At a Glance
- Tasks: Lead the design and implementation of secure network architectures for global R&D labs.
- Company: Join Celestica, a tech leader driving innovation in AI and cloud solutions.
- Benefits: Competitive salary, comprehensive benefits, and opportunities for professional growth.
- Other info: Collaborative culture with a focus on teamwork and strategic problem-solving.
- Why this job: Make a significant impact on cutting-edge technology in a dynamic environment.
- Qualifications: 8+ years in network architecture with expertise in security and isolation.
The predicted salary is between 125000 - 199000 $ per year.
We are seeking a highly experienced and meticulous Lead Network & Security Architect to join the IT Support team for the Hardware Platform Solutions (HPS) group. In this role, you will take ownership of our global Research and Development Lab (RDL) reference architecture and drive its deployment, management, and scaling across all current and future HPS Design Centers (including Silicon Valley, Richardson, Thailand, and other global hubs). The successful candidate will be responsible for implementing and maintaining a completely isolated, air-gapped network environment that operates independently of standard corporate IT networks. You will manage complex secure access paths, isolated VLAN provisioning, private full-mesh SD-WAN overlays, and a multi-tiered global data package replication and distribution system. You will also serve as the key enablement architect, helping project teams quickly spin up new project-specific instantiations of the RDL network model while adhering to strict security constraints.
Core Responsibilities
- Architectural Implementation & Governance
- Deploy Reference Architecture: Standardize and implement the RDL reference design across all global HPS design locations.
- Support New Instantiations: Act as the primary technical design authority to spin up new RDL network instances.
- Strict Constraint Enforcement: Maintain absolute isolation of the RDL environments.
- Network Infrastructure & Security
- SD-WAN & Routing: Design, configure, and maintain the private, full-mesh SD-WAN overlay connecting global RDL sites.
- Secure Firewalling: Configure and administer enterprise-grade firewalls protecting the perimeter of each localized lab.
- Switching & Segmentation: Manage core and access layer switches to segment the RDL into logical, multi-tenant VLAN environments.
- Identity and Remote Access Management
- Remote Customer Access: Oversee the implementation and administration of CyberArk vPAM for remote customer connections.
- Corporate Remote Access: Configure and maintain Zscaler ZTNA and App Connectors.
- Decentralized Authentication: Design and maintain a secure user management protocol on jump hosts and local RDL nodes.
- Secure Data Package Management & DevOps Repo Architecture
- Repository Architecture: Maintain the multi-tier secure data distribution system.
- Workflow Automation: Ensure seamless, secure, programmatically validated transfer of “transfer bundles” across the air gap.
- Security Scans & Compliance: Coordinate with corporate IT and security teams to execute periodic vulnerability scanning and patching.
Knowledge/Skills/Competencies
- Required Technical Skills
- Hardware & OS Competencies: Hands-on experience with Checkpoint Firewalls, Cisco Catalyst switches, and SilverPeak SD-WAN solutions.
- Security & Identity Tools: Expert-level understanding of CyberArk and Zscaler.
- Virtualization & Systems: Solid administration experience in VMware vSphere Enterprise and/or Microsoft Hyper‑V.
- Linux Administration: Strong proficiency with Linux environments for jump host configuration.
- Network Segmentation & Protocols: Expert in VLAN tagging, inter‑VLAN routing, subnetting, and secure file transfer protocols.
- Automated Data Pipelines: Familiarity with script‑based file synchronization and automated extraction/integrity validation mechanisms.
- Strongly Preferred Certifications
- Checkpoint Certified Security Expert or Master
- Cisco Certified Network Professional - Enterprise or Security
- CyberArk Certified Defender or Sentry
- Certified Information Systems Security Professional
- Soft Skills & Working Style
- Detailed Documentation: Proven track record of generating flawless High‑Level Designs and Low‑Level Designs.
- Strategic Problem Solver: Comfortable working around strict operational boundaries.
- Cross‑functional Partner: Ability to collaborate closely with various stakeholders.
- Financial Stewardship: Ability to work closely with procurement to specify, justify, and size bill of materials.
Physical Demands
Duties of this position are performed in a normal office environment. Duties may require extended periods of sitting and sustained visual concentration on a computer monitor or on numbers and other detailed data.
Salary
The stated range includes Base Salary and target Short-Term Incentive (STI) compensation only. A comprehensive benefits package is offered in addition to this range. The range described in this posting is an estimate by the Company, and may change based on several factors.
Typical Education and Experience
Bachelor’s degree in Network Engineering, Computer Science, Cybersecurity, or a related technical field. Minimum of 8+ years of experience in network architecture, with a heavy emphasis on securing air-gapped or highly isolated enterprise environments.
Lead Network & Security Architect in Toronto employer: Celestica
Celestica is an exceptional employer that fosters a dynamic work culture focused on innovation and collaboration, particularly in the vibrant tech hub of Toronto. As a Senior Manager in Supply Chain Analytics & Data Intelligence, you will not only lead a talented team but also have access to extensive professional development opportunities, ensuring your growth in a rapidly evolving field. With a commitment to diversity and inclusion, Celestica offers a supportive environment where your contributions directly impact strategic decision-making and operational excellence.
