Network architect

Our client, a renowned international company  is looking for a Network Architect (60%- 100%)  based in  Zug, Switzerland. Its a contract role.
 
Core Responsibilities:
 

• Requirements Engineering:
  • Collaborate with internal stakeholders to gather and formalize detailed VLAN and VM requirements.
  • Translate functional and non-functional needs into technical specifications.

• Network Migration & Integration:
  • Migrate VLANs and virtual machines to our new infrastructure.
  • Configure and optimize Cisco/Fortinet switches, firewalls, and routing components.
  • Validate post-migration connectivity, security, and performance.

• Security & Hardening:
  • Implement hardening measures on firewalls and switches.
  • Ensure compliance with Siemens-specific security frameworks.

• Access Control:
  • Design and implement 802.1X NAC including MAC-based authentication for legacy/non-802.1X devices.
  • Enable secure onboarding and dynamic VLAN assignment.

• Monitoring & Logging:
  • Architect and deploy centralized monitoring/logging using Zabbix or similar.
  • Define KPIs; set up automated network alerts.

• Infrastructure Automation:
  • Develop Infrastructure as Code for automated configuration updates.
  • Automation via Ansible, Git workflows, and CI/CD pipelines.

• Architecture & Documentation:
  • Deliver and document scalable, secure network designs.
  • Provide comprehensive documentation (diagrams, standards, manuals).
•  

Required Technical Expertise:

• Networking:
  • Deep Cisco IOS/NX-OS, Fortinet FortiGate experience.
  • Advanced VLAN, VRF, trunking, routing, IPSec VPN skills.
  • Solid grasp of OSPF, BGP, Layer 2/3 security.

• Security:
  • Proven work in firewall/switch hardening, ACLs, and segmentation.

• Access Control:
  • Expertise in 802.1X NAC including MAC-based authentication.

• Monitoring:
  • Experience with Zabbix or equivalent for KPI monitoring/alerting.

• Automation & IaC:
  • Advanced Ansible, YAML, Git, CI/CD experience.
  • Python scripting a strong advantage.

• Operating Systems:
  • Strong Linux/Windows Server troubleshooting & scripting.

• Architecture & Design:
  • Capable of designing secure/scalable networks; thorough HLD/LLD and operational documentation.
•  

Soft Skills:

• Exceptional communicator.
• Analytical, cool-headed troubleshooting under pressure.
• Able to work independently and deliver to deadlines.
• At least B2-level English (spoken/written). German a plus, but not mandatory.

Its an urgent role and we have a deadline to submit the candidates. So apply soon!