Network Architect and Specialist (m/f/d) onsite

Agilerobotsse; München; On-site; EUR 90,000 - 130,000; Full time

Benefits offered by this job

Corporate Benefits Program

Diverse international team

Professional growth opportunities

Munich office with terrace and events

Job summary

Agile Robots SE in Munich seeks a Network Architect / Network Specialist to define and operate our global on-prem network across offices and data centers. You will design end-to-end architectures, manage IPAM, routing, security, and high‑performance fabric integration for AI/HPC workloads.

You will lead global standards, implement 802.1X NAC, FortiGate policy architecture, and ensure TISAX/ISMS alignment while coordinating with compute, storage, and security teams to deliver scalable, secure

Qualifications

• 7+ years in enterprise on-prem networking across multi-site/multi-region environments.
• Hands-on with FortiGate, Aruba switching/WLAN, Dell data-center switching, and NVIDIA InfiniBand basics.
• Strong routing/switching (BGP, OSPF, VLAN, VRF), segmentation, and DMZ design; HA and fast convergence.
• Proven delivery of secure remote access, 802.1X NAC, and logging/monitoring at scale.
• Experience aligning network controls to ISMS/TISAX (policy design evidence).

Responsibilities

• Design and document end-to-end on-prem architectures (core/distribution/access/WAN).
• Establish and maintain global standards: IP addressing, IPAM, routing policy, QoS, naming, security baselines.
• Define network zoning and segmentation across Office and DMZ networks with trust boundaries.
• Engineer BGP/OSPF for WAN & DC; deliver redundancy/failover across carriers and sites.
• Lead FortiGate policy architecture and VPN for site-to-site and remote access; ensure compliance.
• Design NVIDIA InfiniBand fabrics including topology, cabling, and subnet management; coordinate with HPC teams.
• Deliver high availability, monitoring, logging, and NetBox/Ansible-based change control.

Skills

Enterprise on-prem networking

BGP/OSPF routing

DMZ design

Documentation (HLD/LLD)

Stakeholder communication

Tools

FortiGate NGFW

Aruba switching/WLAN

Dell PowerSwitch OS10

NVIDIA InfiniBand

NetBox IPAM

Job description

About the role

Agile Robots SE is seeking a Network Architect / Network Specialist to define and operate our global on‑premise network across multiple geographies and regional offices. You will lead the design and lifecycle of our campus, branch, and data‑center networks—including high‑performance NVIDIA InfiniBand fabrics that power AI/HPC workloads—while ensuring our controls meet TISAX expectations and internal ISMS requirements

Your Responsibilities

1) Global Architecture & Standards (On‑Site Only)

• Design and document end‑to‑end on‑prem architectures (core/distribution/access/WLAN; DC leaf‑spine)
• Establish and maintain global standards: IP addressing & IPAM (NetBox), routing policy, QoS, naming, security baselines, and change control (HLD/LLD, MOP/SOP, rollback)
• Define network zoning & segmentation (VLAN/VRF; optional EVPN/VXLAN where justified) across Office and DMZ networks with clear trust boundaries

2) Routing, Switching, WLAN & Regional Sites

• Engineer BGP/OSPF for WAN & DC; deliver redundancy/failover across carriers and sites
• Own Aruba campus/branch switching and WLAN (coverage, capacity planning, RF hygiene, roaming, WPA2/3‑Enterprise)
• Plan and execute site builds/moves/expansions (circuits, last‑mile, demarc, handoffs, cutovers) with measurable downtime windows

3) Security, Remote Access & Identity

• Lead FortiGate policy architecture (zones, NAT, segmentation, IDS/IPS) and FortiGate VPN (IPsec/SSL) for site‑to‑site and remote access, including HA and posture checks
• Implement 802.1X NAC (e.g., Aruba ClearPass) with RADIUS/Active Directory integration; enforce device posture and guest segmentation
• Operate DMZ patterns (reverse proxying, jump hosts, constrained admin planes) and align with TISAX/ISMS requirements

4) High‑Performance Networking for AI/HPC

• Design, deploy, and maintainNVIDIA InfiniBandfabrics (topology, cabling/optics, partitioning), including subnet managers (UFM/opensm), congestion control, and path optimization
• Coordinate with compute/storage teams (e.g., DGX/HPC clusters) on throughput, latency, and scale; plan upgrades and fabric expansions

