Description

As a Network Architect and Specialist, you will design and manage a global on-premise network, ensuring high performance and security across various locations. This role involves leading network architecture, implementing robust monitoring systems, and collaborating with teams to optimize network performance.

Requirements

• •7+ years in enterprise on-prem networking
• •Deep hands-on with FortiGate, Aruba, Dell data-center switching, and NVIDIA InfiniBand basics
• •Strong routing/switching (BGP, OSPF, VLAN, VRF)
• •Proven delivery of secure remote access and logging/monitoring at scale
• •Experience aligning network controls to ISMS/TISAX
• •Excellent documentation and stakeholder communication
• •Certifications: Fortinet NSE, Aruba, CCNP/CCIE, Dell networking, and/or NVIDIA networking
• •ClearPass NAC depth and FortiManager/FortiAnalyzer familiarity
• •Exposure to RADIUS/AD integration and FreeRADIUS stack
• •Familiarity with Zabbix tuning and ITSM/change tooling
• •Experience segmenting AI/HPC clusters and integrating with storage/compute pipelines

Tasks

• •Design and operate the global on-premise network across multiple geographies and regional offices
• •Lead the design and lifecycle of campus, branch, and data-center networks
• •Ensure controls meet TISAX expectations and internal ISMS requirements
• •Design and document end-to-end on-prem architectures
• •Establish and maintain global standards for IP addressing and IPAM
• •Define network zoning and segmentation across Office and DMZ networks
• •Engineer BGP/OSPF for WAN and data center, ensuring redundancy and failover
• •Manage Aruba campus and branch switching and WLAN
• •Plan and execute site builds, moves, and expansions with measurable downtime
• •Lead FortiGate policy architecture and VPN for site-to-site and remote access
• •Implement 802.1X NAC with RADIUS and Active Directory integration
• •Operate DMZ patterns and align with TISAX and ISMS requirements
• •Design, deploy, and maintain NVIDIA InfiniBand fabrics
• •Coordinate with compute and storage teams on throughput and latency
• •Deliver high availability and tested disaster recovery solutions
• •Implement proactive monitoring and alerting systems
• •Centralize logging and enforce retention for audits
• •Use NetBox, Ansible/Python, and Git-based workflows for configuration management
• •Map network controls to TISAX expectations
• •Partner with ISMS owner on risk assessments and controls testing
• •Manage carriers and vendors, leading RFPs and lifecycle planning
• •Mentor regional IT and act as L3 escalation for incidents

Tools & Technologies

Benefits