{"id":3282379,"url":"https://alion.io/job/agile-robots-network-architect-network-specialist-on-prem-global","title":"Network Architect / Network Specialist (On‑Prem, Global)","company":{"id":51883,"name":"Agile Robots","domain":"agile-robots.com","url":"https://alion.io/company/agile-robots","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Greenhouse","truth_index":null},"role":"Networking","role_family":"Networking","seniority":"staff","employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Munich, Germany"],"countries":["DE"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":82000,"max_usd":189000,"period":"year","method":"global_role_cell_scaled_by_country","sample_n":202},"experience_years_min":7,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Active Directory","optional":false},{"name":"Agile","optional":false},{"name":"Ansible","optional":false},{"name":"BGP","optional":false},{"name":"Configuration Management","optional":false},{"name":"DHCP","optional":false},{"name":"DNS","optional":false},{"name":"FortiGate","optional":false},{"name":"Git","optional":false},{"name":"HPC","optional":false},{"name":"InfiniBand","optional":false},{"name":"ITSM","optional":false},{"name":"OSPF","optional":false},{"name":"Python","optional":false},{"name":"SLI/SLO/SLA","optional":false},{"name":"VLAN","optional":false},{"name":"VPN","optional":false},{"name":"Zabbix","optional":false}],"status":"live","first_seen_at":"2026-10-09T09:56:46Z","employer_posted_date":"2026-10-26","last_verified_at":"2026-11-03T06:48:00Z","board_verified":true,"closed_at":null,"days_open":24,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":24},"description":"Position Overview\nAgile Robots SE is seeking a Network Architect / Network Specialist to define and operate our global on-premise network across multiple geographies and regional offices. You will lead the design and lifecycle of our campus, branch, and data-center networks-including high-performance NVIDIA InfiniBand fabrics that power AI/HPC workloads-while ensuring our controls meet TISAX expectations and internal ISMS requirements.\nKey Responsibilities\n1) Global Architecture & Standards (On-Prem Only)\nDesign and document end-to-end on-prem architectures (core/distribution/access/WLAN; DC leaf-spine).\nEstablish and maintain global standards: IP addressing & IPAM (NetBox), routing policy, QoS, naming, security baselines, and change control (HLD/LLD, MOP/SOP, rollback).\nDefine network zoning & segmentation (VLAN/VRF; optional EVPN/VXLAN where justified) across Officeand DMZ networks with clear trust boundaries.\n2) Routing, Switching, WLAN & Regional Sites\nEngineer BGP/OSPF for WAN & DC; deliver redundancy/failover across carriers and sites.\nOwn Aruba campus/branch switching and WLAN (coverage, capacity planning, RF hygiene, roaming, WPA2/3-Enterprise).\nPlan and execute site builds/moves/expansions (circuits, last-mile, demarc, handoffs, cutovers) with measurable downtime windows.\n3) Security, Remote Access & Identity\nLead FortiGate policy architecture (zones, NAT, segmentation, IDS/IPS) and FortiGate VPN (IPsec/SSL) for site-to-site and remote access, including HA and posture checks.\nImplement 802.1X NAC (e.g., Aruba ClearPass) with RADIUS/Active Directory integration; enforce device posture and guest segmentation.\nOperate DMZ patterns (reverse proxying, jump hosts, constrained admin planes) and align with TISAX/ISMSrequirements.\n4) High-Performance Networking for AI/HPC\nDesign, deploy, and maintain NVIDIA InfiniBand fabrics (topology, cabling/optics, partitioning), including subnet managers (UFM/opensm), congestion control, and path optimization.\nCoordinate with compute/storage teams (e.g., DGX/HPC clusters) on throughput, latency, and scale; plan upgrades and fabric expansions.\n5) Reliability, Observability & Automation\nDeliver high availability (fast convergence, dual-homing, link aggregation/MLAG/VLT) and tested DR/failover.\nImplement proactive monitoring/alerting (e.g., Zabbix), telemetry/SNMP, and capacity trends; maintain RCAs and SLOs.\nCentralize logging with rsyslog and FortiAnalyzer; enforce retention and integrity for audits.\nUse NetBox, Ansible/Python, and Git-based workflows for configuration management, drift control, and repeatable changes.\n6) Compliance, Risk & Vendor Management (TISAX Focus)\nMap network controls to TISAX expectations (ISMS governance, secure remote access, logging, supplier access, data protection).\nPartner with ISMS owner/CISO on risk assessments, controls testing, and evidence preparation for audits (policies, diagrams, logs, change records).\nManage carriers and vendors (Fortinet, Aruba, Dell; integrators); lead RFPs, SLAs, and lifecycle planning.\nMentor regional IT; act as L3 escalation for incidents and major changes.\nCore Technologies @ Agile Robots SE\nSecurity & Remote Access: FortiGate NGFW, FortiGate VPN (IPsec/SSL), FortiManager/FortiAnalyzer.