Senior Networking Specialist

** Job Description*
* *
* Position overview:

*
* Are you a motivated and innovative network engineer with a passion for scientific research? SLAC National Accelerator Laboratory is seeking a skilled Networking Specialist to design and manage the high-performance networks for SLACs scientific computing systems.

SLAC is one of the worlds premier research laboratories, renowned for its groundbreaking capabilities in photon science, accelerator physics, high-energy physics (HEP), and energy sciences. The Scientific Computing System (SCS) Division within the Technology Innovation Directorate (TID) provides and manages the core Scientific Computing and Data resources for all of SLAC, including projects such as the LSST-Rubin Observatory, the Linac Coherent Light Source (LCLS) user facility, CryoEM user facilities, and the LHC ATLAS detector at CERN..

If you're enthusiastic about cutting-edge technologies, value teamwork, and want to contribute to significant scientific discoveries, we invite you to apply for the Linux Networking and Security Specialist position.

** Your specific responsibilities will be to:*
* + Design, deploy, and maintain reliable, high-performance, high-throughput science networks

+ Plan and execute network scalability and lifecycle upgrades (firmware, etc)

+ Support the physical deployment of networking equipment

+ Use Ansible to automate device configuration across all networking infrastructure

+ Troubleshoot network issues by running diagnostic tests and performing repairs

+ Conduct cyber risk assessments of our environment when needed

+ Design and implement effective security mechanisms without hindering user workflows

+ Maintain security plans that document our architectures and controls

+ Provide end-user support via our incident platforms and communication channels

+ Work closely with the other SCS departments to ensure networking requirements are met.

+ Participate in on-call rotations as needed.

+ Build strong relationships with SLAC Central IT Networking, and Security teams

** To be successful in this position, you will bring:*
* + Bachelor's degree in computer sciences, physics, or related field, and 8 years of relevant experience

+ Strong Networking skill-set:

+ In-depth understanding of IPv4 and IPv6 protocols, including addressing, subnetting, and routing fundamentals, is required.

+ Comprehensive expertise in the TCP/IP protocol stack, including deep knowledge of core protocols such as TCP, UDP, IP, ICMP, and ARP, as well as application-layer protocols (HTTP/S, DNS, DHCP, FTP, SMTP). Candidates should be proficient in analyzing traffic flows, diagnosing connectivity issues using tools such as Wireshark or tcpdump, and understanding concepts such as three-way handshake, flow control, congestion control, and socket-level communication

+ Be familiar with the most common routing protocols (OSPF, BGP) and have hands-on experience with those protocols

+ Extensive experience in configuring ACLs and Strong working knowledge of Network Address Translation (NAT), including hands-on experience designing, configuring, and troubleshooting NAT implementations

+ Extensive hands-on experience configuring, managing, and troubleshooting switches across multiple vendor platforms, such as Cisco IOS and Arista EOS. This includes deep proficiency in VLAN configuration, trunking (802.1Q), Spanning Tree Protocol (STP/RSTP/MSTP), port security, link aggregation (LACP/802.3ad), QoS policies, and Layer 3 switching. Candidates should be comfortable transitioning between vendor-specific CLIs and capable of delivering consistent network configurations in heterogeneous enterprise environments.

+ Hands-on experience with Infini Band networks, including fabric management, subnet configuration, and high-performance computing (HPC) interconnects, is required.

+ Be familiar with network performance and monitoring tools, such as Grafana, InfluxDB, and Prometheus

+ Be familiar with DNS implementation and management

+ Be familiar with the most common Load balancer technologies

+ Be familiar with SSH, LDAP, Kerberos, and other solutions related to access & authorization

+ Demonstrate a strong working knowledge of network security concepts, including Zero Trust Architecture

+

Experience with Command Line Interfaces, scripting, and task automation

+

Experience with logging, monitoring, and alerting tools/utilities

+ Ability to create and maintain documentation

+ Ability and willingness to learn and promote technical practices and methods

** In addition, preferred requirements include:*
* +

Experience with Git and Ansible

+ Experience participating in security reviews, audits, and risk assessments

+ Familiarity with VXLAN MP-BGP EVPN (overlay networks and their implementations)

+ Experience on network flow monitoring protocols such as sFlow/Netflow, and network auditing software such as Zeek or Argus.

+ Familiarity with the Kubernetes networking, including configuration and monitoring.

** SLAC Employee

Competencies:

*
* +  
** Effective Decisions** :
Uses job…