Digital LAB Expert - Laboratory Administrator
12 hours ago
Madrid
Overview Job Requirements Description of Professional Duties for BR&TE. Laborartory Administrator. Introduction: The BR&TE Laboratory (or “lab”) Consists Of a Server Center Located At The BR&TE Premises In Madrid And Designed To Support Project Activities That Involve Collaboration Between BR&TE, Contractors, And Other Boeing Sites. The Lab Also Supports R&D Activities Requiring a Testing Environment For Software And Hardware Devices That Do Not Fully Comply With Boeing Standards. Main Features Of The BR&TE Laboratory: • Support for approximately 60 Boeing users and 200 external users, • Remote access to the lab via internet, • Access policy and network segmentation to restrict access to lab services, • Non-standard HW/SW components (though adhering to Boeing standards where possible), • Physical isolation from the Boeing Enterprise Network, • Multi-factor authentication for all lab users, • Alarm monitoring 5 days per week and 10 hours per day locally within the BR&TE site, • Operating hours from 9 AM to 7 PM CET, Monday through Friday (with official Madrid holidays), • Off-shift support required on special occasions, • Normally available outside of operating hours but without operational support, • System maintenance performed on a scheduled basis, normally off shift, • Application maintenance performed on a scheduled basis, • Downtime tolerance in case of disaster: system will be unavailable until new hardware, network and facility components are acquired, • Backups of production and infrastructure systems taken regularly and stored off-site The lab administrator is responsible for ensuring that the BR&TE Laboratory functions as described. The following sections describe duties and tasks required of the lab administrator in greater detail. Para ser considerado para una entrevista, por favor, asegúrese de que su solicitud se ajusta plenamente a las especificaciones del puesto que se encuentran a continuación. Maintenance of Core Computing Infrastructure By Core Computing Infrastructure, We Mean: • Racked storage of computing equipment, • Power and HVAC units, • Layer-2 switching infrastructure, • Wireless networks, • Layer-7 firewalls, • Core layer-7 services such as DNS, NTP, syslog, LDAP, and authentication services, • Administrative tasks include:, • Racking devices in data room, • Network design, segmentation, VLAN distribution, cabling, etc., • Configuring individual devices and services, • Ensuring clear documentation is available, • Monitoring all services for interruptions or anomalous behavior, • Upgrading and patching software as necessary, • Debugging anomalous behavior, • Purchasing new equipment Major technologies include: FortiGate, FortiAuthenticator, PaloAlto PanOS, Cisco Nexus optical switches, Cisco Catalyst switches, bind9, ntpd, rsyslog, Microsoft ActiveDirectory, Kerberos, RADIUS, APC switched PDUs, Liebert HPM, Liebert NXC 30, nagios, Cisco C9136I-E, Cisco C9800 APC, and APC racks. Remote Connectivity Must maintain remote connectivity solutions for various remote collaboration cases: • VPN connection by lab users, • Site-to-site network integration with remote collaborators, • IoT connections, • Basic data-sharing with collaborating institutions As new use-cases arise, the lab administrator must devise new solutions suited to specific needs. These functionalities often involve extensive debugging and technical support sessions with remote users. Advanced knowledge of relevant communications protocols is necessary. Major technologies include: ipsec, esp, ike, cryptographic protocols, PA Global-Connect, FortiClient, sftp, ownCloud, etc. Development of Administrative Software In order to automate routing administrative tasks of monitoring, configuring, and reporting, we have developed an in-house administrative web application using Django. Besides routine software maintenance tasks, the lab administrator must: • Identify lab tasks susceptible to automation and develop new functionalities using the Django framework, • Update configuration code as controlled infrastructure changes, • Add features as requested by auditors for better compliance with guidelines Much of the software controls computing infrastructure within the lab, so a solid knowledge of how those devices work is required. Major technologies include: python3, graphviz, LaTex, selenium, mysqldb, freeradius, cron, apache2, html/css, scheme, gimp, etc. Technical Support for Lab Users The lab administrator must be available to handle technical support requests from lab users. A ticket system is in place for issue communication