Network Architect and Specialist; m​/f​/d) onsite Munich, Bavaria, Germany

Network Architect and Specialist (m/f/d) onsite About the role

Agile Robots SE is seeking a Network Architect / Network Specialist to define and operate our global on‑premise network across multiple geographies and regional offices. You will lead the design and lifecycle of our campus, branch, and data‑center networks—including high‑performance NVIDIA Infini Band fabrics that power AI/HPC workloads—while ensuring our controls meet TISAX expectations and internal ISMS requirements

1) Global Architecture & Standards (On‑Site Only)

• Establish and maintain global standards: IP addressing & IPAM (Net Box), routing policy, QoS, naming, security baselines, and change control (HLD/LLD, MOP/SOP, rollback)
• Define network zoning & segmentation (VLAN/VRF; optional EVPN/VXLAN where justified) across Office and DMZ networks with clear trust boundaries

1) Global Architecture & Standards (On‑Site Only)

• Design and document end‑to‑end on‑prem architectures (core/distribution/access/WLAN; DC leaf‑spine)
• Establish and maintain global standards: IP addressing & IPAM (Net Box), routing policy, QoS, naming, security baselines, and change control (HLD/LLD, MOP/SOP, rollback)
• Define network zoning & segmentation (VLAN/VRF; optional EVPN/VXLAN where justified) across Office and DMZ networks with clear trust boundaries

• Engineer BGP/OSPF for WAN & DC; deliver redundancy/failover across carriers and sites
• Own Aruba campus/branch switching and WLAN (coverage, capacity planning, RF hygiene, roaming, WPA2/3‑Enterprise)
• Plan and execute site builds/moves/expansions (circuits, last‑mile, demarc, handoffs, cutovers) with measurable downtime windows

• Lead Forti Gate policy architecture (zones, NAT, segmentation, IDS/IPS) and Forti Gate VPN (IPsec/SSL) for site‑to‑site and remote access, including HA and posture checks
• Implement 802.1X NAC (e.g., Aruba Clear Pass) with RADIUS/Active Directory integration; enforce device posture and guest segmentation
• Operate DMZ patterns (reverse proxying, jump hosts, constrained admin planes) and align with TISAX/ISMS requirements

• Design, deploy, and maintain NVIDIA Infini Band fabrics (topology, cabling/optics, partitioning), including subnet managers (
  UFM/opensm
  ), congestion control, and path optimization
• Coordinate with compute/storage teams (e.g., DGX/HPC clusters) on throughput, latency, and scale; plan upgrades and fabric expansions

• Deliver high availability (fast convergence, dual‑homing, link aggregation/MLAG/VLT) and tested DR/failover
• Implement proactive monitoring/alerting (e.g., Zabbix), telemetry/SNMP, and capacity trends; maintain RCAs and SLOs
• Centralize logging with rsyslog and Forti Analyzer; enforce retention and integrity for audits
• Use Net Box, Ansible/Python, and Git‑based workflows for configuration management, drift control, and repeatable changes

• Map network controls to
  TISAX
  expectations (ISMS governance, secure remote access, logging, supplier access, data protection)
• Partner with ISMS owner/CISO on
  risk assessments, controls testing
  , and
  evidence
  preparation for audits (policies, diagrams, logs, change records)
• Manage
  carriers and vendors
  (Fortinet, Aruba, Dell; integrators); lead RFPs, SLAs, and lifecycle planning
• Mentor regional IT; act as
  L3 escalation
  for incidents and major changes

• Security & Remote Access:
  Forti Gate NGFW, Forti Gate VPN (IPsec/SSL), Forti Manager/Forti Analyzer
• Campus/Branch & WLAN:
  Aruba CX/AOS switching, controllers/APs, Clear Pass (802.1X), Air Wave (on‑prem mgmt)
• Data Center &…