Job
- Level
- Senior
- Job Field
- IT, Network
- Employment Type
- Full Time
- Contract Type
- Permanent employment
- Location
- Munich
- Working Model
- Onsite
Job Summary
In this role, you design and operate global network infrastructures, including high-performance NVIDIA InfiniBand architectures, while ensuring compliance with security and control requirements.
Job Technologies
Your role in the team
- Agile Robots SE is seeking a Network Architect / Network Specialist to define and operate our global on-premise network across multiple geographies and regional offices.
- You will lead the design and lifecycle of our campus, branch, and data-center networks—including high-performance NVIDIA InfiniBand fabrics that power AI/HPC workloads—while ensuring our controls meet TISAX expectations and internal ISMS requirements.
- Design and document end-to-end on-prem architectures (core/distribution/access/WLAN; DC leaf-spine).
- Establish and maintain global standards: IP addressing & IPAM (NetBox), routing policy, QoS, naming conventions, security baselines, and change control (HLD/LLD, MOP/SOP, rollback).
- Define network zoning & segmentation (VLAN/VRF; optional EVPN/VXLAN where justified) across Office and DMZ networks with clear trust boundaries.
- Engineer BGP/OSPF for WAN & DC; deliver redundancy/failover across carriers and sites.
- Own Aruba campus/branch switching and WLAN (coverage, capacity planning, RF hygiene, roaming, WPA2/3-Enterprise).
- Planen und Durchführen von Standortaufbauten - Umzügen - Erweiterungen (Schaltungen, Lastmile, Demark, Übergaben, Cutovers) mit messbaren Ausfallzeitenfenstern.
- Lead FortiGate policy architecture (zones, NAT, segmentation, IDS/IPS) and FortiGate VPN (IPsec/SSL) for site-to-site and remote access, including HA and posture checks.
- Implement 802.1X NAC (e.g., Aruba ClearPass) with RADIUS/Active Directory integration; enforce device posture and guest segmentation.
- Operate DMZ patterns (reverse proxying, jump hosts, constrained admin planes) and align with TISAX/ISMS requirements.
- Design, deploy, and maintain NVIDIA InfiniBand fabrics (topology, cabling/optics, partitioning), including subnet managers (UFM/opensm), congestion control, and path optimization.
- Coordinate with compute/storage teams (e.g., DGX/HPC clusters) on throughput, latency, and scale; plan upgrades and fabric expansions.
- Lieferung hoher Verfügbarkeit (schnelle Konvergenz, Dual-Homing, Link Aggregation/MLAG/VLT) und getestete DR/Failover.
- Implement proactive monitoring/alerting (e.g., Zabbix), telemetry/SNMP, and capacity trends; maintain RCAs and SLOs.
- Centralize logging with rsyslog and FortiAnalyzer; enforce retention and integrity for audits.
- Use NetBox, Ansible/Python, and Git-based workflows for configuration management, drift control, and repeatable changes.
- Map network controls to TISAX expectations (ISMS governance, secure remote access, logging, supplier access, data protection).
- Partner with ISMS owner/CISO on risk assessments, controls testing, and evidence preparation for audits (policies, diagrams, logs, change records).
- Manage carriers and vendors (Fortinet, Aruba, Dell; integrators); lead RFPs, SLAs, and lifecycle planning.
- Mentor for regional IT; act as L3 escalation for incidents and major changes.
This text has been machine translated. Show original
Our expectations of you
Qualifications
- Deep hands-on with FortiGate, Aruba (switching/WLAN), Dell data-center switching, and NVIDIA InfiniBand basics.
- Strong routing/switching (BGP, OSPF, VLAN, VRF), segmentation, and DMZ design; HA and fast convergence patterns.
- Proven delivery of secure remote access, 802.1X NAC, and logging/monitoring at scale (rsyslog, analyzers, NMS).
- Excellent documentation (HLD/LLD, diagrams) and stakeholder communication.
- Certifications: Fortinet NSE (4/5/7+), Aruba (ACMA/ACMP/ACSP/ACDX), CCNP/CCIE, Dell networking, and/or NVIDIA networking.
- ClearPass NAC depth, FortiManager/FortiAnalyzer, Aruba AirWave; EVPN/VXLAN familiarity.
- Exposure to RADIUS/AD integration and FreeRADIUS stack.
- Vertrautheit mit Zabbix-Tuning, Syslog-Aufbewahrungsstrategien und ITSM/Change-Tools.
Experience
- 7+ years in enterprise on-prem networking across multi-site/multi-region environments.
- Experience in aligning network controls with ISMS/TISAX (policy design, evidence).
- Experience in segmenting AI/HPC clusters and integrating with storage/compute pipelines.
This text has been machine translated. Show original
What we offer
- A dynamic high-tech company combined with financial soundness and world-class investors.
- Join an interdisciplinary, international team with 60+ different nationalities in a collaborative work environment.
- Lots of development opportunities in the context of our continued growth.
- Challenging tasks and impactful projects alongside experts that enable professional and personal growth.
- Corporate Benefits Program that covers health, mobility, and learning with 100€ net per month.
- Modern office facilities with a rooftop terrace overlooking Munich, free drinks & fruits, and regular company events contribute to a good working environment.
This text has been machine translated. Show original
Benefits
Health, Fitness & Fun
Work-Life-Integration
Topics that you deal with on the job
Job Locations
This is your employer
Agile Robots Ag
Agile Robots SE, founded by leading robotics researchers, focuses on the development of AI-controlled robots and has established itself as a pioneer in automation.
Description
- Company Type
- Established Company
- Working Model
- Onsite
- Industry
- Electronics, Automatization
Network Architect and Specialist
- Location
- Munich
- Working Model
- Onsite
- Diversity
- Open for all genders
- English Only
- English only required