5) Reliability, Observability & Automation

• Deliver high availability (fast convergence, dual‑homing, link aggregation/MLAG/VLT) and tested DR/failover
• Implement proactive monitoring/alerting (e.g., Zabbix), telemetry/SNMP, and capacity trends; maintain RCAs and SLOs
• Centralize logging with rsyslog and FortiAnalyzer; enforce retention and integrity for audits
• Use NetBox, Ansible/Python, and Git‑based workflows for configuration management, drift control, and repeatable changes

6) Compliance, Risk & Vendor Management (TISAX Focus)

• Map network controls toTISAXexpectations (ISMS governance, secure remote access, logging, supplier access, data protection)
• Partner with ISMS owner/CISO onrisk assessments, controls testing, andevidencepreparation for audits (policies, diagrams, logs, change records)
• Managecarriers and vendors(Fortinet, Aruba, Dell; integrators); lead RFPs, SLAs, and lifecycle planning
• Mentor regional IT; act asL3 escalationfor incidents and major changes

Core Technologies @ Agile Robots SE

• Security & Remote Access: FortiGate NGFW, FortiGate VPN (IPsec/SSL), FortiManager/FortiAnalyzer
• Campus/Branch & WLAN: Aruba CX/AOS switching, controllers/APs, ClearPass (802.1X), AirWave (on‑prem mgmt)
• Data Center & Fabric:Dell PowerSwitch (OS10), VLT/MLAG;NVIDIA InfiniBand(UFM/opensm).
• Foundational Services: VLAN/VRF, BGP/OSPF, QoS; DHCP/DNS, Active Directory, RADIUS; NetBox(IPAM/DCIM)
• Observability & Automation: Zabbix, rsyslog (retention policy), NetFlow/sFlow; Ansible/Python, Git

Essential Skills

• 7+ years in enterprise on‑prem networking across multi‑site/multi‑region environments
• Deep hands‑on with FortiGate, Aruba (switching/WLAN), Dell data‑center switching, and NVIDIA InfiniBand basics
• Strong routing/switching (BGP, OSPF, VLAN, VRF), segmentation, and DMZ design; HA and fast convergence patterns
• Proven delivery of secure remote access, 802.1X NAC, and logging/monitoring at scale (rsyslog, analyzers, NMS)
• Experience aligning network controls to ISMS/TISAX (policy design evidence)
• Excellent documentation (HLD/LLD, diagrams) and stakeholder communication

Beneficial Skills

• Certifications: Fortinet NSE (4/5/7+), Aruba (ACMA/ACMP/ACSP/ACDX), CCNP/CCIE, Dell networking, and/or NVIDIA networking
• ClearPass NAC depth, FortiManager/FortiAnalyzer, Aruba AirWave; EVPN/VXLAN familiarity
• Exposure to RADIUS/AD integration and FreeRADIUS stack
• Familiarity with Zabbix tuning, syslog retention strategies, and ITSM/change tooling
• Experience segmenting AI/HPC clusters and integrating with storage/compute pipelines

What we offer

• A dynamic high-tech company, combined with financial soundness and world‑class investors.
• Join an interdisciplinary, international team with 60+ different nationalities in a collaborative work environment.
• Lots of development opportunities as we continue to grow.
• Challenging tasks and impactful projects alongside experts that enable professional and personal growth.
• Corporate Benefits Program covering health, mobility, and learning for 100€ net per month.
• Modern office facilities with a rooftop terrace overlooking Munich, free drinks & fruits, and regular company events contribute to a good working environment

About us

Agile Robots SE is an international high-tech company based in Munich, Germany with a production site in Kaufbeuren and more than 3500 employees worldwide. Our mission is to bridge the gap between artificial intelligence and robotics by developing systems that combine state‑of‑the‑art force‑moment‑sensing and world‑leading image‑processing technology. This unique combination of technologies allows us to provide user‑friendly and affordable robotic solutions that enable intelligent precision assembly.

This is made possible by our employees, who bring out the best in each and every day with creativity and enthusiasm. Become part of this team and shape the future of robotics with us!

We are proud of our diversity and welcome your application regardless of gender and sexual identity, nationality, ethnicity, religion, age, or disability.