RDL Jump Host Administrator

RDL Jump Host Administrator

Location: Chennai, India - Hybrid

Contract Length: 6-12 Months

The following responsibilities and qualifications describe the role of the RDL Jump Host Administrator for a client engaged by Raise.

• Jump Host System Administration & Hardening
• Server Provisioning & Lifecycle:
  Deploy, configure, and maintain Linux-based (Rocky Linux, Ubuntu, CentOS) local jump host virtual machines operating on VMware vSphere or Microsoft Hyper-V clusters.
• Operating System Hardening:
  Apply CIS hardening benchmarks on all jump host operating systems. Ensure that no unauthorized software or corporate agents (e.g., Crowd Strike, Service Now, Clear Pass, Windows Domain utilities) are installed or active on endpoints installed on the VLAN behind the Jump Host.
• Service Availability:
  Ensure high availability, patch status, and storage capacity of jump servers acting as gateways to the core RDL networks.

• Export Control Shell Banners:
  Configure and manage interactive, mandatory user agreement screens for systems accessing Export Controlled VLANs.
• User Acceptance Verification:
  Ensure that users cannot acquire an interactive shell, run commands, or bypass the landing screen without explicitly reading and accepting the export control and NDA terms.
• Tamper-Proof Acceptance Logging:
  Implement and maintain structured logging systems that capture:
• The authenticated user's local/remote identifier.
• Source IP and connection timestamp.
• Explicit timestamped confirmation of the user's compliance acceptance.
• Log Archival & Integrity:
  Set up secure, write-only log forwarding or local hashing protocols to ensure audit logs cannot be modified or deleted by general users.

• Decentralized Local Authentication:
  Provision local Unix user accounts, localized RBAC, and SSH keys on all jump hosts.
• Remote Integration Support:
  Collaborate with corporate IT to ensure hand-offs from Zscaler ZTNA and Cyber Ark vPAM sessions terminating on the jump hosts.
• Session Controls:
  Configure strict SSH timeouts, idle session terminations, and multi-factor authentication loops to prevent abandoned active connections.

• Workplace
  
  Collaboration:
  
  Align daily with the RDL Network Administrator to coordinate VLAN mappings, firewall rule adjustments, and routing protocols necessary for jump host access.
• Engineering Support:
  Serve as a technical point of contact for design engineers with credentialing, shell, or connection issues in secure environments.
• Incident & Audit Readiness:
  Assist in pulling audit trails and access reports during compliance reviews, system security audits, or customer security evaluations.

• Bachelor’s degree in Network/System Administration, Computer Science, Cybersecurity, or equivalent technical experience.
• 4+ years of dedicated Linux System Administration experience, focused on secure system hardening, user management, and compliance auditing.
• Required Technical Skills
• Linux Expertise (Expert Level):
  Mastery of Linux OS administration (Rocky Linux, RHEL, CentOS, Ubuntu) including shell scripting (Bash, Python), security policies, and package management.
• Secure Access & Authentication:
  Knowledge of SSHD configuration, PAM stack, and secure local authentication patterns.
• Audit & Log Engineering:
  Experience configuring structured logging systems and immutable audit trails.
• Access Technologies:
  Familiarity with Zscaler ZTNA, Cyber Ark vPAM, and VPN architectures.
• Virtualization Basics:
  Experience administering VMs, virtual switches, and storage within VMware ESXi/vCenter or Hyper-V.

• RHCSA or RHCE
• CompTIA Linux+ or LFCS
• CompTIA Security+ or GISF
• Cyber Ark Certified Sentry or Trustee

• Extreme Attention to Detail:
  Precise, systematic approach to system configuration, security rules, and audit trail maintenance.
• High Integrity:
  Commitment to security, compliance standards, and ethical handling of export-controlled hardware and software.
• Excellent Communicator:
  Strong written and verbal communication skills for documentation and coordinating with the RDL Network Architect.