Description We are looking for a hands-on Senior Network Administrator to design, implement, and operate our enterprise network across multiple international sites. The ideal candidate brings deep expertise in next‑gen firewalls (Fortinet & Cisco Firepower), enterprise switching (Cisco & Juniper), and network automation. You will define network architectures, harden security, streamline operations via scripting, and support site installations with regular travel within Germany. Responsibilities Key Responsibilities Architecture & Design Define scalable, secure LAN/WAN/SD-WAN architectures and standards for global sites Produce high-quality HLD/LLD documentation, network diagrams, IP schemas, and security policies Evaluate and select technologies aligned with performance, security, and cost goals. Build & Implementation Install, configure, and optimize firewalls: Fortinet FortiGate and Cisco Firepower (including FMC, policy objects, IPS/IDS, SSL inspection, HA clustering, SD-WAN) Configure enterprise switches: Cisco Catalyst/Nexus and Juniper EX/QFX (VLANs, STP, LAG/MLAG, VRRP/HSRP, QoS, port-security, 802.1X) Implement site rollouts, migrations, and cutovers with minimal downtime Maintain and configure SASE platform Operation & Security Own Level 3 incident/problem management; perform advanced troubleshooting (packet captures, flow analysis, logs) Maintain firewall and switch gold configs, rule hygiene, and change control (ITIL) Ensure compliance with security baselines, segmentation, and zero-trust principles Monitor capacity/performance and proactively remediate risks Automation & Scripting Build and maintain automation for configuration, compliance checks, and deployments using Python and/or Ansible (e.g., templates, linting, CI/CD pipelines) Develop scripts for backup/restore, inventory, API-based object management (Fortinet/Cisco/Juniper) Collaboration & Governance Work cross-functionally with Workplace, Cloud, Security, and Site Operations teams Support audits and contribute to policy development and continuous improvement Mentor junior engineers; act as technical escalation point Travel Travel to German sites for installations, surveys, and hands-on support (approx. 10–25%, as needed) Qualifications Required Qualifications 5–8 years in enterprise networking with multi-site/global exposure Proven expertise with Fortinet FortiGate and Cisco Firepower (FMC), including policy creation, NAT, VPN (IPsec/SSL), and HA Strong experience with Cisco and Juniper switching (Layer 2/3, routing protocols OSPF/BGP, EVPN/VXLAN nice to have) Solid understanding of network security (segmentation, NAC/802.1X, IDS/IPS, TLS inspection), DNS/DHCP/IPAM, and PKI fundamentals Automation: Proficiency in Python and/or Ansible for network tasks; experience with Git-based workflows Experience operating under ITIL (Change/Incident/Problem) and creating high-quality documentation Excellent communication skills; comfortable in an international environment. Language: Professional German and English are required Certifications (one or more of the following) Fortinet: NSE 4/5/6 (NSE 7 is a plus) Cisco: CCNP Enterprise or CCNP Security (CCIE a plus) Juniper: JNCIS-ENT / JNCIP-ENT (JNCIE a plus) Security: CompTIA Security or CISSP (plus) Nice-to-Have Familiarity with cloud networking (Azure) Exposure to modern NAC (Cisco ISE, Aruba Clearpass), SASE/ZTNA, and wireless (Cisco Meraki, Juniper MistAI ) Observability tools (e.g., SolarWinds, Zabbix, Grafana)