Network Architect / Network Specialist (On‑Prem, Global)
Agilerobotsse
<p>&nbsp;</p> <p><strong>Position Overview</strong></p> <p>Agile Robots SE is seeking a&nbsp;Network Architect / Network Specialist&nbsp;to define and operate our&nbsp;global on‑premise network&nbsp;across multiple geographies and regional offices. You will lead the design and lifecycle of our&nbsp;campus, branch, and data‑center&nbsp;networks—including&nbsp;high‑performance NVIDIA InfiniBand fabrics&nbsp;that power AI/HPC workloads—while ensuring our controls meet&nbsp;TISAX&nbsp;expectations and internal ISMS requirements.</p> <hr> <p><strong>Key Responsibilities</strong></p> <p><strong>1) Global Architecture &amp; Standards (On‑Prem Only)</strong></p> <ul> <li>Design and document&nbsp;end‑to‑end on‑prem architectures&nbsp;(core/distribution/access/WLAN; DC leaf‑spine).</li> <li>Establish and maintain&nbsp;global standards: IP addressing &amp;&nbsp;IPAM (NetBox), routing policy, QoS, naming, security baselines, and&nbsp;change control&nbsp;(HLD/LLD, MOP/SOP, rollback).</li> <li>Define&nbsp;network zoning &amp; segmentation&nbsp;(VLAN/VRF; optional EVPN/VXLAN where justified) across&nbsp;Officeand&nbsp;DMZ&nbsp;networks with clear trust boundaries.</li> </ul> <p><strong>2) Routing, Switching, WLAN &amp; Regional Sites</strong></p> <ul> <li>Engineer&nbsp;BGP/OSPF&nbsp;for WAN &amp; DC; deliver&nbsp;redundancy/failover&nbsp;across carriers and sites.</li> <li>Own&nbsp;Aruba&nbsp;campus/branch switching and WLAN (coverage, capacity planning, RF hygiene, roaming, WPA2/3‑Enterprise).</li> <li>Plan and execute&nbsp;site builds/moves/expansions&nbsp;(circuits, last‑mile, demarc, handoffs, cutovers) with measurable downtime windows.</li> </ul> <p><strong>3) Security, Remote Access &amp; Identity</strong></p> <ul> <li>Lead&nbsp;FortiGate&nbsp;policy architecture (zones, NAT, segmentation, IDS/IPS) and&nbsp;FortiGate VPN&nbsp;(IPsec/SSL) for site‑to‑site and remote access, including HA and posture checks.</li> <li>Implement&nbsp;802.1X NAC&nbsp;(e.g., Aruba ClearPass) with&nbsp;RADIUS/Active Directory&nbsp;integration; enforce device posture and guest segmentation.</li> <li>Operate&nbsp;DMZ&nbsp;patterns (reverse proxying, jump hosts, constrained admin planes) and align with&nbsp;TISAX/ISMSrequirements.</li> </ul> <p><strong>4) High‑Performance Networking for AI/HPC</strong></p> <ul> <li>Design, deploy, and maintain&nbsp;NVIDIA InfiniBand&nbsp;fabrics (topology, cabling/optics, partitioning), including subnet managers (<strong>UFM/opensm</strong>), congestion control, and path optimization.</li> <li>Coordinate with compute/storage teams (e.g., DGX/HPC clusters) on throughput, latency, and scale; plan upgrades and fabric expansions.</li> </ul> <p><strong>5) Reliability, Observability &amp; Automation</strong></p> <ul> <li>Deliver&nbsp;high availability&nbsp;(fast convergence, dual‑homing, link aggregation/MLAG/VLT) and tested&nbsp;DR/failover.</li> <li>Implement proactive monitoring/alerting (e.g.,&nbsp;Zabbix), telemetry/SNMP, and&nbsp;capacity trends; maintain RCAs and SLOs.</li> <li>Centralize logging with&nbsp;rsyslog&nbsp;and&nbsp;FortiAnalyzer; enforce retention and integrity for audits.</li> <li>Use&nbsp;NetBox,&nbsp;Ansible/Python, and Git‑based workflows for&nbsp;configuration management, drift control, and repeatable changes.</li> </ul> <p><strong>6) Compliance, Risk &amp; Vendor Management (TISAX Focus)</strong></p> <ul> <li>Map network controls to <strong>TISAX</strong>&nbsp;expectations (ISMS governance, secure remote access, logging, supplier access, data protection).</li> <li>Partner with ISMS owner/CISO on <strong>risk assessments, controls testing</strong>, and <strong>evidence</strong>&nbsp;preparation for audits (policies, diagrams, logs, change records).</li> <li>Manage <strong>carriers and vendors</strong>&nbsp;(Fortinet, Aruba, Dell; integrators); lead RFPs, SLAs, and lifecycle planning.</li> <li>Mentor regional IT; act as <strong>L3 escalation</strong>&nbsp;for incidents and major changes.</li> </ul> <p><strong>Core Technologies @ Agile Robots SE</strong></p> <ul> <li>Security &amp; Remote Access:&nbsp;FortiGate&nbsp;NGFW,&nbsp;FortiGate VPN&nbsp;(IPsec/SSL), FortiManager/FortiAnalyzer.