Network Architect / Network Specialist (On‑Prem, Global)

<p>&nbsp;</p> <p><strong>Position Overview</strong></p> <p>Agile Robots SE is seeking a&nbsp;Network Architect / Network Specialist&nbsp;to define and operate our&nbsp;global on‑premise network&nbsp;across multiple geographies and regional offices. You will lead the design and lifecycle of our&nbsp;campus, branch, and data‑center&nbsp;networks—including&nbsp;high‑performance NVIDIA InfiniBand fabrics&nbsp;that power AI/HPC workloads—while ensuring our controls meet&nbsp;TISAX&nbsp;expectations and internal ISMS requirements.</p> <hr> <p><strong>Key Responsibilities</strong></p> <p><strong>1) Global Architecture &amp; Standards (On‑Prem Only)</strong></p> <ul> <li>Design and document&nbsp;end‑to‑end on‑prem architectures&nbsp;(core/distribution/access/WLAN; DC leaf‑spine).</li> <li>Establish and maintain&nbsp;global standards: IP addressing &amp;&nbsp;IPAM (NetBox), routing policy, QoS, naming, security baselines, and&nbsp;change control&nbsp;(HLD/LLD, MOP/SOP, rollback).</li> <li>Define&nbsp;network zoning &amp; segmentation&nbsp;(VLAN/VRF; optional EVPN/VXLAN where justified) across&nbsp;Officeand&nbsp;DMZ&nbsp;networks with clear trust boundaries.</li> </ul> <p><strong>2) Routing, Switching, WLAN &amp; Regional Sites</strong></p> <ul> <li>Engineer&nbsp;BGP/OSPF&nbsp;for WAN &amp; DC; deliver&nbsp;redundancy/failover&nbsp;across carriers and sites.</li> <li>Own&nbsp;Aruba&nbsp;campus/branch switching and WLAN (coverage, capacity planning, RF hygiene, roaming, WPA2/3‑Enterprise).</li> <li>Plan and execute&nbsp;site builds/moves/expansions&nbsp;(circuits, last‑mile, demarc, handoffs, cutovers) with measurable downtime windows.</li> </ul> <p><strong>3) Security, Remote Access &amp; Identity</strong></p> <ul> <li>Lead&nbsp;FortiGate&nbsp;policy architecture (zones, NAT, segmentation, IDS/IPS) and&nbsp;FortiGate VPN&nbsp;(IPsec/SSL) for site‑to‑site and remote access, including HA and posture checks.</li> <li>Implement&nbsp;802.1X NAC&nbsp;(e.g., Aruba ClearPass) with&nbsp;RADIUS/Active Directory&nbsp;integration; enforce device posture and guest segmentation.</li> <li>Operate&nbsp;DMZ&nbsp;patterns (reverse proxying, jump hosts, constrained admin planes) and align with&nbsp;TISAX/ISMSrequirements.</li> </ul> <p><strong>4) High‑Performance Networking for AI/HPC</strong></p> <ul> <li>Design, deploy, and maintain&nbsp;NVIDIA InfiniBand&nbsp;fabrics (topology, cabling/optics, partitioning), including subnet managers (<strong>UFM/op