{"id":3190604,"url":"https://alion.io/job/celestica-lead-network-security-architect","title":"Lead Network & Security Architect","company":{"id":58064,"name":"Celestica","domain":"celestica.com","url":"https://alion.io/company/celestica","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"SuccessFactors","truth_index":null},"role":"Security","role_family":"Security","seniority":"lead","employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Richardson, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":111000,"max_usd":229000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":453},"experience_years_min":8,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Active Directory","optional":false},{"name":"Apache HTTP Server","optional":false},{"name":"AWS","optional":false},{"name":"Azure","optional":false},{"name":"CentOS Stream","optional":false},{"name":"CyberArk","optional":false},{"name":"Hyper-V","optional":false},{"name":"Linux","optional":false},{"name":"Nginx","optional":false},{"name":"Ubuntu","optional":false},{"name":"VLAN","optional":false},{"name":"VMWare","optional":false},{"name":"Windows","optional":false},{"name":"Zero Trust","optional":false},{"name":"Zscaler","optional":false}],"status":"live","first_seen_at":"2026-10-12T02:00:00Z","employer_posted_date":"2026-10-12","last_verified_at":"2026-10-24T16:25:27Z","board_verified":false,"closed_at":null,"days_open":15,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":15},"description":"Req ID: 137432\nRegion: Americas\nCountry: USA\nState/Province: Texas\nCity: Richardson\nSummary\nWe are seeking a highly experienced and meticulous Lead Network & Security Architect to join the IT Support team for the Hardware Platform Solutions (HPS) group. In this role, you will take ownership of our global Research and Development Lab (RDL) reference architecture and drive its deployment, management, and scaling across all current and future HPS Design Centers.\nThe successful candidate will be responsible for implementing and maintaining a completely isolated, air-gapped network environment that operates independently of standard corporate IT networks. You will manage complex secure access paths, isolated VLAN provisioning, private full-mesh SD-WAN overlays, and a multi-tiered global data package replication and distribution system. You will also serve as the key enablement architect, helping project teams quickly spin up new project-specific instantiations of the RDL network model while adhering to strict security constraints\nCore Responsibilities\n1. Architectural Implementation & Governance\nDeploy Reference Architecture: Standardize and implement the RDL reference design across all global HPS design locations .\n\nSupport New Instantiations: Act as the primary technical design authority to spin up new RDL network instances for upcoming HPS design projects.\n\nStrict Constraint Enforcement: Maintain absolute isolation of the RDL environments. Ensure zero direct or indirect public internet connectivity and guarantee that out-of-scope systems or agents are strictly excluded from the lab network.\n\n2. Network Infrastructure & Security\nSD-WAN & Routing: Design, configure, and maintain the private, full-mesh SD-WAN overlay connecting global RDL sites.\n\nSecure Firewalling: Configure and administer enterprise-grade firewalls protecting the perimeter of each localized lab, defining strict ingress/egress filtering rules.\n\nSwitching & Segmentation: Manage core and access layer switches to segment the RDL into logical, multi-tenant VLAN environments-specifically separating Export Controlled and Non-Export Controlled network zones.\n\n3. Identity and Remote Access Management\nRemote Customer Access: Oversee the implementation and administration of virtual privileged access management for remote customer connections.\n\nCorporate Remote Access: Configure and maintain zero trust network access.\n\nDecentralized Authentication: Design and maintain a secure user management protocol on jump hosts and local RDL nodes. As the RDL operates without Windows Active Directory, you will define standard operating procedures for the manual/programmatic creation of local system accounts and localized role-based access control (RBAC).\n\n4. Secure Data Package Management & DevOps Repo Architecture\nRepository Architecture: Maintain the multi-tier secure data distribution system:\nIT Repository Server: Internet-facing ingestion nodes to securely pull packages, drivers, and applications.\n\nGlobal Repository Server: The middle-layer relay that acts as a secure, scanned transit point between the corporate IT network and the isolated RDL network.\n\nRDL Local Repository Server: Localized instances inside the labs that pull from the Global Repo and host files locally over HTTP/HTTPS at /var/www/html/repo/.\n\nWorkflow Automation: Ensure seamless, secure, programmatically validated transfer of \"transfer bundles\" containing operating system packages (Rocky, Ubuntu, CentOS, etc.) across the air gap.\n\nSecurity Scans & Compliance: Coordinate with corporate IT and security teams to execute periodic vulnerability scanning and patching of repository servers, ensuring all packages undergo integrity checks before reaching the inner RDL network\n\nKnowledge/Skills/Competencies\nRequired Technical Skills\nHardware & OS Competencies: Hands-on experience with Checkpoint Firewalls, Cisco Catalyst 9400/9200 switches, and SilverPeak SD-WAN solutions.\n\nSecurity & Identity Tools: Expert-level understanding of CyberArk and Zscaler.\n\nVirtualization & Systems: Solid administration experience in VMware vSphere Enterprise and/or Microsoft Hyper-V running on bare-metal systems.\n\nLinux Administration: Strong proficiency with Linux environments (Rocky Linux, Ubuntu, CentOS) for jump host configuration and secure HTTP/HTTPS local web repository servers (Nginx/Apache).\n\nNetwork Segmentation & Protocols: Expert in VLAN tagging, inter-VLAN routing, subnetting, IP address management (IPAM), and secure file transfer protocols.\n\nAutomated Data Pipelines: Familiarity with script-based file synchronization and automated extraction/integrity validation mechanisms (e.g., hashing, checksums) for software deployment across isolated boundaries.