Senior Manager, IT Infrastructure

Lead Network & Security Architect

We are seeking a highly experienced and meticulous Lead Network & Security Architect to join the IT Support team for the Hardware Platform Solutions (HPS) group. In this role, you will take ownership of our global Research and Development Lab (RDL) reference architecture and drive its deployment, management, and scaling across all current and future HPS Design Centers.

• Deploy Reference Architecture:
  Standardize and implement the RDL reference design across all global HPS design locations.
• Support New Instantiations:
  Act as the primary technical design authority to spin up new RDL network instances for upcoming HPS design projects.
• Strict Constraint Enforcement:
  Maintain absolute isolation of the RDL environments, ensuring zero public internet connectivity and excluding out‑of‑scope systems or agents from the lab network.

• SD‑WAN & Routing:
  Design, configure, and maintain the private, full‑mesh SD‑WAN overlay connecting global RDL sites.
• Secure Firewalling:
  Configure and administer enterprise‑grade firewalls protecting the perimeter of each localized lab, defining strict ingress/egress filtering rules.
• Switching & Segmentation:
  Manage core and access layer switches to segment the RDL into logical, multi‑tenant VLAN environments, separating Export Controlled and Non‑Export Controlled network zones.

• Remote Customer Access:
  Oversee the implementation and administration of Cyber Ark vPAM for remote customer connections.
• Corporate Remote Access:
  Configure and maintain Zscaler ZTNA and App Connectors to terminate connections securely on Linux‑based local jump hosts.
• Decentralized Authentication:
  Design and maintain a secure user management protocol on jump hosts and local RDL nodes, defining local system accounts and role‑based access control.
• Repository Architecture:
  Maintain the multi‑tier secure data distribution system, including IT Repository Server, Global Repository Server, and RDL Local Repository Server, and ensure secure, programmatically validated transfer of transfer bundles across the air gap.
• Security Scans & Compliance:
  Coordinate with corporate IT and security teams to execute periodic vulnerability scanning and patching of repository servers, ensuring integrity checks before packages reach the inner RDL networks.

• Hardware & OS
  
  Competencies:
  
  Experience with Checkpoint Firewalls, Cisco Catalyst switches, and Silver Peak SD‑WAN solutions.
• Security & Identity Tools:
  Expert understanding of Cyber Ark and Zscaler solutions.
• Virtualization & Systems:
  Administration experience in VMware vSphere Enterprise and/or Microsoft Hyper‑V on bare‑metal systems.
• Linux Administration:
  Proficiency with Linux environments for jump host configuration and secure web repository servers.
• Network Segmentation & Protocols:
  Expertise in VLAN tagging, inter‑VLAN routing, subnetting, IPAM, and secure file transfer protocols.
• Automated Data Pipelines:
  Familiarity with script‑based file synchronization and automated integrity validation mechanisms.

• Checkpoint Certified Security Expert (CCSE) or Master (CCSM)
• Cisco Certified Network Professional (CCNP) – Enterprise or Security
• Cyber Ark Certified Defender or Sentry
• Certified Information Systems Security Professional (CISSP)

• Detailed Documentation:
  Proven track record of generating flawless high‑level and low‑level designs, block diagrams, and SOPs.
• Strategic Problem Solver:
  Comfortable working within strict operational boundaries where typical modern agents and automated tools are banned.
• Cross‑functional Partner:
  Able to collaborate closely with HPS Design Engineers, Project Managers, Corporate IT Security, and external customers.
• Financial Stewardship:
  Skilled at working with procurement to specify, justify, and size bill of materials for infrastructure upgrades and new sites.

• Normal office environment duties, extended periods of sitting and sustained visual concentration on a computer monitor or detailed data.
• Repetitive manual movements such as data entry, using a…