Network architect

Our client, a renowned international company is looking for a Network Architect (60%- 100%) based in Zug, Switzerland. Its a contract role.

Core Responsibilities:

• Requirements Engineering:

• Collaborate with internal stakeholders to gather and formalize detailed VLAN and VM requirements.
• Translate functional and non-functional needs into technical specifications.

• Network Migration & Integration:

• Migrate VLANs and virtual machines to our new infrastructure.
• Configure and optimize Cisco/Fortinet switches, firewalls, and routing components.
• Validate post-migration connectivity, security, and performance.

• Security & Hardening:

• Implement hardening measures on firewalls and switches.
• Ensure compliance with Siemens-specific security frameworks.

• Access Control:

• Design and implement 802.1X NAC including MAC-based authentication for legacy/non-802.1X devices.
• Enable secure onboarding and dynamic VLAN assignment.

• Monitoring & Logging:

• Architect and deploy centralized monitoring/logging using Zabbix or similar.
• Define KPIs; set up automated network alerts.

• Infrastructure Automation:

• Develop Infrastructure as Code for automated configuration updates.
• Automation via Ansible, Git workflows, and CI/CD pipelines.

• Architecture & Documentation:

• Deliver and document scalable, secure network designs.
• Provide comprehensive documentation (diagrams, standards, manuals).

Do you have experience in Windows?, + Deep Cisco IOS/NX-OS, Fortinet FortiGate experience.

• Advanced VLAN, VRF, trunking, routing, IPSec VPN skills.
• Solid grasp of OSPF, BGP, Layer 2/3 security.

• Security:

• Proven work in firewall/switch hardening, ACLs, and segmentation.

• Access Control:

• Expertise in 802.1X NAC including MAC-based authentication.

• Monitoring:

• Experience with Zabbix or equivalent for KPI monitoring/alerting.

• Automation & IaC:

• Advanced Ansible, YAML, Git, CI/CD experience.
• Python scripting a strong advantage.

• Operating Systems:

• Strong Linux/Windows Server troubleshooting & scripting.

• Architecture & Design:

• Capable of designing secure/scalable networks; thorough HLD/LLD and operational documentation.

Soft Skills:

• Exceptional communicator.
• Analytical, cool-headed troubleshooting under pressure.
• Able to work independently and deliver to deadlines.
• At least B2-level English (spoken/written). German a plus, but not mandatory.