Jump Host Admin

Duration: 6 to 12 months contract with potential extensions

Location: Toronto, ON

The Engineering team is seeking a skilled Jump Host Administrator to support secure mediated access into Design Center Lab environments. This role will focus on provisioning and administering VM-based jump hosts, managing secure user access, and maintaining network connectivity and segmentation controls across lab environments.

The ideal candidate will have strong experience in network administration, secure access management, and lab infrastructure support, with the ability to work in controlled and security-sensitive environments.

• Provision and administer VM-based Jump Hosts supporting secure access to engineering lab environments
• Manage:
  • Switching and routing configurations
  • VLAN provisioning and segmentation
  • Firewall rules and connectivity controls
• Support secure SSH/RDP access and integration with Active Directory (AD) and RBAC controls
• Implement and maintain MFA and PAM (Privileged Access Management) controls
• Support endpoint patching and system hardening activities
• Enforce NAC/Clear Pass onboarding and network access policies
• Collaborate with GSA, Site IT, and infrastructure teams to support export-control approval workflows
• Troubleshoot connectivity, access, and infrastructure-related issues
• Maintain operational documentation and access procedures

Must-Have Skills

• Strong hands-on experience in:
  • Network administration (switching/routing)
  • Firewall rule management
  • VLAN provisioning and segmentation
  • Experience with Clear Pass/NAC onboarding and access controls
  • Experience managing SSH/RDP connectivity and secure remote access
  • Knowledge of AD integration, RBAC, MFA, and PAM controls
  • Experience supporting lab or engineering environments
  • Strong troubleshooting and documentation skills

Nice-to-Have Skills

• Experience with VM provisioning and virtualization platforms
• Familiarity with export-control or regulated access environments
• Experience in manufacturing, engineering, or hardware-focused organizations
• Understanding of endpoint patching and system hardening best practices