Description

Design and secure network architectures for air-gapped enterprise environments.

This role is on-site.

Responsibilities

• Architect secure infrastructure using Checkpoint Firewalls (3980), Cisco Catalyst switches, and SilverPeak SD-WAN.
• Implement identity and access management via CyberArk (PVWM/vPAM) and Zscaler ZTNA.
• Administer virtualization platforms including VMware vSphere and Microsoft Hyper-V on bare-metal hardware.
• Configure Linux environments (Rocky, Ubuntu, CentOS) for jump hosts and secure local web repositories.
• Manage network segmentation, VLAN tagging, IPAM, and automated data pipeline integrity for isolated boundaries.

Required Skills

• 8+ years experience in network architecture for highly isolated or air-gapped environments.
• Expert knowledge of Checkpoint Firewalls, Cisco Catalyst 9400/9200, and SilverPeak SD-WAN.
• Deep proficiency with CyberArk and Zscaler App Connectors.
• Strong administration of VMware vSphere, Hyper-V, and Linux (Rocky, Ubuntu, CentOS).
• Expertise in VLANs, inter-VLAN routing, subnetting, and IPAM.
• Experience with automated file synchronization, hashing, and checksum validation for secure deployments.
• Bachelor’s degree in network engineering, Computer Science, Cybersecurity, or related field.

Preferred Skills

• Checkpoint Certified Security Master (CCSM) or Expert (CCSE).
• Cisco Certified Network Professional (CCNP) in Enterprise or Security.

Key Skills

Education

Bachelor's degree