Digital LAB Expert - Laboratory Administrator
1 day ago
Madrid
ph3Overview /h3pbJob Requirements /b Description of Professional Duties for BRTE. Laborartory Administrator. Introduction: The BRTE Laboratory (or “lab”) Consists Of a Server Center Located At The BRTE Premises In Madrid And Designed To Support Project Activities That Involve Collaboration Between BRTE, Contractors, And Other Boeing Sites. The Lab Also Supports RD Activities Requiring a Testing Environment For Software And Hardware Devices That Do Not Fully Comply With Boeing Standards. Main Features Of The BRTE Laboratory: /pulliSupport for approximately 60 Boeing users and 200 external users /liliRemote access to the lab via internet /liliAccess policy and network segmentation to restrict access to lab services /liliNon-standard HW/SW components (though adhering to Boeing standards where possible) /liliPhysical isolation from the Boeing Enterprise Network /liliMulti-factor authentication for all lab users /liliAlarm monitoring 5 days per week and 10 hours per day locally within the BRTE site /liliOperating hours from 9 AM to 7 PM CET, Monday through Friday (with official Madrid holidays) /liliOff-shift support required on special occasions /liliNormally available outside of operating hours but without operational support /liliSystem maintenance performed on a scheduled basis, normally off shift /liliApplication maintenance performed on a scheduled basis /liliDowntime tolerance in case of disaster: system will be unavailable until new hardware, network and facility components are acquired /liliBackups of production and infrastructure systems taken regularly and stored off-site /li /ulpThe lab administrator is responsible for ensuring that the BRTE Laboratory functions as described. The following sections describe duties and tasks required of the lab administrator in greater detail. /p h3Maintenance of Core Computing Infrastructure /h3pbBy Core Computing Infrastructure, We Mean /b: /pulliRacked storage of computing equipment /liliPower and HVAC units /liliLayer-2 switching infrastructure /liliWireless networks /liliLayer-7 firewalls /liliCore layer-7 services such as DNS, NTP, syslog, LDAP, and authentication services /liliAdministrative tasks include: /liliRacking devices in data room /liliNetwork design, segmentation, VLAN distribution, cabling, etc. /liliConfiguring individual devices and services /liliEnsuring clear documentation is available /liliMonitoring all services for interruptions or anomalous behavior /liliUpgrading and patching software as necessary /liliDebugging anomalous behavior /liliPurchasing new equipment /li /ulpMajor technologies include: FortiGate, FortiAuthenticator, PaloAlto PanOS, Cisco Nexus optical switches, Cisco Catalyst switches, bind9, ntpd, rsyslog, Microsoft ActiveDirectory, Kerberos, RADIUS, APC switched PDUs, Liebert HPM, Liebert NXC 30, nagios, Cisco C9136I-E, Cisco C9800 APC, and APC racks. /p h3Remote Connectivity /h3pMust maintain remote connectivity solutions for various remote collaboration cases: /pulliVPN connection by lab users /liliSite-to-site network integration with remote collaborators /liliIoT connections /liliBasic data-sharing with collaborating institutions /li /ulpAs new use-cases arise, the lab administrator must devise new solutions suited to specific needs. These functionalities often involve extensive debugging and technical support sessions with remote users. Advanced knowledge of relevant communications protocols is necessary. /ppMajor technologies include: ipsec, esp, ike, cryptographic protocols, PA Global-Connect, FortiClient, sftp, ownCloud, etc. /p h3Development of Administrative Software /h3pIn order to automate routing administrative tasks of monitoring, configuring, and reporting, we have developed an in-house administrative web application using Django. Besides routine software maintenance tasks, the lab administrator must: /pulliIdentify lab tasks susceptible to automation and develop new functionalities using the Django framework /liliUpdate configuration code as controlled infrastructure changes /liliAdd features as requested by auditors for better compliance with guidelines /li /ulpMuch of the software controls computing infrastructure within the lab, so a solid knowledge of how those devices work is required. Major technologies include: python3, graphviz, LaTex, selenium, mysqldb, freeradius, cron, apache2, html/css, scheme, gimp, etc. /p h3Technical Support for Lab Users /h3pThe lab administrator must be available to handle technical support requests from lab users. A ticket system is in place for issue communication and timely resolution. /p h3ISO Compliance /h3pWe are regularly audited for compliance with several ISO standards: /pulliISO 9001 Quality Management Systems /liliISO 27001 Information Security Management /liliISO 14644 Air Cleanliness in Controlled Environments /li /ulpThe lab administrator must be present at audits, provide requested information, and carry out resulting task lists within reasonable timeframes. Standards influence tools such as our Django web application, formalizing frequent tasks into automated programs. /p h3Information Security /h3pBRTE Laboratory emphasizes security policy as much as possible. Key security tasks for the lab administrator include: /pulliVulnerability scans /liliPatching and updating software /liliMalware scanning /liliIntrusion detection systems /liliLayer-7 firewalls /liliEncrypted/trusted communication protocols /liliDevelopment/testing of disaster recovery plans /liliSoftware backups /liliEtc. /li /ulpMajor technologies include: PaloAlto tools, Fortinet tools, ossec, clamav, Forti-Client, FortiEMS, nagios, openssl, nexpose, etc. /p h3Hypervisors /h3pVirtualization is an important service offered by the BRTE Laboratory. The lab administrator must maintain the hypervisor infrastructure and tune Vhosts for performance and reliability. Notable points: /pulliAll Linux VMs are deployed using an in-house cloud deployment system /liliAll vhosts are incrementally replicated using in-house software /liliMajor technologies: qemu, kvm, cuda, numa, nvme2, Dell iDRAC, Kubernetes, btrfs, etc. /li /ul h3Backup /h3pWe have custom backup technologies based on HDFS and BTRFS. The lab administrator must maintain these tools, define backup policy, and ensure it is enforced. This is a big data environment with complex issues. /p h3X.509 Infrastructure /h3pWe are an internally managed CA for internal domains, with Boeing and DigiCert signing CSRs for external domains. The lab administrator has the following tasks: /pulliGenerate certificates for all computers, users, etc. /liliRenew expiring certificates /liliRevoke certificates no longer in use /liliMaintain internal CA /liliEtc. /li /ulpFor maintenance of the internal CA, knowledge of OpenSSL and X.509 certificates is necessary. /p h3ADSB Network /h3pThe Lab Administrator Must Maintain Our Custom ADSB Network: /pulliDeploy antenna devices as necessary /liliMonitor remote antennas for connectivity /liliShare incoming data with interested projects /li /ul h3Procurement /h3pAll equipment purchased for the BRTE Laboratory must be approved by the lab administrator to ensure standards for storage, networking, power, etc. The lab administrator typically provides consultation for hardware purchases and must have knowledge about suitable solutions for Cloudera, hypervisor, storage, and networking equipment. /p h3Delegation and Human Resources /h3pThe lab administrator typically works with assistants and engineers from other projects. They must assign tasks, review results, and more. Team leadership and communication skills are essential. For hiring lab assistants, the role includes drafting job descriptions and participating in the hiring process. /p h3Research Development /h3pThe BRTE Laboratory is a research and development environment, and the lab administrator must participate in RD projects within the context of administering the lab. Many backup technologies, ADSB networks, etc., originate from such initiatives. The ability to handle such projects with minimal supervision and provide stable solutions is necessary. /p h3Work Experience /h3pIf you are a professional who wants to make a difference, you are the candidate we are looking for. /p h3Technologies and Tools /h3pMajor technologies include: /pulliHypervisors: qemu, kvm, cuda, numa, nvme2, Dell IDRAC, Kubernetes, btrfs, etc. /liliInformation Security: PaloAlto tools, Fortinet tools, ossec, clamav, FortiClient, FortiEMS, nagios, openssl, nexpose, etc. /liliDevelopment of Administrative Software: python3, graphviz, LaTex, selenium, mysqldb, freeradius, cron, apache2, html/css, scheme, gimp, etc. /liliRemote Connectivity: ipsec, esp, ike, cryptographic protocols, PA Global-Connect, FortiClient, sftp, ownCloud, etc. /liliMaintenance of Core Computing Infrastructure: FortiGate, FortiAuthenticator, PaloAlto PanOS, Cisco Nexus optical switches, Cisco Catalyst switches, bind9, ntpd, rsyslog, Microsoft ActiveDirectory, Kerberos, RADIUS, APC switched PDUs, Liebert HPM, Liebert NXC 30, nagios, Cisco C9136I-E, Cisco C9800 APC, and APC racks. /li /ul h3Additional Valued Skills /h3pExperience development of a computing cluster for studying commercial air traffic and optimizing routes. /p h3ISO standards /h3ulliISO 9001 Quality Management Systems /liliISO 27001 Information Security Management /liliISO 14644 Air Cleanliness in Controlled Environments /li /ul /p #J-18808-Ljbffr