RDL Jump Host Admin
Celestica Jobs · Guindy, Chennai, TN, IN · India · Remote
Sign up free: we match you to jobs like this, tailor your application and fill the form. 2 free applications every day.
Specialist, IT Infrastructure Req ID: 138375 Remote Position: Hybrid Hiring Manager: Paul Stanners Band: 08 Region: Asia Country: India State/Province: Chennai City: Guindy, Chennai
Summary
We are seeking an experienced, compliance-driven RDL Jump Host Administrator to take ownership of the system administration, security, and access control of our global local jump hosts. Reporting directly to the Lead Network Architect, and working in close alignment with the RDL Network Administrator, you will manage secure access pathways into completely isolated, air-gapped lab networks across multiple HPS Design Centers (including San Jose, Richardson, Thailand, Shanghai, SongShan Lake, Penang, Chennai, and future sites).
The primary objective of this role is to ensure that remote connections terminating from corporate Zscaler ZTNA or customer CyberArk vPAM environments are securely processed, authenticated, and audited. Since our environments strictly prohibit Active Directory or domain joins, you will manage decentralized, local authentication configurations, shell environments, and session boundaries.
Crucially, you will implement and maintain the strict compliance frameworks required for Export Controlled VLANs—including interactive terms-of-use banners, mandatory user acceptance gates for shell access, and tamper-proof user-acceptance audit logging.
Core Responsibilities
1. Jump Host System Administration & Hardening
Server Provisioning & Lifecycle: Deploy, configure, and maintain Linux-based (Rocky Linux, Ubuntu, CentOS) local jump host virtual machines operating on VMware vSphere or Microsoft Hyper-V clusters.
Operating System Hardening: Apply strict CIS (Center for Internet Security) hardening benchmarks on all jump host operating systems. Ensure that no unauthorized software or corporate agents (e.g., CrowdStrike, ServiceNow, ClearPass, Windows Domain utilities) are installed or active on endpoints installed on the VLAN behind the Jump Host.
Service Availability: Ensure the high availability, performance, patch status, and storage capacity of jump servers acting as gateways to the core RDL networks.
2. Export Control Compliance & Interactive Gates
Export Control Shell Banners: Configure and manage interactive, mandatory user agreement screens (e.g., using custom shell login scripts, Pluggable Authentication Modules (PAM), or SSH ForceCommand) specifically for systems accessing Export Controlled VLANs.
User Acceptance Verification: Ensure that users cannot acquire an interactive shell, run commands, or bypass the landing screen without explicitly reading and accepting the export control and NDA terms.
Tamper-Proof Acceptance Logging: Implement and maintain robust, structured logging systems (using Rsyslog, Journald, or custom secure local logging scripts) that capture:
The authenticated user's local/remote identifier.
Source IP and connection timestamp.
Explicit timestamped confirmation of the…