RDL Jump Host Administrator

RDL Jump Host Administrator

• Location:
  Richardson, Texas (Hybrid)
• Contract Length: 6-12 Months

We at Raise are hiring a RDL Jump Host Administrator for one of our top clients. After establishing themselves as an industry leader, they’re now expanding their team to meet rising demand.

• Server Provisioning & Lifecycle:
  Deploy, configure, and maintain Linux-based (Rocky Linux, Ubuntu, CentOS) local jump host virtual machines operating on VMware vSphere or Microsoft Hyper-V clusters.
• Operating System Hardening:
  Apply strict CIS (Center for Internet Security) hardening benchmarks on all jump host operating systems. Ensure that no unauthorized software or corporate agents (e.g., Crowd Strike, Service Now, Clear Pass, Windows Domain utilities) are installed or active on endpoints installed on the VLAN behind the Jump Host.
• Service Availability:
  Ensure the high availability, performance, patch status, and storage capaciyt of jump servers acting as gateways to the core RDL networks.

• Export Control Shell Banners:
  Configure and manage interactive, mandatory user agreement screens (e.g., using custom shell login scripts, Pluggable Authentication Modules (PAM), or SSH Force Command) specifically for systems accessing Export Controlled VLANs.
• User Acceptance Verification:
  Ensure that users cannot acquire an interactive shell, run commands, or bypass the landing screen without explicitly reading and accepting the export control and NDA terms.
• Tamper-Proof Acceptance Logging:
  Implement and maintain robust, structured logging systems (using Rsyslog, Journald, or custom secure local logging scripts) that capture:
  • The authenticated user's local/remote identifier.
  • Source IP and connection timestamp.
  • Explicit timestamped confirmation of the user's compliance acceptance.
• Log Archival & Integrity:
  Set up secure, write-only log forwarding or local hashing protocols to ensure audit logs of export-control acceptances cannot be modified or deleted by general users.

• Decentralized Local Authentication:
  Programmatically or manually provision local Unix user accounts, localized Role-Based Access Control (RBAC), and SSH keys on all jump hosts.
• Remote Integration Support:
  Partner with corporate IT to ensure seamless hand-offs from Zscaler ZTNA (via local Zscaler App Connectors) and Cyber Ark vPAM sessions terminating on the jump hosts.
• Session Controls:
  Configure strict SSH timeouts, idle session terminations, and multi-factor authentication loops to prevent abandoned active connections.

• Workplace
  
  Collaboration:
  
  Align daily with the RDL Network Administrator to coordinate VLAN mappings, firewall rule adjustments, and routing protocols necessary for jump host access.
• Engineering Support:
  Serve as a technical point of contact for HPS design engineers having credentialing, shell, or connection issues when entering secure environments.
• Incident & Audit Readiness:
  Assist the Lead Network Architect in pulling audit trails and access reports during compliance reviews, system security audits, or customer security evaluations.

• Bachelor’s degree in Network/System Administration, Computer Science, Cybersecurity, or equivalent technical experience.
• 4+ years of dedicated experience in Linux System Administration, with a strong focus on secure system hardening, user management, and compliance auditing.

• Linux Expertise (Expert Level):
  Mastery of Linux OS administration (Rocky Linux, RHEL, CentOS, Ubuntu) including shell scripting (Bash, Python), security policies, and package management.
• Secure…