and timely resolution. ISO Compliance We are regularly audited for compliance with several ISO standards: • ISO 9001 Quality Management Systems, • ISO 27001 Information Security Management, • ISO 14644 Air Cleanliness in Controlled Environments The lab administrator must be present at audits, provide requested information, and carry out resulting task lists within reasonable timeframes. Standards influence tools such as our Django web application, formalizing frequent tasks into automated programs. Information Security BR&TE Laboratory emphasizes security policy as much as possible. Key security tasks for the lab administrator include: • Vulnerability scans, • Patching and updating software, • Malware scanning, • Intrusion detection systems, • Layer-7 firewalls, • Encrypted/trusted communication protocols, • Development/testing of disaster recovery plans, • Software backups, • Etc. Major technologies include: PaloAlto tools, Fortinet tools, ossec, clamav, Forti-Client, FortiEMS, nagios, openssl, nexpose, etc. Hypervisors Virtualization is an important service offered by the BR&TE Laboratory. The lab administrator must maintain the hypervisor infrastructure and tune Vhosts for performance and reliability. Notable points: • All Linux VMs are deployed using an in-house cloud deployment system, • All vhosts are incrementally replicated using in-house software, • Major technologies: qemu, kvm, cuda, numa, nvme2, Dell iDRAC, Kubernetes, btrfs, etc. Backup We have custom backup technologies based on HDFS and BTRFS. The lab administrator must maintain these tools, define backup policy, and ensure it is enforced. This is a big data environment with complex issues. X.509 Infrastructure We are an internally managed CA for internal domains, with Boeing and DigiCert signing CSRs for external domains. The lab administrator has the following tasks: • Generate certificates for all computers, users, etc., • Renew expiring certificates, • Revoke certificates no longer in use, • Maintain internal CA, • Etc. For maintenance of the internal CA, knowledge of OpenSSL and X.509 certificates is necessary. ADSB Network The Lab Administrator Must Maintain Our Custom ADSB Network: • Deploy antenna devices as necessary, • Monitor remote antennas for connectivity, • Share incoming data with interested projects Procurement All equipment purchased for the BR&TE Laboratory must be approved by the lab administrator to ensure standards for storage, networking, power, etc. The lab administrator typically provides consultation for hardware purchases and must have knowledge about suitable solutions for Cloudera, hypervisor, storage, and networking equipment. Delegation and Human Resources The lab administrator typically works with assistants and engineers from other projects. They must assign tasks, review results, and more. Team leadership and communication skills are essential. For hiring lab assistants, the role includes drafting job descriptions and participating in the hiring process. Research & Development The BR&TE Laboratory is a research and development environment, and the lab administrator must participate in R&D projects within the context of administering the lab. Many backup technologies, ADSB networks, etc., originate from such initiatives. The ability to handle such projects with minimal supervision and provide stable solutions is necessary. Work Experience If you are a professional who wants to make a difference, you are the candidate we are looking for. Technologies and Tools Major technologies include: • Hypervisors: qemu, kvm, cuda, numa, nvme2, Dell IDRAC, Kubernetes, btrfs, etc., • Information Security: PaloAlto tools, Fortinet tools, ossec, clamav, FortiClient, FortiEMS, nagios, openssl, nexpose, etc., • Development of Administrative Software: python3, graphviz, LaTex, selenium, mysqldb, freeradius, cron, apache2, html/css, scheme, gimp, etc., • Remote Connectivity: ipsec, esp, ike, cryptographic protocols, PA Global-Connect, FortiClient, sftp, ownCloud, etc., • Maintenance of Core Computing Infrastructure: FortiGate, FortiAuthenticator, PaloAlto PanOS, Cisco Nexus optical switches, Cisco Catalyst switches, bind9, ntpd, rsyslog, Microsoft ActiveDirectory, Kerberos, RADIUS, APC switched PDUs, Liebert HPM, Liebert NXC 30, nagios, Cisco C9136I-E, Cisco C9800 APC, and APC racks. xcskxlj Additional Valued Skills Experience development of a computing cluster for studying commercial air traffic and optimizing routes. ISO standards • ISO 9001 Quality Management Systems, • ISO 27001 Information Security Management, • ISO 14644 Air Cleanliness in Controlled Environments #J-18808-Ljbffr