Find work in Canada.

330,991 jobs across our Canadian network. How we count

Jobs in Canada

25+ jobs

Email me new jobs Save this search

Added 4 mins ago
Solutions Engineer
Diligent Corporation
Vancouver, BC
As a Solutions Engineer at Diligent, you will partner closely with Sales to help organizations understand how our platform can transform the way they identify and mitigate risk, perform…
Added 19 mins ago
Process Control Applications Engineer - Students Seeking Opportunities - May 2027
Imperial Oil
Sarnia, ON
Full-time
Previous industry experience is beneficial but not essential.
Added 19 mins ago
Mechanical Engineer - Students Seeking Opportunities - May 2027
Imperial Oil
Sarnia, ON
Full-time
…equipment reliability and maintenance efficiency. Your will gain experience supporting either the Machinery or Fixed Equipment Engineering Groups within Sarnia…
Added 19 mins ago
Aviation Cyber security Engineer
Trivosys Technologies LLC
Dorval, QC
Full-time
💼 Experience: 6+ years technical engineering | 2+ years cybersecurity | 2+ years aerospace
Added 20 mins ago
Project Manager, Geotechnical
EnGlobe Corp.
Brantford, ON · Kitchener, ON · London, ON
Full-time
Minimum of 3-5 years’ post-designation experience required;
Added 20 mins ago
Senior Geotechnical Engineer
EnGlobe Corp.
Brantford, ON · Kitchener, ON · London, ON · ON · Stoney Creek, Ontario
Full-time
10+ years of solid Geotechnical engineering experience;
Added 35 mins ago
Data Engineer
Buyerlink
Victoria, BC
Full-time
We’re looking for a modern Data Engineer who thrives at the intersection of data, cloud, and AI. You build the systems that power insight - scalable pipelines, cloud-native data platforms,…
Added 49 mins ago
Regional Sourcing Manager (Electronics Lane)
Husky Technologies
Bolton, ON
Full-time
Husky TechnologiesTM a company with a strong foundation built on innovation, close customer relationships, a strong sense of community and a unique culture and values. We are looking for…
Added 49 mins ago
Manufacturing Engineer (Contract)
Husky Technologies
Bolton, ON
Full-time
Husky TechnologiesTM a company with a strong foundation built on innovation, close customer relationships, a strong sense of community and a unique culture and values. We are looking for…
Added 50 mins ago
Director, Data Engineering, International Banking, Toronto, Mexico, Colombia, Peru
Scotiabank
Toronto, ON
10+ years of experience in data engineering, platform engineering, DevOps, SRE, or DataOps, including at least 5 years in a leadership role managing distributed technical teams.
Added 1 hour ago
Senior Platform Engineer – RPA & Automation : Toronto, ON : Hybrid : Full time
AceStack
Toronto, ON
Full-time
Role: Senior Platform Engineer – RPA & Automation
Added 1 hour ago
Principal Process Automation Engineer
Worley
Pickering, ON
Full-time
Practical consulting experience - including scoping, selling, and delivery.
Added 1 hour ago
Data Engineer
Buyerlink
Victoria, BC
Full-time
We’re looking for a modern Data Engineer who thrives at the intersection of data, cloud, and AI. You build the systems that power insight - scalable pipelines, cloud-native data platforms,…
Added 1 hour ago
Aircraft Maintenance Engineer (Structures)-EN
CAE
Moose Jaw, SK
Full-time
…experiences that support mission readiness. The Aircraft Maintenance Engineer (AME) - Structures is responsible for performing aircraft servicing and maintenance…
Added 1 hour ago
Product Development Engineer|
Husky Technologies
Bolton, ON
Full-time
Husky TechnologiesTM a company with a strong foundation built on innovation, close customer relationships, a strong sense of community and a unique culture and values. We are looking for…
Added 1 hour ago
Maintenance Manager
Canadian Linen / Quebec Linge
Regina, SK
Full-time
The Chief Engineer is responsible for the safe and efficient operation, maintenance, service and repair of all equipment and process systems in the plant. The incumbent will be involved in…
Added 1 hour ago
METS Principal Information Security Engineer - ITS5
Minnesota Direct Care and Treatment
Saint-Paul, NB · St.-Paul, NB
Full-time
Working Title: METS Principal Information Security Engineer
Added 1 hour ago
Production Support - Elite Quant Fund- Up to $180,000 CAD + Bonus
Hunter Bond
Montreal, QC
Full-time
My client is hiring a Production Support Engineer to support mission-critical front office trading systems in a fast-paced, high-performance environment where uptime, speed, and reliability…
Added 1 hour ago
Data Engineer
Experis
ON · Ontario, Canada
$40 to $51 CAD / hour
Contract
We are seeking a Data Engineer to join a collaborative Agile team focused on building scalable data solutions that power analytics and AI-driven initiatives. This is an exciting opportunity…
Added 1 hour ago
Designer, Development (Service)
Husky Technologies
Bolton, ON
Full-time
Husky TechnologiesTM a company with a strong foundation built on innovation, close customer relationships, a strong sense of community and a unique culture and values. We are looking for…
Added 1 hour ago
Applications Engineer
Husky Technologies
Bolton, ON
Full-time
Husky TechnologiesTM a company with a strong foundation built on innovation, close customer relationships, a strong sense of community and a unique culture and values. We are looking for…
Added 1 hour ago
ERP Business Analyst
Husky Technologies
Bolton, ON
Full-time
Husky TechnologiesTM has a strong foundation built on innovation, close customer relationships and a unique culture and values. We are dedicated to offering our customers the highest…
Added 1 hour ago
Mechanical Engineer - Students Seeking Opportunities - May 2027
ExxonMobil
Sarnia, ON
…equipment reliability and maintenance efficiency. Your will gain experience supporting either the Machinery or Fixed Equipment Engineering Groups within Sarnia…
Added 1 hour ago
Process Control Applications Engineer - Students Seeking Opportunities - May 2027
ExxonMobil
Sarnia, ON
Previous industry experience is beneficial but not essential.
Added 1 hour ago
Student Engineer, Production
Apotex
Toronto, ON · North York, ON
$18 to $24.5 CAD / hour
The Student Engineer, Production, assists with improvements to production safety, quality, capacity, reliability, cost, customer service and regulatory compliance in the Production…

