Network Architect and Specialist (m/f/d) On-site

Agile Robots SE; München; On-site; EUR 80,000 - 100,000; Full time

Benefits offered by this job

Corporate Benefits Program (100€ net/month)

Modern office with rooftop terrace

Free drinks and fruits

Regular company events

Job summary

Agile Robots SE in Munich is seeking a Network Architect / Network Specialist to lead the design and operation of their global network infrastructure. This role involves managing campus, branch, and data-center networks, with a focus on NVIDIA InfiniBand for AI and HPC workloads.

Key responsibilities include defining architectural standards, ensuring security compliance, and managing vendor relationships. The ideal candidate will have proven experience in network architecture and relevant certifications.

Qualifications

• Proven experience in network architecture and design.
• Strong understanding of global networking standards.
• Ability to engineer high-performance networks.

Responsibilities

• Define and operate global on-premise networks.
• Lead design lifecycle of branch and data-center networks.
• Implement and manage security and access controls.

Skills

Network architecture design

BGP/OSPF routing

NVIDIA InfiniBand

FortiGate policies

802.1X NAC implementation

High availability design

Education

Relevant certifications (e.g. CCNP, Fortinet)

Tools

FortiGate

Aruba ClearPass

Zabbix

Ansible

Job description

Agile Robots SE is seeking a Network Architect / Network Specialist to define and operate our global on‑premise network across multiple geographies and regional offices. You will lead the design and lifecycle of our campus, branch, and data‑center networks—including high‑performance NVIDIA InfiniBand fabrics that power AI/HPC workloads—while ensuring our controls meet TISAX expectations and internal ISMS requirements.

Your Responsibilities

1) Global Architecture & Standards (On‑Site Only)

• Establish and maintain global standards: IP addressing & IPAM (NetBox), routing policy, QoS, naming, security baselines, and change control (HLD/LLD, MOP/SOP, rollback)
• Define network zoning & segmentation (VLAN/VRF; optional EVPN/VXLAN where justified) across Office and DMZ networks with clear trust boundaries

2) Routing, Switching, WLAN & Regional Sites

• Engineer BGP/OSPF for WAN & DC; deliver redundancy/failover across carriers and sites
• Own Aruba campus/branch switching and WLAN (coverage, capacity planning, RF hygiene, roaming, WPA2/3‑Enterprise)
• Plan and execute site builds/moves/expansions (circuits, last‑mile, demarc, handoffs, cutovers) with measurable downtime windows

3) Security, Remote Access & Identity

• Lead FortiGate policy architecture (zones, NAT, segmentation, IDS/IPS) and FortiGate VPN (IPsec/SSL) for site‑to‑site and remote access, including HA and posture checks
• Implement 802.1X NAC (e.g., Aruba ClearPass) with RADIUS/Active Directory integration; enforce device posture and guest segmentation
• Operate DMZ patterns (reverse proxying, jump hosts, constrained admin planes) and align with TISAX/ISMS requirements

4) High‑Performance Networking for AI/HPC

• Design, deploy, and maintain NVIDIA InfiniBand fabrics (topology, cabling/optics, partitioning), including subnet managers (UFM/opensm), congestion control, and path optimization
• Coordinate with compute/storage teams (e.g., DGX/HPC clusters) on throughput, latency, and scale; plan upgrades and fabric expansions

5) Reliability, Observability & Automation

• Deliver high availability (fast convergence, dual‑homing, link aggregation/MLAG/VLT) and tested DR/failover
• Implement proactive monitoring/alerting (e.g., Zabbix), telemetry/SNMP, and capacity trends; maintain RCAs and SLOs
• Centralize logging with rsyslog and FortiAnalyzer; enforce retention and integrity for audits
• Use NetBox, Ansible/Python, and Git‑based workflows for configuration management, drift control, and repeatable changes
• Map network controls to TISAX expectations (ISMS governance, secure remote access, logging, supplier access, data protection)
• Partner with ISMS owner/CISO on risk assessments, controls testing, and evidence preparation for audits (policies, diagrams, logs, change records)
• Manage carriers and vendors (Fortinet, Aruba, Dell; integrators); lead RFPs, SLAs, and lifecycle planning
• Mentor regional IT; act as L3 escalation for incidents and major changes

Core Technologies @ Agile Robots

• Security & Remote Access: FortiGate NGFW, FortiGate VPN (IPsec/SSL), FortiManager/Forti Analyzer
• Campus/Branch & WLAN: Aruba CX/AOS switching, controllers/APs, ClearPass (802.1X), AirWave (on‑prem mgmt)
• Data Center & Fabric: Dell PowerSwitch (OS10), VLT/MLAG; NVIDIA InfiniBand (UFM/opensm)
• Foundational Services: VLAN/VRF, BGP/OSPF, QoS; DHCP/DNS, Active Directory, RADIUS; NetBox(IPAM/DCIM)
• Observability & Automation: Zabbix, rsyslog (retention policy), NetFlow/sFlow; Ansible/Python, Git
• Deep hands‑on with FortiGate, Aruba (switching/WLAN), Dell data‑center switching, and NVIDIA InfiniBand basics
• Strong routing/switching (BGP, OSPF, VLAN, VRF), segmentation, and DMZ design; HA and fast convergence patterns
• Proven delivery of secure remote access, 802.1X NAC, and logging/monitoring at scale (rsyslog, analyzers, NMS)
• Experience aligning network controls to ISMS/TISAX (policy, design, evidence)
• Excellent documentation (HLD/LLD, diagrams) and stakeholder communication

Beneficial Skills

• Certifications: Fortinet NSE (4/5/7+), Aruba (ACMA/ACMP/ACSP/ACDX), CCNP/CCIE, Dell networking, and/or NVIDIA networking
• Exposure to RADIUS/AD integration and FreeRADIUS stack
• Familiarity with Zabbix tuning, syslog retention strategies, and ITSM/change tooling
• Experience segmenting AI/HPC clusters and integrating with storage/compute pipelines

What we offer

• A dynamic high‑tech company, combined with financial soundness and world‑class investors
• Join an interdisciplinary, international team with 58+ different nationalities in a collaborative work environment
• Lots of development opportunities in the context of our continued growth
• Challenging tasks and impactful projects alongside experts that enable professional and personal growth
• Corporate Benefits Program that covers health, mobility, and learning with 100€ net per month
• Modern office facilities with a rooftop terrace overlooking Munich, free drinks & fruits, and regular company events contribute to a good working environment

We are proud of our diversity and welcome your application regardless of gender and sexual identity, nationality, ethnicity, religion, age, or disability.