Overview In this role you will manage daily operations and hardening of isolated, air-gapped RDL networks across multiple global sites. You will supervise network hardware, access control, and secure data transfers to support secure lab environments. You will work closely with the Network Architect to maintain strict security, SOP adherence, and reliable lab services. The position offers hands-on, discipline-driven responsibilities in a high-security setting with cross-site collaboration. This opportunity lets you shape the reliability and security of critical research infrastructure.
Responsibilities- Monitor health, performance, and uptime of RDL network hardware
- Configure VLANs, IPs, and port provisioning to isolate projects
- Perform routine hardware diagnostics and firmware updates under maintenance windows
- Provision local Linux jump hosts and manage non-AD access
- Administer remote sessions using CyberArk vPAM and Zscaler tools
- Audit and clean inactive user sessions and accounts
- Coordinate secure transfer of data bundles across air gaps
- Maintain local repositories (Apache/Nginx) and verify data integrity with SHA-256
- Process and resolve lab tickets within SLAs
- Escalate complex issues to Lead Network Architect
- Conduct regular software audits to ensure banned agents are not installed
- Maintain asset inventory for all RDL equipment
- Ensure compliance with security and SOPs
Key requirements- Experience with Cisco Catalyst/Nexus switches and Checkpoint Firewalls
- Linux administration on Rocky/CentOS/Ubuntu (user management, scripting, local web servers)
- Proficiency with remote access tools: Zscaler ZTNA/App Connectors, CyberArk vPAM
- VMware vSphere or Microsoft Hyper-V virtualization basics
- Knowledge of secure file transfer protocols (SFTP, SCP, rsync) and security scanning
- 4+ years in network or system administration, preferably in secure/isolated labs
- Bachelor in Network Administration or related field or equivalent hands-on
- Certifications such as CCNA, CCSA, Security+, or CyberArk desirable
- High operational discipline
- Excellent communication
- Multi-tasking across global labs
- Network & security hardware configuration (Cisco, Checkpoint)
- Linux system administration and scripting
- RBAC and local account management without AD