Celestica

RDL Jump Host Admin

Toronto, ON, Canada

Pay: Salary Range: CAD 89k – 124k
Job type: Full-time
Apply by: Oct 24, 2026
Experience: 4+ years of dedicated experience in Linux System Administration, with a strong focus on secure system hardening, user management, and compliance auditing.
Posting language: English
Posted: Sep 24, 2026

Apply About employer

Applications open in a new tab.

Original job description

Summary

We are seeking an experienced, compliance-driven RDL Jump Host Administrator to take ownership of the system administration, security, and access control of our global local jump hosts. Reporting directly to the Lead Network Architect, and working in close alignment with the RDL Network Administrator, you will manage secure access pathways into completely isolated, air-gapped lab networks across multiple HPS Design Centers (including San Jose, Richardson, Thailand, Shanghai, SongShan Lake, Penang, Chennai, and future sites).

The primary objective of this role is to ensure that remote connections terminating from corporate Zscaler ZTNA or customer CyberArk vPAM environments are securely processed, authenticated, and audited. Since our environments strictly prohibit Active Directory or domain joins, you will manage decentralized, local authentication configurations, shell environments, and session boundaries.

Crucially, you will implement and maintain the strict compliance frameworks required for Export Controlled VLANs - including interactive terms-of-use banners, mandatory user acceptance gates for shell access, and tamper-proof user-acceptance audit logging.

Core Responsibilities

Jump Host System Administration & Hardening

Server Provisioning & Lifecycle: Deploy, configure, and maintain Linux-based (Rocky Linux, Ubuntu, CentOS) local jump host virtual machines operating on VMware vSphere or Microsoft Hyper-V clusters.
Operating System Hardening: Apply strict CIS (Center for Internet Security) hardening benchmarks on all jump host operating systems. Ensure that no unauthorized software or corporate agents (e.g., CrowdStrike, ServiceNow, ClearPass, Windows Domain utilities) are installed or active on endpoints installed on the VLAN behind the Jump Host.
Service Availability: Ensure the high availability, performance, patch status, and storage capacity of jump servers acting as gateways to the core RDL networks.

Export Control Compliance & Interactive Gates

Export Control Shell Banners: Configure and manage interactive, mandatory user agreement screens (e.g., using custom shell login scripts, Pluggable Authentication Modules (PAM), or SSH ForceCommand) specifically for systems accessing Export Controlled VLANs.
User Acceptance Verification: Ensure that users cannot acquire an interactive shell, run commands, or bypass the landing screen without explicitly reading and accepting the export control and NDA terms.
Tamper-Proof Acceptance Logging: Implement and maintain robust, structured logging systems (using Rsyslog, Journald, or custom secure local logging scripts) that capture:
The authenticated user's local/remote identifier.
Source IP and connection timestamp.
Explicit timestamped confirmation of the user's compliance acceptance.
Log Archival & Integrity: Set up secure, write-only log forwarding or local hashing protocols to ensure audit logs of export-control acceptances cannot be modified or deleted by general users.

Identity, Access, & Session Management

Decentralized Local Authentication: Programmatically or manually provision local Unix user accounts, localized Role-Based Access Control (RBAC), and SSH keys on all jump hosts.
Remote Integration Support: Partner with corporate IT to ensure seamless hand-offs from Zscaler ZTNA (via local Zscaler App Connectors) and CyberArk vPAM sessions terminating on the jump hosts.
Session Controls: Configure strict SSH timeouts, idle session terminations, and multi-factor authentication loops to prevent abandoned active connections.

