Impress employers and recruiters.
Choose from hundreds of resume examples.
Impress employers and recruiters.
Choose from hundreds of resume examples.
Tailor your resume to this Lead Network & Security Architect 1 role.
Rezi rewrites your resume against Celestica International LP's job description. Free.
Tailor your resume to this Lead Network & Security Architect 1 role.
Rezi rewrites your resume against Celestica International LP's job description. Free.
Don't guess if your resume is good enough.
See how it scores against the Lead Network & Security Architect 1 posting at Celestica International LP — free, in seconds.
Don't guess if your resume is good enough.
See how it scores against the Lead Network & Security Architect 1 posting at Celestica International LP — free, in seconds.
About the Role
Seeking a Lead Network & Security Architect to own and deploy the global Research and Development Lab (RDL) reference architecture. This role involves implementing and managing an isolated, air-gapped network environment with complex secure access paths, SD-WAN overlays, and a secure data package replication system. You will enable project teams to quickly spin up new RDL network instances while adhering to strict security constraints.
Responsibilities
- Standardize and implement the RDL reference design across all global HPS design locations.
- Act as the primary technical design authority to spin up new RDL network instances, allocating subnets, configuring VLANs, establishing jump hosts, and defining user authentication parameters.
- Maintain absolute isolation of RDL environments, ensuring zero direct or indirect public internet connectivity and excluding out-of-scope systems.
- Design, configure, and maintain the private, full-mesh SD-WAN overlay connecting global RDL sites.
- Configure and administer enterprise-grade firewalls (Checkpoint 3980) for perimeter protection and define strict ingress/egress filtering rules.
- Manage core and access layer switches to segment the RDL into logical, multi-tenant VLAN environments, separating Export Controlled and Non-Export Controlled network zones.
- Oversee the implementation and administration of CyberArk vPAM for remote customer connections.
- Configure and maintain Zscaler ZTNA and App Connectors to securely terminate connections on Linux-based local jump hosts.
- Design and maintain a secure user management protocol on jump hosts and local RDL nodes, defining standard operating procedures for local system accounts and role-based access control.
- Maintain the multi-tier secure data distribution system, including internet-facing ingestion nodes, a global repository server, and localized RDL repository servers.
- Ensure seamless, secure, programmatically validated transfer of 'transfer bundles' across the air gap.
- Coordinate with corporate IT and security teams to execute periodic vulnerability scanning and patching of repository servers.
- Generate High-Level Designs (HLD) and Low-Level Designs (LLD), block diagrams, and standard operating procedures (SOPs).
- Collaborate with HPS Design Engineers, Project Managers, Corporate IT Security, and external Customers.
- Work closely with procurement to specify, justify, and size bill of materials (BOM).
Requirements
- Minimum of 8+ years of experience in network architecture, with a heavy emphasis on securing air-gapped or highly isolated enterprise environments.
- Bachelor’s degree in Network Engineering, Computer Science, Cybersecurity, or a related technical field.
Skills
- Checkpoint Firewalls (Checkpoint 3980 preferred)
- Cisco Catalyst 9400/9200 switches
- SilverPeak SD-WAN solutions
- CyberArk (PVWM/vPAM)
- Zscaler ZTNA/Zscaler App Connectors
- VMware vSphere Enterprise
- Microsoft Hyper-V
- Linux Administration (Rocky Linux, Ubuntu, CentOS)
- Nginx/Apache
- VLAN tagging
- Inter-VLAN routing
- Subnetting
- IP address management (IPAM)
- Secure file transfer protocols
- Script-based file synchronization
- Automated extraction/integrity validation mechanisms (e.g., hashing, checksums)
- Checkpoint Certified Security Expert (CCSE) or Master (CCSM)
- Cisco Certified Network Professional (CCNP) - Enterprise or Security
- CyberArk Certified Defender or Sentry
- Certified Information Systems Security Professional (CISSP)
Location
- Toronto, Ontario, Canada
Work Type
- Full-time
Experience Level
- 8+ years
Education Level
- Bachelor’s degree
Salary/Compensations
- 125,000 - 199,000 CAD (includes Base Salary and target Short-Term Incentive)
Benefits
- Comprehensive benefits package
About the Company
- Celestica, Inc. is a technology leader enabling critical data center infrastructure for AI, cloud, and hybrid cloud, and advancing technologies in high-growth markets. With deep expertise in design, engineering, manufacturing, supply chain, and platform solutions, Celestica helps customers achieve competitive advantages. The company operates in two segments: Advanced Technology Solutions (ATS) and Connectivity and Cloud Solutions (CCS). Celestica delivers innovative supply chain solutions globally, built on a legacy of trust and performance, and guided by a vision to accelerate market advancements.
Equal Opportunity
- Celestica is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, pregnancy, genetic information, disability, status as a protected veteran, or any other protected category under applicable federal, state, and local laws.
- This policy applies to hiring, promotion, discharge, pay, fringe benefits, job training, classification, referral and other aspects of employment and also states that retaliation against a person who files a charge of discrimination, participates in a discrimination proceeding, or otherwise opposes an unlawful employment practice will not be tolerated.
- All information will be kept confidential according to EEO guidelines.
- Celestica is an E-Verify employer.