Network Architect / Network Specialist (On‐Prem, Global)

Free resume; München; Híbrido; EUR 72.000 - 90.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Corporate Benefits Program

Modern Munich office environment

International team and diverse culture

Development opportunities

Descripción de la vacante

Agile Robots SE seeks a Network Architect to define and operate our global on‑prem network, including NVIDIA InfiniBand fabrics for AI/HPC workloads. You will lead global standards, security zoning, and site builds across offices, ensuring ISMS/TISAX alignment and high availability.

You will own routing/switching, WLAN, and remote access architectures, with responsibilities for routing (BGP/OSPF), VACs, and DMZ patterns. Collaboration with ISMS and vendors is essential for audits.

Formación

• Deep hands-on with FortiGate, Aruba, Dell data-center switching and NVIDIA InfiniBand basics.
• Strong routing/switching (BGP, OSPF), segmentation, and DMZ design; HA and fast convergence patterns.
• Proven delivery of secure remote access, 802.1X NAC, and logging/monitoring at scale (rsyslog, analyzers, NMS).
• Experience aligning network controls to ISMS/TISAX (policy design evidence).
• Excellent documentation (HLD/LLD, diagrams) and stakeholder communication.

Responsabilidades

• Global architecture development and standardization for on‑prem networks across geographies.
• Engineer routing, switching, WLAN for campus, branch and DC sites with high availability.
• Lead FortiGate policy architecture, VPNs, NAT, and posture checks.
• Coordinate with compute/storage teams on AI/HPC fabric integration (NVIDIA InfiniBand).
• Drive reliability, observability, and automation using NetBox, Ansible, Python, and Git.

Conocimientos

FortiGate expertise

Aruba switching & WLAN

Dell data-center switching

NVIDIA InfiniBand

BGP/OSPF routing

Network design & segmentation

ISMS/TISAX alignment

HLD/LLD diagrams

Security monitoring & logging

Ansible/Python scripting

Git workflows

Herramientas

NetBox

FortiManager/FortiAnalyzer

rsyslog

Zabbix

Ansible

Python

Git

Descripción del empleo

Job Description

Position Overview

Agile Robots SE is seeking a Network Architect / Network Specialist to define and operate our global on‑premise network across multiple geographies and regional offices. You will lead the design and lifecycle of our campus, branch, and data‑center networks—including high‑performance NVIDIA InfiniBand fabrics that power AI/HPC workloads—while ensuring our controls meet TISAX expectations and internal ISMS requirements.

Key Responsibilities

1) Global Architecture & Standards (On‑Prem Only)

• Establish and maintain global standards: IP addressing & IPAM (NetBox), routing policy, QoS, naming, security baselines, and change control (HLD/LLD, MOP/SOP, rollback).
• Define network zoning & segmentation (VLAN/VRF; optional EVPN/VXLAN where justified) across Officeand DMZ networks with clear trust boundaries.

2) Routing, Switching, WLAN & Regional Sites

• Engineer BGP/OSPF for WAN & DC; deliver redundancy/failover across carriers and sites.
• Own Aruba campus/branch switching and WLAN (coverage, capacity planning, RF hygiene, roaming, WPA2/3‑Enterprise).
• Plan and execute site builds/moves/expansions (circuits, last‑mile, demarc, handoffs, cutovers) with measurable downtime windows.

3) Security, Remote Access & Identity

• Lead FortiGate policy architecture (zones, NAT, segmentation, IDS/IPS) and FortiGate VPN (IPsec/SSL) for site‑to‑site and remote access, including HA and posture checks.
• Implement 802.1X NAC (e.g., Aruba ClearPass) with RADIUS/Active Directory integration; enforce device posture and guest segmentation.
• Operate DMZ patterns (reverse proxying, jump hosts, constrained admin planes) and align with TISAX/ISMSrequirements.

4) High‑Performance Networking for AI/HPC

• Design, deploy, and maintain NVIDIA InfiniBand fabrics (topology, cabling/optics, partitioning), including subnet managers (UFM/opensm), congestion control, and path optimization.
• Coordinate with compute/storage teams (e.g., DGX/HPC clusters) on throughput, latency, and scale; plan upgrades and fabric expansions.

