Senior Networking Specialist

SLAC Job Postings

Position overview:

Are you a motivated and innovative network engineer with a passion for scientific research? SLAC National Accelerator Laboratory is seeking a skilled Networking Specialist to design and manage the high-performance networks for SLAC¿s scientific computing systems.

SLAC is one of the world¿s premier research laboratories, renowned for its groundbreaking capabilities in photon science, accelerator physics, high-energy physics (HEP), and energy sciences. The Scientific Computing System (SCS) Division within the Technology Innovation Directorate (TID) provides and manages the core Scientific Computing and Data resources for all of SLAC, including projects such as the LSST-Rubin Observatory, the Linac Coherent Light Source (LCLS) user facility, CryoEM user facilities, and the LHC ATLAS detector at CERN..

If you're enthusiastic about cutting-edge technologies, value teamwork, and want to contribute to significant scientific discoveries, we invite you to apply for the Linux Networking and Security Specialist position.

Your specific responsibilities will be to:

• Design, deploy, and maintain reliable, high-performance, high-throughput science networks
• Plan and execute network scalability and lifecycle upgrades (firmware, etc)
• Support the physical deployment of networking equipment
• Use Ansible to automate device configuration across all networking infrastructure
• Troubleshoot network issues by running diagnostic tests and performing repairs
• Conduct cyber risk assessments of our environment when needed
• Design and implement effective security mechanisms without hindering user workflows
• Maintain security plans that document our architectures and controls
• Provide end-user support via our incident platforms and communication channels
• Work closely with the other SCS departments to ensure networking requirements are met.
• Participate in on-call rotations as needed.
• Build strong relationships with SLAC Central IT Networking, and Security teams

To be successful in this position, you will bring:

• Bachelor's degree in computer sciences, physics, or related field, and 8 years of relevant experience
• Strong Networking skill-set:
  • In-depth understanding of IPv4 and IPv6 protocols, including addressing, subnetting, and routing fundamentals, is required.
  • Comprehensive expertise in the TCP/IP protocol stack, including deep knowledge of core protocols such as TCP, UDP, IP, ICMP, and ARP, as well as application-layer protocols ( DNS, DHCP, FTP, SMTP). Candidates should be proficient in analyzing traffic flows, diagnosing connectivity issues using tools such as Wireshark or tcpdump, and understanding concepts such as three-way handshake, flow control, congestion control, and socket-level communication
  • Be familiar with the most common routing protocols (OSPF, BGP) and have hands-on experience with those protocols
  • Extensive experience in configuring ACLs and Strong working knowledge of Network Address Translation (NAT), including hands-on experience designing, configuring, and troubleshooting NAT implementations
  • Extensive hands-on experience configuring, managing, and troubleshooting switches across multiple vendor platforms, such as Cisco IOS and Arista EOS. This includes deep proficiency in VLAN configuration, trunking (802.1Q), Spanning Tree Protocol (STP/RSTP/MSTP), port security, link aggregation (LACP/802.3ad), QoS policies, and Layer 3 switching. Candidates should be comfortable transitioning between vendor-specific CLIs and capable of delivering consistent network configurations in heterogeneous enterprise environments.
  • Hands-on experience with InfiniBand networks, including fabric management, subnet configuration, and high-performance computing (HPC) interconnects, is required.
  • Be familiar with network performance and monitoring tools, such as Grafana, InfluxDB, and Prometheus
  • Be familiar with DNS implementation and management
  • Be familiar with the most common Load balancer technologies
  • Be familiar with SSH, LDAP, Kerberos, and other solutions related to access & authorization
  • Demonstrate a strong working knowledge of network security concepts, including Zero Trust Architecture
  • Experience with Command Line Interfaces, scripting, and task automation
• Experience with logging, monitoring, and alerting tools/utilities
• Ability to create and maintain documentation
• Ability and willingness to learn and promote technical practices and methods

In addition, preferred requirements include:

• Experience with Git and Ansible
• Experience participating in security reviews, audits, and risk assessments
• Familiarity with VXLAN MP-BGP EVPN (overlay networks and their implementations)
• Experience on network flow monitoring protocols such as sFlow/Netflow, and network auditing software such as Zeek or Argus.
• Familiarity with the Kubernetes networking, including configuration and monitoring.

SLAC Employee Competencies:

• Effective Decisions : Uses job knowledge and solid judgment to make quality decisions in a timely manner.
• Self-Development : Pursues a variety of venues and opportunities to continue learning and developing.
• Dependability : Can be counted on to deliver results with a sense of personal responsibility for expected outcomes.
• Initiative : Pursues work and interactions proactively with optimism, positive energy, and motivation to move things forward.
• Adaptability : Flexes as needed when change occurs, maintains an open outlook while adjusting and accommodating changes.
• Communication : Ensures effective information flow to various audiences and creates and delivers clear, appropriate written, spoken, presented messages.
• Relationships : Builds relationships to foster trust, collaboration, and a positive climate to achieve common goals.

Physical Requirements and Working Conditions:

• You are expected to reside locally and work onsite 4 days a week
• The SLAC Shared Science Data Facility operates 24x7x365, in support of science experiments that operate 24x7x365, with users all across the world. You are expected to be available to address and resolve critical networking and security issues outside normal working hours, on a rotating basis, as needed.
• Be able to lift heavy objects (> 40 lbs)
• Consistent with its obligations under the law, the University will provide reasonable accommodation to any employee with a disability who requires accommodation to perform the essential functions of the job. May work extended hours during peak business cycles.

Work Standards :

• Interpersonal Skills: Demonstrates the ability to work well with Stanford colleagues and clients and with external organizations.
• Promote Culture of Safety: Demonstrates commitment to personal responsibility and value for environment, safety and security; communicates related concerns; uses and promotes safe behaviors based on training and lessons learned. Meets the applicable roles and responsibilities as described in the ESH Manual, Chapter 1¿General Policy and Responsibilities:
• Subject to and expected to comply with all applicable University policies and procedures, including but not limited to the personnel policies and other policies found in the University's Administrative Guide,
• As a national laboratory, SLAC National Accelerator Laboratory is responsible for adhering to the Homeland Security Presidential Directive 12 (HSPD-12) and Department of Energy (DOE) Order 473.1A, which require employees to obtain and maintain a HSPD-12 Personal Identity Verification (PIV) Credential. To obtain this credential, employees must successfully complete the applicable tier of federal background investigation post hire and receive a favorable federal adjudication. The tier of federal background investigation will be determined by job duties and national security or public trust responsibilities associated with the job. All tiers of investigation include a declaration of illegal drug activities, including use, supply, possession, or manufacture within the last 1 to 7 years (depending on the applicable tier of investigation). Illegal drug activities include marijuana and cannabis derivatives, which are still considered illegal under federal law, regardless of state laws.

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Classification Title: Network Specialist 3

Grade: K

Job code: 4813

Duration: Regular Continuing

The expected pay range for this position is $156,000 to $191,459 per annum. SLAC National Accelerator Laboratory/Stanford University provides pay ranges representing its good faith estimate of the salary the university reasonably expects to pay for a position upon hire. The pay offered to a selected candidate will be determined based on factors such as (but not limited to) the scope and responsibilities of the position, the qualifications of the selected candidate, departmental budget availability, internal equity, geographic location and external market pay for comparable jobs. At SLAC/Stanford, base pay represents only one aspect of the comprehensive rewards package.