</li> <li>Campus/Branch &amp; WLAN:&nbsp;Aruba&nbsp;CX/AOS switching, controllers/APs,&nbsp;ClearPass&nbsp;(802.1X), AirWave (on‑prem mgmt).</li> <li>Data Center &amp; Fabric:&nbsp;Dell PowerSwitch (OS10), VLT/MLAG;&nbsp;NVIDIA InfiniBand&nbsp;(UFM/opensm).</li> <li>Foundational Services: VLAN/VRF, BGP/OSPF, QoS;&nbsp;DHCP/DNS,&nbsp;Active Directory,&nbsp;RADIUS;&nbsp;NetBox(IPAM/DCIM).</li> <li>Observability &amp; Automation:&nbsp;Zabbix,&nbsp;rsyslog&nbsp;(retention policy), NetFlow/sFlow;&nbsp;Ansible/Python, Git.</li> </ul> <p>&nbsp;</p> <p><strong>Qualifications</strong></p> <p><strong>Required</strong></p> <ul> <li>7+ years in&nbsp;enterprise on‑prem networking&nbsp;across&nbsp;multi‑site/multi‑region&nbsp;environments.</li> <li>Deep hands‑on with&nbsp;FortiGate,&nbsp;Aruba&nbsp;(switching/WLAN),&nbsp;Dell&nbsp;data‑center switching, and&nbsp;NVIDIA InfiniBand&nbsp;basics.</li> <li>Strong routing/switching (BGP, OSPF, VLAN, VRF), segmentation, and DMZ design; HA and fast convergence patterns.</li> <li>Proven delivery of&nbsp;secure remote access,&nbsp;802.1X NAC, and&nbsp;logging/monitoring&nbsp;at scale (rsyslog, analyzers, NMS).</li> <li>Experience aligning network controls to&nbsp;ISMS/TISAX&nbsp;(policy ↔ design ↔ evidence).</li> <li>Excellent documentation (HLD/LLD, diagrams) and stakeholder communication.</li> </ul> <p>&nbsp;</p> <p><strong>Preferred</strong></p> <ul> <li>Certifications:&nbsp;Fortinet NSE (4/5/7+), Aruba (ACMA/ACMP/ACSP/ACDX), CCNP/CCIE, Dell networking, and/or&nbsp;NVIDIA networking.</li> <li>ClearPass NAC depth, FortiManager/FortiAnalyzer, Aruba AirWave; EVPN/VXLAN familiarity.</li> <li>Exposure to&nbsp;RADIUS/AD&nbsp;integration and&nbsp;FreeRADIUS&nbsp;stack.</li> <li>Familiarity with&nbsp;Zabbix&nbsp;tuning, syslog retention strategies, and ITSM/change tooling.</li> <li>Experience segmenting AI/HPC clusters and integrating with storage/compute pipelines.</li> </ul><div class="content-conclusion"><h3 class="TranslationField-module__fieldItemName___Q0F_7 TranslationField-module__aboutUsWrapper___WXJpq"><strong>What we offer</strong></h3> <ul> <li> <div>A dynamic high-tech company, combined with financial soundness and world-class investors.</div> </li> <li> <div>Join an interdisciplinary, international team with 60+ different nationalities in a collaborative work environment.</div> </li> <li> <div>Lots of development opportunities as we continue to grow.</div> </li> <li> <div>Challenging tasks and impactful projects alongside experts that enable professional and personal growth.</div> </li> <li> <div>Corporate Benefits Program covering health, mobility, and learning for 100€ net per month.</div> </li> <li> <div>Modern office facilities with a rooftop terrace overlooking Munich, free drinks &amp; fruits, and regular company events contribute to a good working environment</div> </li> </ul> <h3><strong>About us</strong></h3> <p><strong></strong></p> <p><strong>Agile Robots</strong> is a leading provider of AI-powered robotics solutions. By combining artificial intelligence and robotics, the company makes industries smarter, more flexible, and more efficient.&nbsp;</p> <p>Founded in Munich in 2018 by renowned robotics researchers from the German Aerospace Center (DLR), Agile Robots has experienced rapid global growth. Today, more than 3,500 highly skilled robotics and AI enthusiasts are employed worldwide. The company has one of the largest research and development teams in the AI and robotics industry.&nbsp;</p> <p>Agile Robots has built a unique portfolio, together with the subsidiaries BÄR Automation, Franka Robotics, idealworks, and Krause Automation, the company covers all areas of AI-driven robotics.</p> <p>Find out more at: <a id="menur58p" class="fui-Link ___1q1shib f2hkw1w f3rmtva f1ewtqcl fyind8e f1k6fduh f1w7gpdv fk6fouc fjoy568 figsok6 f1s184ao f1mk8lai fnbmjn9 f1o700av f13mvf36 f1cmlufx f9n3di6 f1ids18y f1tx3yz7 f1deo86v f1eh06m1 f1iescvh fhgqx19 f1olyrje f1p93eir f1nev41a f1h8hb77 f1lqvz6u f10aw75t fsle3fq f17ae5zn" href="https://www.agile-robots.com/en/" target="_blank">https://www.agile-robots.com/en/</a></p></div><p>Find more <a href="https://www.arbeitnow.com/english-speaking-jobs">English Speaking Jobs in Germany</a> on Arbeitnow</a>