5) Reliability, Observability & Automation

• Deliver high availability (fast convergence, dual‑homing, link aggregation/MLAG/VLT) and tested DR/failover.
• Implement proactive monitoring/alerting (e.g., Zabbix), telemetry/SNMP, and capacity trends; maintain RCAs and SLOs.
• Centralize logging with rsyslog and FortiAnalyzer; enforce retention and integrity for audits.
• Use NetBox, Ansible/Python, and Git‑based workflows for configuration management, drift control, and repeatable changes.
• Map network controls to TISAX expectations (ISMS governance, secure remote access, logging, supplier access, data protection).
• Partner with ISMS owner/CISO on risk assessments, controls testing, and evidence preparation for audits (policies, diagrams, logs, change records).
• Manage carriers and vendors (Fortinet, Aruba, Dell; integrators); lead RFPs, SLAs, and lifecycle planning.
• Mentor regional IT; act as L3 escalation for incidents and major changes.

Core Technologies @ Agile Robots SE

• Security & Remote Access: FortiGate NGFW, FortiGate VPN (IPsec/SSL), FortiManager/FortiAnalyzer.
• Campus/Branch & WLAN: Aruba CX/AOS switching, controllers/APs, ClearPass (802.1X), AirWave (on‑prem mgmt).
• Data Center & Fabric: Dell PowerSwitch (OS10), VLT/MLAG; NVIDIA InfiniBand (UFM/opensm).
• Foundational Services: VLAN/VRF, BGP/OSPF, QoS; DHCP/DNS, Active Directory, RADIUS; NetBox(IPAM/DCIM).
• Observability & Automation: Zabbix, rsyslog (retention policy), NetFlow/sFlow; Ansible/Python, Git.

Qualifications

Required

• Deep hands‑on with FortiGate, Aruba (switching/WLAN), Dell data‑center switching, and NVIDIA InfiniBand basics.
• Strong routing/switching (BGP, OSPF, VLAN, VRF), segmentation, and DMZ design; HA and fast convergence patterns.
• Proven delivery of secure remote access, 802.1X NAC, and logging/monitoring at scale (rsyslog, analyzers, NMS).
• Experience aligning network controls to ISMS/TISAX (policy design evidence).
• Excellent documentation (HLD/LLD, diagrams) and stakeholder communication.

Preferred

• Certifications: Fortinet NSE (4/5/7+), Aruba (ACMA/ACMP/ACSP/ACDX), CCNP/CCIE, Dell networking, and/or NVIDIA networking.
• Exposure to RADIUS/AD integration and FreeRADIUS stack.
• Familiarity with Zabbix tuning, syslog retention strategies, and ITSM/change tooling.
• Experience segmenting AI/HPC clusters and integrating with storage/compute pipelines.

What we offer

A dynamic high-tech company, combined with financial soundness and world‑class investors.

Join an interdisciplinary, international team with 60+ different nationalities in a collaborative work environment.

Lots of development opportunities as we continue to grow.

Challenging tasks and impactful projects alongside experts that enable professional and personal growth.

Corporate Benefits Program covering health, mobility, and learning for 100€ net per month.

Modern office facilities with a rooftop terrace overlooking Munich, free drinks & fruits, and regular company events contribute to a good working environment

About us

Agile Robots is a leading provider of AI-powered robotics solutions. By combining artificial intelligence and robotics, the company makes industries smarter, more flexible, and more efficient.

Founded in Munich in 2018 by renowned robotics researchers from the German Aerospace Center (DLR), Agile Robots has experienced rapid global growth. Today, more than 3,500 highly skilled robotics and AI enthusiasts are employed worldwide. The company has one of the largest research and development teams in the AI and robotics industry.

Agile Robots has built a unique portfolio, together with the subsidiaries BÄR Automation, Franka Robotics, idealworks, and Krause Automation, the company covers all areas of AI-driven robotics.

Remote full-time en 80,000–100,000 USD/yr