\nCampus/Branch & WLAN: Aruba CX/AOS switching, controllers/APs, ClearPass (802.1X), AirWave (on-prem mgmt).\nData Center & Fabric: Dell PowerSwitch (OS10), VLT/MLAG; NVIDIA InfiniBand (UFM/opensm).\nFoundational Services: VLAN/VRF, BGP/OSPF, QoS; DHCP/DNS, Active Directory, RADIUS; NetBox(IPAM/DCIM).\nObservability & Automation: Zabbix, rsyslog (retention policy), NetFlow/sFlow; Ansible/Python, Git.\nQualifications\nRequired\n7+ years in enterprise on-prem networking across multi-site/multi-region environments.\nDeep hands-on with FortiGate, Aruba (switching/WLAN), Dell data-center switching, and NVIDIA InfiniBand basics.\nStrong routing/switching (BGP, OSPF, VLAN, VRF), segmentation, and DMZ design; HA and fast convergence patterns.\nProven delivery of secure remote access, 802.1X NAC, and logging/monitoring at scale (rsyslog, analyzers, NMS).\nExperience aligning network controls to ISMS/TISAX (policy ↔ design ↔ evidence).\nExcellent documentation (HLD/LLD, diagrams) and stakeholder communication.\nPreferred\nCertifications: Fortinet NSE (4/5/7+), Aruba (ACMA/ACMP/ACSP/ACDX), CCNP/CCIE, Dell networking, and/or NVIDIA networking.\nClearPass NAC depth, FortiManager/FortiAnalyzer, Aruba AirWave; EVPN/VXLAN familiarity.\nExposure to RADIUS/AD integration and FreeRADIUS stack.\nFamiliarity with Zabbix tuning, syslog retention strategies, and ITSM/change tooling.\nExperience segmenting AI/HPC clusters and integrating with storage/compute pipelines.\nWhat we offer\nA dynamic high-tech company, combined with financial soundness and world-class investors.\n\nJoin an interdisciplinary, international team with 60+ different nationalities in a collaborative work environment.\n\nLots of development opportunities as we continue to grow.\n\nChallenging tasks and impactful projects alongside experts that enable professional and personal growth.\n\nCorporate Benefits Program covering health, mobility, and learning for 100€ net per month.\n\nModern office facilities with a rooftop terrace overlooking Munich, free drinks & fruits, and regular company events contribute to a good working environment\n\nAbout us\nAgile Robots SE is an international high-tech company based in Munich, Germany with a production site in Kaufbeuren and more than 3500 employees worldwide. Our mission is to bridge the gap between artificial intelligence and robotics by developing systems that combine state-of-the-art force-moment-sensing and world-leading image-processing technology. This unique combination of technologies allows us to provide user-friendly and affordable robotic solutions that enable intelligent precision assembly. \nThis is made possible by our employees, who bring out the best in each and every day with creativity and enthusiasm. Become part of this team and shape the future of robotics with us!\nWe are proud of our diversity and welcome your application regardless of gender and sexual identity, nationality, ethnicity, religion, age, or disability.","description_format":"text","description_chars":6189,"description_truncated":false,"requirements":{"experience_years_min":7,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["Company events"],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Artificial Intelligence","Robotics","AI Agents","Humanoid Robots"],"lifecycle":[{"event":"open","at":"2026-10-26T17:04:24Z"}],"visa":[],"liveness":{"score":79,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.882,"p_room":0.9,"age_days":24,"expected_fill_days":40,"reasons":["conf:3","velocity","win:mid"],"computed_at":"2026-11-03T05:54:40Z"},"pay":null,"html_url":"https://alion.io/job/agile-robots-network-architect-network-specialist-on-prem-global","json_url":"https://alion.io/job/agile-robots-network-architect-network-specialist-on-prem-global.json","meta":{"generated_at":"2026-11-03T06:48:23Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":9529,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-04T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":51883},"rest":"https://alion.io/mcp/rest/get_company?id=51883"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fagile-robots-network-architect-network-specialist-on-prem-global"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fagile-robots-network-architect-network-specialist-on-prem-global"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fagile-robots-network-architect-network-specialist-on-prem-global"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/agile-robots-network-architect-network-specialist-on-prem-global\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fagile-robots-network-architect-network-specialist-on-prem-global"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3282379}},{"tool":"search_jobs","arguments":{"company":"agile-robots.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3282379},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}