Network Architect and Specialist (m/f/d) onsite

<div class="TranslationField-module__fieldItem___g4pRX"> <h4 class="TokenisedTypography-module__EzGiEkH0__v6-3-8 TranslationField-module__fieldItemName___Q0F_7">About the role</h4> <div>Agile Robots SE is seeking a Network Architect / Network Specialist to define and operate our global on‑premise network across multiple geographies and regional offices. You will lead the design and lifecycle of our campus, branch, and data‑center networks—including high‑performance NVIDIA InfiniBand fabrics that power AI/HPC workloads—while ensuring our controls meet TISAX expectations and internal ISMS requirements</div> </div> <div class="TranslationField-module__fieldItem___g4pRX"> <h4 class="TokenisedTypography-module__EzGiEkH0__v6-3-8 TranslationField-module__fieldItemName___Q0F_7">Your Responsibilities</h4> <p class="TranslationField-module__fieldItemValue___c0djd"><strong>1) Global Architecture &amp; Standards (On‑Site Only)</strong></p> <ul> <li>Design and document end‑to‑end on‑prem architectures (core/distribution/access/WLAN; DC leaf‑spine)</li> <li>Establish and maintain global standards: IP addressing &amp; IPAM (NetBox), routing policy, QoS, naming, security baselines, and change control (HLD/LLD, MOP/SOP, rollback)</li> <li>Define network zoning &amp; segmentation (VLAN/VRF; optional EVPN/VXLAN where justified) across Office and DMZ networks with clear trust boundaries</li> </ul> <strong>2) Routing, Switching, WLAN &amp; Regional Sites</strong><br> <ul> <li>Engineer BGP/OSPF for WAN &amp; DC; deliver redundancy/failover across carriers and sites</li> <li>Own Aruba campus/branch switching and WLAN (coverage, capacity planning, RF hygiene, roaming, WPA2/3‑Enterprise)</li> <li>Plan and execute site builds/moves/expansions (circuits, last‑mile, demarc, handoffs, cutovers) with measurable downtime windows</li> </ul> <strong>3) Security, Remote Access &amp; Identity</strong><br> <ul> <li>Lead FortiGate policy architecture (zones, NAT, segmentation, IDS/IPS) and FortiGate VPN (IPsec/SSL) for site‑to‑site and remote access, including HA and posture checks</li> <li>Implement 802.1X NAC (e.g., Aruba ClearPass) with RADIUS/Active Directory integration; enforce device posture and guest segmentation</li> <li>Operate DMZ patterns (reverse proxying, jump hosts, constrained admin planes) and align with TISAX/ISMS requirements</li> </ul> <strong>4) High‑Performance Networking for AI/HPC</strong><br> <ul> <li>Design, deploy, and maintain&nbsp;NVIDIA InfiniBand&nbsp;fabrics (topology, cabling/optics, partitioning), including subnet managers (<strong>UFM/opensm</strong>), congestion control, a