Network Architect and Specialist (m/f/d) onsite
Agilerobotsse · Munich, Bavaria
Skills in this posting
Benefits
The posting
About the role
Agile Robots SE is seeking a Network Architect / Network Specialist to define and operate our global on‑premise network across multiple geographies and regional offices. You will lead the design and lifecycle of our campus, branch, and data‑center networks—including high‑performance NVIDIA InfiniBand fabrics that power AI/HPC workloads—while ensuring our controls meet TISAX expectations and internal ISMS requirements
Your Responsibilities
1) Global Architecture & Standards (On‑Site Only)
Design and document end‑to‑end on‑prem architectures (core/distribution/access/WLAN; DC leaf‑spine)
Establish and maintain global standards: IP addressing & IPAM (NetBox), routing policy, QoS, naming, security baselines, and change control (HLD/LLD, MOP/SOP, rollback)
Define network zoning & segmentation (VLAN/VRF; optional EVPN/VXLAN where justified) across Office and DMZ networks with clear trust boundaries
2) Routing, Switching, WLAN & Regional Sites
Engineer BGP/OSPF for WAN & DC; deliver redundancy/failover across carriers and sites
Own Aruba campus/branch switching and WLAN (coverage, capacity planning, RF hygiene, roaming, WPA2/3‑Enterprise)
Plan and execute site builds/moves/expansions (circuits, last‑mile, demarc, handoffs, cutovers) with measurable downtime windows
3) Security, Remote Access & Identity
Lead FortiGate policy architecture (zones, NAT, segmentation, IDS/IPS) and FortiGate VPN (IPsec/SSL) for site‑to‑site and remote access, including HA and posture checks
Implement 802.1X NAC (e.g., Aruba ClearPass) with RADIUS/Active Directory integration; enforce device posture and guest segmentation
Operate DMZ patterns (reverse proxying, jump hosts, constrained admin planes) and align with TISAX/ISMS requirements
4) High‑Performance Networking for AI/HPC
Design, deploy, and maintain NVIDIA InfiniBand fabrics (topology, cabling/optics, partitioning), including subnet managers ( UFM/opensm ), congestion control, and path optimization
Coordinate with compute/storage teams (e.g., DGX/HPC clusters) on throughput, latency, and scale; plan upgrades and fabric expansions
5) Reliability, Observability & Automation
Deliver high availability (fast convergence, dual‑homing, link aggregation/MLAG/VLT) and tested DR/failover
Implement proactive monitoring/alerting (e.g., Zabbix), telemetry/SNMP, and capacity trends; maintain RCAs and SLOs
Centralize logging with rsyslog and FortiAnalyzer; enforce retention and integrity for audits
Use NetBox, Ansible/Python, and Git‑based workflows for configuration management, drift control, and repeatable changes
6) Compliance, Risk & Vendor Management (TISAX Focus)
Map network controls to TISAX expectations (ISMS governance, secure remote access, logging, supplier access, data protection)
Partner with ISMS owner/CISO on risk assessments, controls testing , and evidence preparation for audits (policies, diagrams, logs, change records)
Manage carriers and vendors (Fortinet, Aruba, Dell; integrators); lead RFPs, SLAs, and lifecycle planning
Mentor regional IT; act as L3 escalation for incidents and major changes
Core Technologies @ Agile Robots SE
Security & Remote Access: FortiGate NGFW, FortiGate VPN (IPsec/SSL), FortiManager/FortiAnalyzer
Campus/Branch & WLAN: Aruba CX/AOS switching, controllers/APs, ClearPass (802.1X), AirWave (on‑prem mgmt)
Data Center & Fabric: Dell PowerSwitch (OS10), VLT/MLAG; NVIDIA InfiniBand (UFM/opensm).
Foundational Services: VLAN/VRF, BGP/OSPF, QoS; DHCP/DNS, Active Directory, RADIUS; NetBox(IPAM/DCIM)
Observability & Automation: Zabbix, rsyslog (retention policy), NetFlow/sFlow; Ansible/Python, Git
Essential Skills
7+ years in enterprise on‑prem networking across multi‑site/multi‑region environments
Deep hands‑on with FortiGate, Aruba (switching/WLAN), Dell data‑center switching, and NVIDIA InfiniBand basics
Strong routing/switching (BGP, OSPF, VLAN, VRF), segmentation, and DMZ design; HA and fast convergence patterns
Proven delivery of secure remote access, 802.1X NAC, and logging/monitoring at scale (rsyslog, analyzers, NMS)
Experience aligning network controls to ISMS/TISAX (policy ↔ design ↔ evidence)
Excellent documentation (HLD/LLD, diagrams) and stakeholder communication
Beneficial Skills
Certifications: Fortinet NSE (4/5/7+), Aruba (ACMA/ACMP/ACSP/ACDX), CCNP/CCIE, Dell networking, and/or NVIDIA networking
ClearPass NAC depth, FortiManager/FortiAnalyzer, Aruba AirWave; EVPN/VXLAN familiarity
Exposure to RADIUS/AD integration and FreeRADIUS stack
Familiarity with Zabbix tuning, syslog retention strategies, and ITSM/change tooling
Experience segmenting AI/HPC clusters and integrating with storage/compute pipelines
What we offer
A dynamic high-tech company, combined with financial soundness and world-class investors.
Join an interdisciplinary, international team with 60+ different nationalities in a collaborative work environment.
Lots of development opportunities as we continue to grow.
Challenging tasks and impactful projects alongside experts that enable professional and personal growth.
Corporate Benefits Program covering health, mobility, and learning for 100€ net per month.
Modern office facilities with a rooftop terrace overlooking Munich, free drinks & fruits, and regular company events contribute to a good working environment
About us
Agile Robots SE is an international high-tech company based in Munich, Germany with a production site in Kaufbeuren and more than 3500 employees worldwide.
Our mission is to bridge the gap between artificial intelligence and robotics by developing systems that combine state-of-the-art force-moment-sensing and world-leading image-processing technology. This unique combination of technologies allows us to provide user-friendly and affordable robotic solutions that enable intelligent precision assembly.
This is made possible by our employees, who bring out the best in each and every day with creativity and enthusiasm. Become part of this team and shape the future of robotics with us!
We are proud of our diversity and welcome your application regardless of gender and sexual identity, nationality, ethnicity, religion, age, or disability.
Find more English Speaking Jobs in Germany on Arbeitnow
The PivotHop read
- What a network engineer actually earnsmedian, seniority, by country
- Where network engineers move nextevery measured route out
- Security Engineer → Network Engineer71% readiness
- Systems Administrator → Network Engineer51% readiness
- IT Support Specialist → Network Engineer49% readiness
- All open network engineer rolesthe full board
Where these skills also reach
- 600 open systems administrator roles30% readiness from network engineer
- 562 open security engineer roles23% readiness from network engineer
- 600 open it support specialist roles17% readiness from network engineer
- 40 open penetration tester roles17% readiness from network engineer
More network engineer roles
Network Engineer at PavagoCosta Rica · Remote1d agoApply
Senior Network Engineer, Data Center Operations at Iron MountainAzerbaijan; United States · Remote1d agoApply
Network Engineer at NebiusSingapore · Remote3d agoUnlock
Level 2 Systems and Network Administrator at MagellanToulouse, FR3d agoUnlock
Sr. IT Wireless Network Engineer at SpacexHawthorne, CA$155k–$215k4d agoUnlock
Backfilled listing, refreshed with the nightly scrape; the employer has not claimed it yet. Are you the employer? Claim this listing and it can be featured to the candidates whose skills already reach it, first month free.