_{06th July, 2026}

Job Title: Network Administrator (RDL and SONic)
Client: Private Sector Technology Company
Duration: 6-12 months contract (potential extensions)
Location: Remote - Canada - EST
 
Position Summary

• We are seeking a proactive and detail-oriented RDL Network Administrator to manage the day-to-day operations and administration of our global Research and Development Lab (RDL) networks. Reporting directly to the Lead Network Architect, you will be responsible for the run-and-maintain aspects of our isolated, air-gapped networks. 
• This role uniquely focuses on cutting-edge open networking. The majority of our RDL network
• infrastructure runs on SONiC (Software for Open Networking in the Cloud) deployed on
• Furthermore, security inside the air-gap relies heavily on Zscaler technology acting as internal firewalls integrated with local VLANs for precise, policy-driven access control
• Since this environment operates under strict security isolation without typical enterprise automated management tools, this role requires a hands-on, highly disciplined administrator who excels at executing manual and semi-automated workflows securely and consistently.
• Traditional Cisco-based networking skills are considered secondary to expertise in SONiC, Linux networking, and Zscaler-driven zero-trust security.
• This role requires regular on-site presence within the RDL environment and participation in a 24x7 on-call rotation supporting global RDL infrastructure, including after-hours incident response and scheduled maintenance activities

Core Responsibilities
1. SONiC & Open Network Operations

• SONiC Infrastructure Management: Monitor, configure, and maintain the health,
  performance, and uptime proprietary open network switches running the SONiC operating system.
• Configuration & Segmentation: Implement localized VLAN adjustments, IP address
  allocations, and switch port provisioning within the SONiC environment to isolate
  multi-tenant engineering projects.
• Routine Maintenance: Execute hardware diagnostics, physical cabling checks, and
• SONiC OS/firmware updates following strict maintenance window guidelines.
• Secondary Infrastructure Support: Perform operational support, troubleshooting, and
  maintenance of legacy secondary network components, including Check Point 3980
  firewalls, Silver Peak SD-WAN appliances, and Cisco Catalyst 9400/9200 switches as
  required.

2. Zscaler & Internal Security Policy Administration

• Zero-Trust Internal Firewalling: Administer and configure Zscaler ZTNA / App
• Connectors to serve as internal firewalls, establishing secure boundaries and controlling data flow across isolated local VLANs.
• Access Control & Identity: Provision local user accounts, configure role-based
  permissions, and manage decentralized credentials on Linux-based jump hosts.
• Remote Session Security: Manage secure engineer connections using CyberArk vPAM
  (Virtual Privileged Access Management).
  Security Auditing: Conduct weekly audits of active user sessions, ACL configurations,
  and local accounts to maintain an uncompromising security posture.

3. Data Transfer & Repository Sync Operations

• Multi-Tier Sync Execution: Execute and monitor the secure transfer of "transfer
  bundles" containing OS packages (Rocky Linux, Ubuntu, CentOS, etc.), drivers, and
  software libraries across the physical air gap.
• Repository Services Administration: Ensure repository services remain operational,
  synchronized, and accessible to authorized systems within segmented and isolated RDL
  environments.
• Integrity Validation: Verify cryptographic hashes (SHA-256 checksums) of all data packages moving from the Global Repository Server to the RDL Local Repository Server.

4. Support Ticket Resolution & SLA Adherence

• End-User Support: Act as the primary technical point of contact for design center
  engineers needing open network troubleshooting, VLAN routing resolution, or new
  package requests.
• Ticketing Operations: Process, update, and resolve secure lab support tickets in
  accordance with established Service Level Agreements (SLAs).
  Escalation Point: Identify complex open-networking bugs, design deviations, or routing
  limitations and escalate them directly to the Lead Network Architect.

5. Compliance & Environment Enforcement

• Software Auditing: Conduct regular logical audits of systems within the RDL to ensure
  strictly banned corporate agents (e.g., CrowdStrike, Threat Locker, Big Fix, ServiceNow
  Agents, ClearPass NAC) are not installed.
• Asset Tracking: Maintain a flawless inventory of all owned assets inside the RDL physical rooms, including servers, switches, wireless access points (Aruba 755), and connected lab machines.

Technical Qualifications

• Bachelor's degree in Network Administration, Information Technology, Computer Science,
  or equivalent hands-on experience.
• 4+ years of experience in network administration or system administration, preferably managing secure, segmented, or laboratory networks.

Required Technical Skills

• Network & Security Hardware: Practical experience configuring and troubleshooting
  Layer 2 and Layer 3 network environments including VLANs, routing, ACLs, packet capture
  analysis, and protocol troubleshooting using tools such as Wireshark and tcpdump.
• Monitoring & Visibility: Experience with SNMP-based monitoring and alerting platforms
  such as SolarWinds, including device health monitoring, performance analysis, fault
  identification, and capacity trending.
• Linux System Administration: Mid-to-senior level Linux administration experience
  including user management, shell scripting, package management, service administration,
  repository hosting, and network troubleshooting.
• Access Tools: Experience working with remote access tools such as Zscaler ZTNA / App
• Connectors and Privilege Access Management solutions (specifically CyberArk).
• Virtualization Administration: Experience provisioning, maintaining, and troubleshooting virtual machines, clustered hosts, storage resources, and virtual networking within
• VMware vSphere, Nutanix AHV, and/or Microsoft Hyper-V environments.
• Air-Gap Protocols: Working knowledge of secure file transfer protocols (SFTP, SCP,
  rsync) and security scanning methodologies.

Preferred Certifications

• CCNA (Cisco Certified Network Associate)
• Check Point Certified Security Administrator (CCSA)
• CompTIA Security+ or Linux+
• CyberArk Certified Trustee or Defender
• High Operational Discipline: Ability to strictly adhere to Standard Operating Procedures
  (SOPs) without cutting corners, even during urgent troubleshooting.
• Excellent Communicator: Strong written and verbal communication skills, necessary for translating technical issues to designers and coordinating with corporate security teams.
• Multi-Tasker: Capable of balancing ticket requests from multiple global labs concurrently
  while maintaining accurate records

 
#IndKyn
**Please note this is for a contract position with one of our clients and not a fulltime employment role with Kyndryl Canada**

Apply For Job