\n\nStrongly Preferred Certifications\nCheckpoint Certified Security Expert (CCSE) or Master (CCSM)\n\nCisco Certified Network Expert(CCIE) - Enterprise or Routing & Switching.\n\nMicrosoft Certified Azure Solutions Architect Expert.\n\nAWS Certified Solutions Architect - Professional\n\nSoft Skills & Working Style\nDetailed Documentation: Proven track record of generating flawless High-Level Designs (HLD) and Low-Level Designs (LLD), block diagrams, and standard operating procedures (SOPs).\n\nStrategic Problem Solver: Comfortable working around strict operational boundaries where typical modern agents and automated tools are banned for security compliance.\n\nCross-functional Partner: Ability to collaborate closely with HPS Design Engineers, Project Managers, Corporate IT Security, and external Customers.\n\nFinancial Stewardship: Ability to work closely with procurement to specify, justify, and size bill of materials (BOM) for both upgrading existing sites and provisioning new infrastructure.\n\nPhysical Demands\nDuties of this position are performed in a normal office environment.\n\nDuties may require extended periods of sitting and sustained visual concentration on a computer monitor or on numbers and other detailed data. Repetitive manual movements (e.g., data entry, using a computer mouse, using a calculator, etc.) are frequently required.\n\nTypical Education and Experience\nBachelor’s degree in Network Engineering, Computer Science, Cybersecurity, or a related technical field.\n\nMinimum of 8+ years of experience in network architecture, with a heavy emphasis on securing air-gapped or highly isolated enterprise environments.\n\nNotes\nThis job description is not intended to be an exhaustive list of all duties and responsibilities of the position. Employees are held accountable for all duties of the job. Job duties and the % of time identified for any function are subject to change at any time.\nCelestica is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, pregnancy, genetic information, disability, status as a protected veteran, or any other protected category under applicable federal, state, and local laws.\nThis policy applies to hiring, promotion, discharge, pay, fringe benefits, job training, classification, referral and other aspects of employment and also states that retaliation against a person who files a charge of discrimination, participates in a discrimination proceeding, or otherwise opposes an unlawful employment practice will not be tolerated. All information will be kept confidential according to EEO guidelines.\nCelestica is an E-Verify employer.\nCOMPANY OVERVIEW:\nCelestica, Inc. (NYSE: CLS; TSX: CLS) is a technology leader dedicated to driving customer success and market advancements. With deep expertise in design, engineering, manufacturing, supply chain, and platform solutions, Celestica enables critical data center infrastructure for AI, cloud, and hybrid cloud and advances technologies in high-growth markets. With a talented team and a strategic global network, Celestica helps its customers achieve competitive advantages.\nToday, Celestica delivers innovative supply chain solutions globally to customers in strategic two operating and reporting segments: Advanced Technology Solutions (ATS) and Connectivity and Cloud Solutions (CC):\nATS: This segment serves customers in complex, regulated and high-reliability markets such as Industrial & Smart Energy, Aerospace & Defense, Semiconductor Capital Equipment, and HealthTech. It is engineering led, with deep expertise in design, manufacturing and lifecycle solutions.\nCCS: This segment focuses on high-performance technology solutions and services for the data center, serving hyperscalers, digital native customers and enterprises. Celestica's Platform Solutions offering provides innovative and customizable computing, storage and networking solutions enabling AI-driven growth.\nBuilt on a legacy of trust and performance, Celestica has earned its reputation by delivering results in complex and fast-changing markets. Celestica exceeds customer expectations by identifying trends and staying ahead of the curve. Backed by comprehensive capabilities and a global network across North America, Europe and Asia, Celestica helps customers gain competitive advantage with the quality, flexibility and resiliency they need to respond quickly to shifts in demand. Guided by a bold vision to accelerate market advancements, Celestica delivers innovative solutions and technologies that turn complexity into opportunity. Anchored in teamwork and commitment, Celestica strives to be the most trusted partner to its customers and colleagues worldwide.\nCelestica would like to thank all applicants, however, only qualified applicants will be contacted.\nCelestica does not accept unsolicited resumes from recruitment agencies or fee based recruitment services.","description_format":"text","description_chars":9739,"description_truncated":false,"requirements":{"experience_years_min":8,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Electronics Manufacturing"],"lifecycle":[{"event":"open","at":"2026-10-24T01:26:30Z"}],"visa":[],"liveness":{"score":81,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.903,"p_room":0.9,"age_days":14,"expected_fill_days":25,"reasons":["conf:37","velocity","win:mid","comp:brand"],"computed_at":"2026-10-26T05:57:25Z"},"pay":null,"html_url":"https://alion.io/job/celestica-lead-network-security-architect","json_url":"https://alion.io/job/celestica-lead-network-security-architect.json","meta":{"generated_at":"2026-10-27T02:12:03Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":1344,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-28T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":58064},"rest":"https://alion.io/mcp/rest/get_company?id=58064"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fcelestica-lead-network-security-architect"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fcelestica-lead-network-security-architect"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fcelestica-lead-network-security-architect"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/celestica-lead-network-security-architect\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fcelestica-lead-network-security-architect"}]}