Network Administrator (RDL and SONic)

About the role

**Job Title:** Network Administrator (RDL and SONic)

**Client:** Private Sector Technology Company

**Duration:** 6\-12 months contract (potential extensions)

**Location:** Remote \- Canada \- EST

**Position Summary**

* We are seeking a proactive and detail\-oriented RDL Network Administrator to manage the day\-to\-day operations and administration of our global Research and Development Lab (RDL) networks. Reporting directly to the Lead Network Architect, you will be responsible for the run\-and\-maintain aspects of our isolated, air\-gapped networks. * This role uniquely focuses on cutting\-edge open networking. The majority of our RDL network * infrastructure runs on SONiC (Software for Open Networking in the Cloud) deployed on * Furthermore, security inside the air\-gap relies heavily on Zscaler technology acting as internal firewalls integrated with local VLANs for precise, policy\-driven access control * Since this environment operates under strict security isolation without typical enterprise automated management tools, this role requires a hands\-on, highly disciplined administrator who excels at executing manual and semi\-automated workflows securely and consistently. * Traditional Cisco\-based networking skills are considered secondary to expertise in SONiC, Linux networking, and Zscaler\-driven zero\-trust security. * This role requires regular on\-site presence within the RDL environment and participation in a 24x7 on\-call rotation supporting global RDL infrastructure, including after\-hours incident response and scheduled maintenance activities

**Core Responsibilities**

1\. SONiC \& Open Network Operations

* SONiC Infrastructure Management: Monitor, configure, and maintain the health,

performance, and uptime proprietary open network switches running the SONiC operating system. * Configuration \& Segmentation: Implement localized VLAN adjustments, IP address

allocations, and switch port provisioning within the SONiC environment to isolate

multi\-tenant engineering projects. * Routine Maintenance: Execute hardware diagnostics, physical cabling checks, and * SONiC OS/firmware updates following strict maintenance window guidelines. * Secondary Infrastructure Support: Perform operational support, troubleshooting, and

maintenance of legacy secondary network components, including Check Point 3980

firewalls, Silver Peak SD\-WAN appliances, and Cisco Catalyst 9400/9200 switches as

required.

2\. Zscaler \& Internal Security Policy Administration

* Zero\-Trust Internal Firewalling: Administer and configure Zscaler ZTNA / App * Connectors to serve as internal firewalls, establishing secure boundaries and controlling data flow across isolated local VLANs. * Access Control \& Identity: Provision local user accounts, configure role\-based

permissions, and manage decentralized credentials on Linux\-based jump hosts. * Remote Session Security: Manage secure engineer connections using CyberArk vPAM

(Virtual Privileged Access Management).

Security Auditing: Conduct weekly audits of active user sessions, ACL configurations,

and local accounts to maintain an uncompromising security posture.

3\. Data Transfer \& Repository Sync Operations

* Multi\-Tier Sync Execution: Execute and monitor the secure transfer of "transfer

bundles" containing OS packages (Rocky Linux, Ubuntu, CentOS, etc.), drivers, and

software libraries across the physical air gap. * Repository Services Administration: Ensure repository services remain operational,

synchronized, and accessible to authorized systems within segmented and isolated RDL

environments. * Integrity Validation: Verify cryptographic hashes (SHA\-256 checksums) of all data packages moving from the Global Repository Server to the RDL Local Repository Server.

4\. Support Ticket Resolution \& SLA Adherence

* End\-User Support: Act as the primary technical point of contact for design center

engineers needing open network troubleshooting, VLAN routing resolution, or new

package requests. * Ticketing Operations: Process, update, and resolve secure lab support tickets in

accordance with established Service Level Agreements (SLAs).

Escalation Point: Identify complex open\-networking bugs, design deviations, or routing

limitations and escalate them directly to the Lead Network Architect.

5\. Compliance \& Environment Enforcement

* Software Auditing: Conduct regular logical audits of systems within the RDL to ensure

strictly banned corporate agents (e.g., CrowdStrike, Threat Locker, Big Fix, ServiceNow

Agents, ClearPass NAC) are not installed. * Asset Tracking: Maintain a flawless inventory of all owned assets inside the RDL physical rooms, including servers, switches, wireless access points (Aruba 755\), and connected lab machines.

**Technical Qualifications**

* Bachelor's degree in Network Administration, Information Technology, Computer Science,

or equivalent hands\-on experience. * 4\+ years of experience in network administration or system administration, preferably managing secure, segmented, or laboratory networks.

**Required Technical Skills**

* Network \& Security Hardware: Practical experience configuring and troubleshooting

Layer 2 and Layer 3 network environments including VLANs, routing, ACLs, packet capture

analysis, and protocol troubleshooting using tools such as Wireshark and tcpdump. * Monitoring \& Visibility: Experience with SNMP\-based monitoring and alerting platforms

such as SolarWinds, including device health monitoring, performance analysis, fault

identification, and capacity trending. * Linux System Administration: Mid\-to\-senior level Linux administration experience

including user management, shell scripting, package management, service administration,

repository hosting, and network troubleshooting. * Access Tools: Experience working with remote access tools such as Zscaler ZTNA / App * Connectors and Privilege Access Management solutions (specifically CyberArk). * Virtualization Administration: Experience provisioning, maintaining, and troubleshooting virtual machines, clustered hosts, storage resources, and virtual networking within * VMware vSphere, Nutanix AHV, and/or Microsoft Hyper\-V environments. * Air\-Gap Protocols: Working knowledge of secure file transfer protocols (SFTP, SCP,

rsync) and security scanning methodologies.

**Preferred Certifications**

* CCNA (Cisco Certified Network Associate) * Check Point Certified Security Administrator (CCSA) * CompTIA Security\+ or Linux\+ * CyberArk Certified Trustee or Defender * High Operational Discipline: Ability to strictly adhere to Standard Operating Procedures

(SOPs) without cutting corners, even during urgent troubleshooting. * Excellent Communicator: Strong written and verbal communication skills, necessary for translating technical issues to designers and coordinating with corporate security teams. * Multi\-Tasker: Capable of balancing ticket requests from multiple global labs concurrently

while maintaining accurate records

**\#IndKyn**

**\*\*Please note this is for a contract position with one of our clients and not a fulltime employment role with Kyndryl Canada\*\***