Description

You will design, implement, and govern the secure Reference Design Lab (RDL) network infrastructure across global HPS design locations.

This role is on-site.

Responsibilities

• Deploy and maintain the RDL reference architecture, ensuring strict isolation and zero public internet connectivity for all lab environments.
• Design and configure the private, full-mesh SD-WAN overlay connecting global sites, including routing and switching on Cisco Catalyst and SilverPeak platforms.
• Administer enterprise firewalls (Checkpoint) and segment networks into logical, multi-tenant VLANs to separate Export Controlled and Non-Export Controlled zones.
• Implement secure remote access solutions using CyberArk vPAM and Zscaler ZTNA for customer and corporate connections.
• Manage the multi-tier secure data distribution system, automating the transfer of OS packages across air-gapped boundaries and coordinating vulnerability scans.

Required Skills

• 8+ years of experience in network architecture, specializing in highly isolated or air-gapped enterprise environments.
• Hands-on expertise with Checkpoint Firewalls (3980 preferred) and Cisco Catalyst 9400/9200 series switches.
• Strong proficiency in SD-WAN solutions, specifically SilverPeak.
• Expert-level knowledge of CyberArk (PVWM/vPAM) and Zscaler ZTNA/App Connectors.
• Proficiency in Linux administration (Ubuntu, CentOS, Rocky) and virtualization (VMware vSphere).
• Experience configuring local user management and role-based access control (RBAC) without Windows Active Directory.
• Ability to define and enforce strict security policies, including ingress/egress filtering and agent exclusion protocols.

Preferred Skills

• Bachelor’s degree in Network Engineering, Computer Science, Cybersecurity, or a related field.
• Experience with HTML-based local repository servers (/var/www/html/repo/).

Key Skills

Education

Bachelor's degree