Network Architect / Network Specialist (On‑Prem, Global)

Agile Robots; München; On-site; EUR 90,000 - 130,000; Full time

Benefits offered by this job

Corporate Benefits Program

Modern Munich office with rooftop & on

Job summary

Agile Robots SE is seeking a Network Architect to define and operate our global on-prem network across geographies and offices. You will lead campus, branch, and data-center designs, including high-performance NVIDIA InfiniBand fabric management, while ensuring TISAX and ISMS compliance.

Responsibilities include establishing global standards, managing routing, switching, WLAN, and security architectures, and coordinating with compute/storage teams on throughput and upgrades.

Qualifications

• Deep hands-on with FortiGate, Aruba switching, Dell data-center switching, and NVIDIA InfiniBand basics.
• Strong routing and switching knowledge (BGP, OSPF, VLAN, VRF) with high-availability patterns.
• Proven delivery of secure remote access, 802.1X NAC, and logging/monitoring at scale.
• Experience mapping network controls to ISMS/TISAX policies with documentation.

Responsibilities

• Define global on-prem standards for IP addressing, IPAM (NetBox), routing policy, QoS, naming, security baselines, and change control (HLD/LLD, MOP/SOP, rollback).
• Define network zoning and segmentation across Office and DMZ with clear trust boundaries.
• Engineer BGP/OSPF for WAN and DC with redundancy across carriers and sites.
• Own Aruba campus/branch switching and WLAN (coverage, capacity planning, RF hygiene, roaming, WPA2/3‑Enterprise).
• Plan and execute site builds/moves/expansions (circuits, last-mile, demarc, handoffs, cutovers) with downtime windows.
• Lead FortiGate policy architecture (zones, NAT, segmentation, IDS/IPS) and FortiGate VPN for site-to-site and remote access.
• Implement 802.1X NAC with RADIUS/AD integration; enforce device posture and guest segmentation.
• Operate DMZ patterns and align with ISMS/TISAX requirements.
• Design, deploy, and maintain NVIDIA InfiniBand fabrics (topology, cabling/optics, partitioning) including subnet managers.
• Coordinate with compute/storage teams on throughput, latency, and scale; plan upgrades and fabric expansions.
• Deliver high availability and tested DR/failover; implement monitoring (Zabbix) and logging (rsyslog).
• Centralize logging and use NetBox, Ansible/Python, and Git-based workflows for changes.

Skills

FortiGate

Aruba switching

Dell data-center switching

NVIDIA InfiniBand basics

Routing & switching

HA & fast convergence

802.1X NAC

ISMS/TISAX policy design

Security architecture

Documentation (HLD/LLD)

Tools

FortiGateNGFW

Aruba

Dell PowerSwitch

NVIDIA InfiniBand

NetBox

Ansible

Python

Git

Zabbix

rsyslog

FortiAnalyzer

ClearPass

AirWave

Job description

Position Overview

Agile Robots SE is seeking aNetwork Architect / Network Specialistto define and operate ourglobal on‑premise networkacross multiple geographies and regional offices. You will lead the design and lifecycle of ourcampus, branch, and data‑centernetworks—includinghigh‑performance NVIDIA InfiniBand fabricsthat power AI/HPC workloads—while ensuring our controls meetTISAXexpectations and internal ISMS requirements.

Key Responsibilities

1) Global Architecture & Standards (On‑Prem Only)

• Establish and maintainglobal standards: IP addressing &IPAM (NetBox), routing policy, QoS, naming, security baselines, andchange control(HLD/LLD, MOP/SOP, rollback).


• Definenetwork zoning & segmentation(VLAN/VRF; optional EVPN/VXLAN where justified) acrossOfficeandDMZnetworks with clear trust boundaries.

2) Routing, Switching, WLAN & Regional Sites

• EngineerBGP/OSPFfor WAN & DC; deliverredundancy/failoveracross carriers and sites.


• OwnArubacampus/branch switching and WLAN (coverage, capacity planning, RF hygiene, roaming, WPA2/3‑Enterprise).


• Plan and executesite builds/moves/expansions(circuits, last‑mile, demarc, handoffs, cutovers) with measurable downtime windows.

3) Security, Remote Access & Identity

• LeadFortiGatepolicy architecture (zones, NAT, segmentation, IDS/IPS) andFortiGate VPN(IPsec/SSL) for site‑to‑site and remote access, including HA and posture checks.


