Network Architect / Network Specialist (On‐Prem, Global)

Academic Key; München; Hybrid; EUR 90,000 - 140,000; Full time

Job summary

Agile Robots SE in Munich, Bavaria, seeks an experienced Network Architect to define and operate our global on‑prem network across multiple geographies. You will lead campus, branch, and data‑center designs, including high‑performance NVIDIA InfiniBand fabrics powering AI / HPC workloads, while ensuring ISMS and TISAX compliance.

Responsibilities include global architecture, security access, reliability, monitoring, and automation.

Qualifications

• 7+ years in enterprise on‑prem networking across multi‑site/multi‑region environments.
• Hands‑on with FortiGate, Aruba (switching/WLAN), Dell data‑center switching, and NVIDIA InfiniBand basics.
• Strong routing/switching (BGP, OSPF, VLAN, VRF), segmentation, and DMZ design; HA and fast convergence patterns.
• Proven delivery of secure remote access, 802.1X NAC, and logging/monitoring at scale (rsyslog, analyzers, NMS).
• Experience aligning network controls to ISMS/TISAX (policy design evidence).
• Excellent documentation (HLD/LLD, diagrams) and stakeholder communication.

Responsibilities

• Global Architecture & Standards (On‑Prem Only): Design and document end‑to‑end on‑prem architectures across Office and DMZ networks with global standards.
• Routing, Switching, WLAN & Regional Sites Engineer: Manage BGP/OSPF across WAN & DC; own Aruba campus/branch switching and WLAN.
• Security, Remote Access & Identity Lead: FortiGate policy architecture and VPN for site‑to‑site and remote access; 802.1X NAC integration.
• High‑Performance Networking for AI/HPC: Design and maintain NVIDIA InfiniBand fabrics for AI/HPC workloads.
• Reliability, Observability & Automation: Implement monitoring (Zabbix), logging (rsyslog), and automation (Ansible, Git) with NetBox.
• Compliance, Risk & Vendor Management: Map controls to TISAX/ISMS; manage vendors and audits; mentor regional IT.

Skills

BGP/OSPF

FortiGate firewall

Aruba switching/WLAN

NVIDIA InfiniBand

LAN/WAN design

Networking documentation

Zabbix monitoring

NetBox IPAM

Tools

NetBox

Ansible

FortiAnalyzer

rsyslog

Zabbix

Python

Job description

Network Architect / Network Specialist (On‑Prem, Global)

Agilerobotsse · Munich, Bavaria

Abroad

Munich, Bavaria Link validated

Position Overview Agile Robots SE is seeking a Network Architect / Network Specialist to define and operate our global on‑premise network across multiple geographies and regional offices. You will lead the design and lifecycle of our campus, branch, and data‑center networks—including high‑performance NVIDIA InfiniBand fabrics that power AI/HPC workloads—while ensuring our controls meet TISAX expectations and internal ISMS requirements.

Key Responsibilities

• Global Architecture & Standards (On‑Prem Only): Design and document end‑to‑end on‑prem architectures (core/distribution/access/WLAN; DC leaf‑spine). Establish and maintain global standards: IP addressing & IPAM (NetBox), routing policy, QoS, naming, security baselines, and change control (HLD/LLD, MOP/SOP, rollback). Define network zoning & segmentation (VLAN/VRF; optional EVPN/VXLAN where justified) across Office and DMZ networks with clear trust boundaries.
• Routing, Switching, WLAN & Regional Sites Engineer: BGP/OSPF for WAN & DC; deliver redundancy/failover across carriers and sites. Own Aruba campus/branch switching and WLAN (coverage, capacity planning, RF hygiene, roaming, WPA2/3-Enterprise). Plan and execute site builds/moves/expansions (circuits, last‑mile, demarc, handoffs, cutovers) with measurable downtime windows.
• Security, Remote Access & Identity Lead: FortiGate policy architecture (zones, NAT, segmentation, IDS/IPS) and FortiGate VPN (IPsec/SSL) for site‑to‑site and remote access, including HA and posture checks. Implement 802.1X NAC (e.g., Aruba ClearPass) with RADIUS/Active Directory integration; enforce device posture and guest segmentation. Operate DMZ patterns (reverse proxying, jump hosts, constrained admin planes) and align with TISAX/ISMS requirements.
• High‑Performance Networking for AI/HPC: Design, deploy, and maintain NVIDIA InfiniBand fabrics (topology, cabling/optics, partitioning), including subnet managers (UFM/opensm), congestion control, and path optimization. Coordinate with compute/storage teams (e.g., DGX/HPC clusters) on throughput, latency, and scale; plan upgrades and fabric expansions.
• Reliability, Observability & Automation: Deliver high availability (fast convergence, dual‑homing, link aggregation/MLAG/VLT) and tested DR/failover. Implement proactive monitoring/alerting (e.g., Zabbix), telemetry/SNMP, and capacity trends; maintain RCAs and SLOs. Centralize logging with rsyslog and FortiAnalyzer; enforce retention and integrity for audits. Use NetBox, Ansible/Python, and Git‑based workflows for configuration management, drift control, and repeatable changes.
• Compliance, Risk & Vendor Management (TISAX Focus): Map network controls to TISAX expectations (ISMS governance, secure remote access, logging, supplier access, data protection). Partner with ISMS owner/CISO on risk assessments, controls testing, and evidence preparation for audits (policies, diagrams, logs, change records). Manage carriers and vendors (Fortinet, Aruba, Dell; integrators); lead RFPs, SLAs, and lifecycle planning. Mentor regional IT; act as L3 escalation for incidents and major changes.

Qualifications Required

• 7+ years in enterprise on‑prem networking across multi‑site/multi‑region environments.
• Deep hands‑on with FortiGate, Aruba (switching/WLAN), Dell data‑center switching, and NVIDIA InfiniBand basics.
• Strong routing/switching (BGP, OSPF, VLAN, VRF), segmentation, and DMZ design; HA and fast convergence patterns.
• Proven delivery of secure remote access, 802.1X NAC, and logging/monitoring at scale (rsyslog, analyzers, NMS).
• Experience aligning network controls to ISMS/TISAX (policy design evidence).
• Excellent documentation (HLD/LLD, diagrams) and stakeholder communication.

Preferred Certifications

• Fortinet NSE (4/5/7+)
• Aruba (ACMA/ACMP/ACSP/ACDX)
• CCNP/CCIE
• Dell networking
• and/or NVIDIA networking
• ClearPass NAC depth, FortiManager/FortiAnalyzer, Aruba AirWave; EVPN

Core Technologies @ Agile Robots SE

• Security & Remote Access: FortiGate NGFW, FortiGate VPN (IPsec/SSL), FortiManager/FortiAnalyzer.
• Campus/Branch & WLAN: Aruba CX/AOS switching, controllers/APs, ClearPass (802.1X), AirWave (on‑prem mgmt).
• Data Center & Fabric: Dell PowerSwitch (OS10), VLT/MLAG; NVIDIA InfiniBand (UFM/opensm).
• Foundational Services: VLAN/VRF, BGP/OSPF, QoS; DHCP/DNS, Active Directory, RADIUS; NetBox(IPAM/DCIM).
• Observability & Automation: Zabbix, rsyslog (retention policy), NetFlow/sFlow; Ansible/Python, Git.