Operations, Ticket Resolution & Collaboration

Workplace Collaboration: Align daily with the RDL Network Administrator to coordinate VLAN mappings, firewall rule adjustments, and routing protocols necessary for jump host access.
Engineering Support: Serve as a technical point of contact for HPS design engineers having credentialing, shell, or connection issues when entering secure environments.
Incident & Audit Readiness: Assist the Lead Network Architect in pulling audit trails and access reports during compliance reviews, system security audits, or customer security evaluations.

Knowledge/Skills/Competencies

Required Technical Skills

Linux Expertise (Expert Level): Mastery of Linux OS administration (Rocky Linux, RHEL, CentOS, Ubuntu) including shell scripting (Bash, Python), security policies, and package management.
Secure Access & Authentication: Comprehensive knowledge of SSH daemon configuration (sshd_config), PAM (Pluggable Authentication Modules) stack configuration, and secure local authentication patterns.
Audit & Log Engineering: Proven experience configuring structured logging systems, syslog routing, Rsyslog, or Journald to create secure, immutable compliance audit trails.
Access Technologies: Familiarity with Zscaler ZTNA (App Connectors), CyberArk vPAM, and Virtual Private Network (VPN) architectures.
Virtualization Basics: Practical experience administering virtual machines, virtual switches, and storage within VMware ESXi / vCenter or Microsoft Hyper-V.

Preferred Certifications

Red Hat Certified System Administrator (RHCSA) or Engineer (RHCE)
CompTIA Linux+ or Linux Foundation Certified SysAdmin (LFCS)
CompTIA Security+ or GISF (GIAC Information Security Fundamentals)
CyberArk Certified Sentry or Trustee

Soft Skills & Working Style

Extreme Attention to Detail: Precise, systematic approach to system configuration, security rules, and audit trail maintenance.
High Integrity: Uncompromising commitment to maintaining security barriers, compliance standards, and ethical handling of export-controlled hardware and software.
Excellent Communicator: Strong written and verbal communication skills, necessary for writing technical LLD/SOP documentation, explaining access gates to end-users, and coordinating with the RDL Network Architect.

Physical Demands

Duties of this position are performed in a normal office environment.
Duties may require extended periods of sitting and sustained visual concentration on a computer monitor or on numbers and other detailed data. Repetitive manual movements (e.g., data entry, using a computer mouse, using a calculator, etc.) are frequently required.

Salary

The stated range includes Base Salary and target Short-Term Incentive (STI) compensation only. A comprehensive benefits package is offered in addition to this range.

The range described in this posting is an estimate by the Company, and may change based on several factors, including but not limited to a change in the duties covered by the job posting, or the credentials, experience or geographic jurisdiction of the successful candidate.

Salary Range: CAD 89k – 124k

Education & Experience

Bachelor’s degree in Network/System Administration, Computer Science, Cybersecurity, or equivalent technical experience.
4+ years of dedicated experience in Linux System Administration, with a strong focus on secure system hardening, user management, and compliance auditing.

Apply About employer

More about this job

Responsibilities

Administer and harden Linux jump hosts across isolated lab networks, managing local accounts, secure remote access, session controls, availability, and patching. Implement export-control acceptance gates and tamper-resistant audit logging, support access troubleshooting, and assist with compliance reviews.

Requirements

Requires a bachelor’s degree in a relevant technical field or equivalent experience, plus at least four years of Linux system administration experience focused on hardening, user management, and compliance auditing. Candidates should have expert Linux administration skills, SSH and PAM expertise, audit-log engineering experience, and familiarity with Zscaler, CyberArk, and virtualization platforms.

Skills

Linux System Administration
Linux Security Hardening
Bash Scripting
Python
SSH Configuration
PAM Configuration
Local Authentication
Role-Based Access Control
Audit Logging
Rsyslog
Journald
Zscaler ZTNA
CyberArk vPAM
VMware vSphere
Microsoft Hyper-V
Export Control Compliance

Visa sponsorship

Not detected in the job text

Keywords

Linux
Rocky Linux
RHEL
CentOS
Ubuntu
Bash
Python
SSH
PAM
CIS Hardening Benchmarks
Rsyslog
Journald
Zscaler ZTNA
Zscaler App Connectors
CyberArk vPAM
VPN
VMware ESXi
VMware vCenter
Microsoft Hyper-V
Export-Controlled VLANs
Air-Gapped Networks
Local Authentication
Role-Based Access Control
Multi-Factor Authentication
Immutable Audit Trails
Session Management
RHCSA
RHCE
CompTIA Linux+
LFCS

Report this job