• Implement802.1X NAC(e.g., Aruba ClearPass) withRADIUS/Active Directoryintegration; enforce device posture and guest segmentation.


• OperateDMZpatterns (reverse proxying, jump hosts, constrained admin planes) and align withTISAX/ISMSrequirements.

4) High‑Performance Networking for AI/HPC

• Design, deploy, and maintainNVIDIA InfiniBandfabrics (topology, cabling/optics, partitioning), including subnet managers (UFM/opensm), congestion control, and path optimization.


• Coordinate with compute/storage teams (e.g., DGX/HPC clusters) on throughput, latency, and scale; plan upgrades and fabric expansions.

5) Reliability, Observability & Automation

• Deliverhigh availability(fast convergence, dual‑homing, link aggregation/MLAG/VLT) and testedDR/failover.


• Implement proactive monitoring/alerting (e.g.,Zabbix), telemetry/SNMP, andcapacity trends; maintain RCAs and SLOs.


• Centralize logging withrsyslogandFortiAnalyzer; enforce retention and integrity for audits.


• UseNetBox,Ansible/Python, and Git‑based workflows forconfiguration management, drift control, and repeatable changes.


• Map network controls to TISAXexpectations (ISMS governance, secure remote access, logging, supplier access, data protection).


• Partner with ISMS owner/CISO on risk assessments, controls testing, and evidencepreparation for audits (policies, diagrams, logs, change records).


• Manage carriers and vendors(Fortinet, Aruba, Dell; integrators); lead RFPs, SLAs, and lifecycle planning.


• Mentor regional IT; act as L3 escalationfor incidents and major changes.

Core Technologies @ Agile Robots SE

• Security & Remote Access:FortiGateNGFW,FortiGate VPN(IPsec/SSL), FortiManager/FortiAnalyzer.


• Campus/Branch & WLAN:ArubaCX/AOS switching, controllers/APs,ClearPass(802.1X), AirWave (on‑prem mgmt).


• Data Center & Fabric:Dell PowerSwitch (OS10), VLT/MLAG;NVIDIA InfiniBand(UFM/opensm).


• Foundational Services: VLAN/VRF, BGP/OSPF, QoS;DHCP/DNS,Active Directory,RADIUS;NetBox(IPAM/DCIM).


• Observability & Automation:Zabbix,rsyslog(retention policy), NetFlow/sFlow;Ansible/Python, Git.

Qualifications

Required

• Deep hands‑on withFortiGate,Aruba(switching/WLAN),Delldata‑center switching, andNVIDIA InfiniBandbasics.


• Strong routing/switching (BGP, OSPF, VLAN, VRF), segmentation, and DMZ design; HA and fast convergence patterns.


• Proven delivery ofsecure remote access,802.1X NAC, andlogging/monitoringat scale (rsyslog, analyzers, NMS).


• Experience aligning network controls toISMS/TISAX(policy design evidence).


• Excellent documentation (HLD/LLD, diagrams) and stakeholder communication.

Preferred

• Certifications:Fortinet NSE (4/5/7+), Aruba (ACMA/ACMP/ACSP/ACDX), CCNP/CCIE, Dell networking, and/orNVIDIA networking.


• Exposure toRADIUS/ADintegration andFreeRADIUSstack.


• Familiarity withZabbixtuning, syslog retention strategies, and ITSM/change tooling.


• Experience segmenting AI/HPC clusters and integrating with storage/compute pipelines.

What we offer

A dynamic high-tech company, combined with financial soundness and world‑class investors.

Join an interdisciplinary, international team with 60+ different nationalities in a collaborative work environment.

Lots of development opportunities as we continue to grow.

Challenging tasks and impactful projects alongside experts that enable professional and personal growth.

Corporate Benefits Program covering health, mobility, and learning for 100€ net per month.

Modern office facilities with a rooftop terrace overlooking Munich, free drinks & fruits, and regular company events contribute to a good working environment

About us

Agile Robots is a leading provider of AI-powered robotics solutions. By combining artificial intelligence and robotics, the company makes industries smarter, more flexible, and more efficient.

Founded in Munich in 2018 by renowned robotics researchers from the German Aerospace Center (DLR), Agile Robots has experienced rapid global growth. Today, more than 3,500 highly skilled robotics and AI enthusiasts are employed worldwide. The company has one of the largest research and development teams in the AI and robotics industry.

Agile Robots has built a unique portfolio, together with the subsidiaries BÄR Automation, Franka Robotics, idealworks, and Krause Automation, the company covers all areas of AI-driven robotics.