Lead Network & Security Architect — Global Isolated Lab

Celestica Inc.; Toronto; On-site; CAD 140,000 - 190,000; Full time

Job summary

Celestica Inc. is seeking a highly experienced Lead Network & Security Architect to own the RDL reference architecture for the Hardware Platform Solutions group.

The role involves deploying and maintaining an air-gapped network environment across multiple global hubs, with strict isolation from standard corporate IT networks. You will manage secure access paths, private SD-WAN overlays, and a multi-tier data distribution system, enabling rapid spin-up of project-specific instantiations while

Qualifications

• Extensive experience in designing isolated, air-gapped networks.
• Proven ability to deploy and manage multi-site RDL architectures.
• Strong knowledge of secure access methods and RBAC.

Responsibilities

• Deploy and standardize the RDL reference design across global centers.
• Spin up new RDL network instances with subnetting and VLANs.
• Enforce strict isolation and prevent public internet access.
• Design and maintain the private SD-WAN overlay.
• Configure enterprise firewalls and segmentation.
• Manage core and access switches to segment VLANs.
• Oversee CyberArk for remote access.
• Configure ZTNA and jump hosts for secure connections.
• Define local account procedures in absence of AD.

Skills

Network architecture

Security engineering

SD-WAN design

RBAC & IAM

Jump host management

Tools

Cisco Catalyst switches

Checkpoint 3980

Zscaler ZTNA

CyberArk vPAM

Local jump hosts

Job description

Celestica Inc. is seeking a highly experienced Lead Network & Security Architect to own the RDL reference architecture for the Hardware Platform Solutions group.

The role involves deploying and maintaining an air-gapped network environment across multiple global hubs, with strict isolation from standard corporate IT networks. You will manage secure access paths, private SD-WAN overlays, and a multi-tier data distribution system, enabling rapid spin-up of project-specific instantiations while