Senior Networking Specialist

About the role

SLAC National Accelerator Laboratory is seeking a skilled Networking Specialist to design and manage the high-performance networks for SLAC’s scientific computing systems. The position is part of the Scientific Computing System (SCS) Division within the Technology Innovation Directorate (TID).

Responsibilities

• Design, deploy, and maintain reliable, high-performance, high-throughput science networks
• Plan and execute network scalability and lifecycle upgrades (firmware, etc)
• Support the physical deployment of networking equipment
• Use Ansible to automate device configuration across all networking infrastructure
• Troubleshoot network issues by running diagnostic tests and performing repairs
• Conduct cyber risk assessments of our environment when needed
• Design and implement effective security mechanisms without hindering user workflows
• Maintain security plans that document our architectures and controls
• Provide end-user support via our incident platforms and communication channels
• Work closely with the other SCS departments to ensure networking requirements are met
• Participate in on-call rotations as needed
• Build strong relationships with SLAC Central IT Networking, and Security teams

Requirements

• Bachelor's degree in computer sciences, physics, or related field, and 8 years of relevant experience
• In-depth understanding of IPv4 and IPv6 protocols, including addressing, subnetting, and routing fundamentals
• Comprehensive expertise in the TCP/IP protocol stack, including deep knowledge of core protocols such as TCP, UDP, IP, ICMP, and ARP, as well as application-layer protocols (HTTP/S, DNS, DHCP, FTP, SMTP)
• Proficient in analyzing traffic flows, diagnosing connectivity issues using tools such as Wireshark or tcpdump, and understanding concepts such as three-way handshake, flow control, congestion control, and socket-level communication
• Extensive experience in configuring ACLs
• Strong working knowledge of Network Address Translation (NAT), including hands-on experience designing, configuring, and troubleshooting NAT implementations
• Extensive hands-on experience configuring, managing, and troubleshooting switches across multiple vendor platforms, such as Cisco IOS and Arista EOS
• Hands-on experience with InfiniBand networks, including fabric management, subnet configuration, and high-performance computing (HPC) interconnects
• Familiarity with network performance and monitoring tools, such as Grafana, InfluxDB, and Prometheus
• Familiarity with DNS implementation and management
• Familiarity with the most common Load balancer technologies
• Familiarity with SSH, LDAP, Kerberos, and other solutions related to access & authorization
• Demonstrate a strong working knowledge of network security concepts, including Zero Trust Architecture
• Experience with Command Line Interfaces, scripting, and task automation
• Ability to create and maintain documentation
• Ability and willingness to learn and promote technical practices and methods

Qualifications

• Experience with Git and Ansible
• Experience participating in security reviews, audits, and risk assessments
• Familiarity with VXLAN MP-BGP EVPN (overlay networks and their implementations)
• Experience on network flow monitoring protocols such as sFlow/Netflow, and network auditing software such as Zeek or Argus
• Familiarity with the Kubernetes networking, including configuration and monitoring

Skills

• Command Line Interfaces, scripting, and task automation
• Logging, monitoring, and alerting tools/utilities
• Effective Decisions, Self-Development, Dependability, Initiative, Adaptability, Communication, Relationships

Benefits

SLAC National Accelerator Laboratory/Stanford University provides a comprehensive benefits package, including health insurance, retirement savings plan, and paid time off.

Pay

The expected pay range for this position is $156,000 to $191,459 per annum.

Schedule

You are expected to reside locally and work onsite 4 days a week. The SLAC Shared Science Data Facility operates 24x7x365, in support of science experiments that operate 24x7x365, with users all across the world. You are expected to be available to address and resolve critical networking and security issues outside normal working hours, on a rotating basis, as needed.

Physical Requirements and Working Conditions

• Be able to lift heavy objects (> 40 lbs)
• Consistent with its obligations under the law, the University will provide reasonable accommodation to any employee with a disability who requires accommodation to perform the essential functions of the job.
• May work extended hours during peak business cycles.

SLAC Employee Competencies

• Effective Decisions
• Self-Development
• Dependability
• Initiative
• Adaptability
• Communication
• Relationships