Network Architect and Specialist (m/f/d) onsite

Responsibilities

We are representing a confidential high-tech manufacturing organization in Munich seeking an experienced Network Architect to define and operate their global on-premise network infrastructure across multiple geographies and regional offices. You will lead the design and lifecycle of campus, branch, and data-center networks—including high-performance fabrics that power AI and HPC workloads—while ensuring controls meet TISAX expectations and internal ISMS requirements.

Global Architecture & Standards (On-Site Only)

• Design and document end-to-end on-premises architectures including core/distribution/access/WLAN and DC leaf-spine
• Establish and maintain global standards for IP addressing and IPAM, routing policy, QoS, naming conventions, security baselines, and change control with HLD/LLD documentation
• Define network zoning and segmentation across Office and DMZ networks with clear trust boundaries

Routing, Switching, WLAN & Regional Sites

• Engineer BGP/OSPF for WAN and data center; deliver redundancy and failover across carriers and sites
• Own Aruba campus/branch switching and WLAN including coverage, capacity planning, RF hygiene, roaming, and enterprise authentication
• Plan and execute site builds, moves, and expansions with measurable downtime windows

Security, Remote Access & Identity

• Lead FortiGate policy architecture including zones, NAT, segmentation, IDS/IPS, and VPN (IPsec/SSL) for site-to-site and remote access with HA and posture checks
• Implement 802.1X NAC with RADIUS/Active Directory integration; enforce device posture and guest segmentation
• Operate DMZ patterns including reverse proxying and jump hosts aligned with TISAX/ISMS requirements

High-Performance Networking for AI/HPC

• Design, deploy, and maintain NVIDIA InfiniBand fabrics including topology, cabling/optics, partitioning, subnet managers, congestion control, and path optimization
• Coordinate with compute/storage teams on throughput, latency, and scale; plan upgrades and fabric expansions

Reliability, Observability & Automation

• Deliver high availability with fast convergence, dual-homing, link aggregation, and tested DR/failover
• Implement proactive monitoring/alerting, telemetry/SNMP, and capacity trends; maintain RCAs and SLOs
• Centralize logging with rsyslog and FortiAnalyzer; enforce retention and integrity for audits
• Use IPAM/DCIM tools, Ansible/Python, and Git-based workflows for configuration management, drift control, and repeatable changes

Compliance, Risk & Vendor Management (TISAX Focus)

• Map network controls to TISAX expectations including ISMS governance, secure remote access, logging, supplier access, and data protection
• Partner with ISMS owner/CISO on risk assessments, controls testing, and evidence preparation for audits
• Manage carriers and vendors; lead RFPs, SLAs, and lifecycle planning
• Mentor regional IT; act as L3 escalation for incidents and major changes

What We're Looking For

Essential Skills

• 7+ years in enterprise on-premises networking across multi-site/multi-region environments
• Deep hands-on experience with FortiGate, Aruba switching/WLAN, Dell data-center switching, and NVIDIA InfiniBand
• Strong routing/switching expertise (BGP, OSPF, VLAN, VRF), segmentation, and DMZ design; HA and fast convergence patterns
• Proven delivery of secure remote access, 802.1X NAC, and logging/monitoring at scale
• Experience aligning network controls to ISMS/TISAX frameworks (policy to design to evidence)
• Excellent documentation skills (HLD/LLD, diagrams) and stakeholder communication

Beneficial Skills

• Certifications: Fortinet NSE (4/5/7+), Aruba (ACMA/ACMP/ACSP/ACDX), CCNP/CCIE, Dell networking, and/or NVIDIA networking
• ClearPass NAC depth, FortiManager/FortiAnalyzer, Aruba AirWave; EVPN/VXLAN familiarity
• Exposure to RADIUS/AD integration
• Familiarity with Zabbix tuning, syslog retention strategies, and ITSM/change tooling
• Experience segmenting AI/HPC clusters and integrating with storage/compute pipelines

Core Technologies in the Environment

• Security & Remote Access: FortiGate NGFW, FortiGate VPN (IPsec/SSL), FortiManager/FortiAnalyzer
• Campus/Branch & WLAN: Aruba CX/AOS switching, controllers/APs, ClearPass (802.1X), AirWave
• Data Center & Fabric: Dell PowerSwitch (OS10), VLT/MLAG; NVIDIA InfiniBand (UFM/opensm)
• Foundational Services: VLAN/VRF, BGP/OSPF, QoS; DHCP/DNS, Active Directory, RADIUS; IPAM/DCIM tools
• Observability & Automation: Zabbix, rsyslog, NetFlow/sFlow; Ansible/Python, Git

How We Work with You

Our talent team at Get A Job.ai will guide you through the entire process. When you apply through our platform, a dedicated recruiter will conduct an initial screening to understand your background and ensure alignment with the role requirements. We will then submit your profile to our client and coordinate all interviews and feedback. Please do not contact the client directly—we serve as your representative throughout the hiring process.

Pay

Compensation details will be discussed during the screening process based on your experience and qualifications.

Equal Employment Opportunity

Get A Job.ai is committed to inclusive hiring practices. We welcome applications from all qualified candidates regardless of gender and sexual identity, nationality, ethnicity, religion, age, or disability.