouse, using a calculator, etc.) The stated range includes Base Salary and target Short-Term Incentive (STI) compensation only. Salary + Short Term Incentive = 125,000
- 199,000 CAD Bachelor’s degree in Network Engineering, Computer Science, Cybersecurity, or a related technical field. Minimum of 8+ years of experience in

📌 Lead Network (Canada)
🏢 Celestica
📍 Canada