Network Administrator (m/f/d)

We are looking for a hands-on Senior Network Administrator to design, implement, and operate our enterprise network across multiple international sites. The ideal candidate brings deep expertise in next‑gen firewalls (Fortinet & Cisco Firepower), enterprise switching (Cisco & Juniper), and network automation. You will define network architectures, harden security, streamline operations via scripting, and support site installations with regular travel within Germany. Die SYNLAB Gruppe ist der führende Anbieter von Labordienstleistungen in Europa. Das Unternehmen bietet die gesamte Bandbreite innovativer und zuverlässiger medizinischer Diagnostik für Patienten, niedergelassene Ärzte, Krankenhäuser und die pharmazeutische Industrie an. SYNLAB ist in über 20 Ländern auf vier Kontinenten aktiv und nimmt in den meisten Märkten eine führende Position ein. Zum Erfolg der Unternehmensgruppe tragen täglich über 24.000 Mitarbeiter bei. Bei uns zählen Ihre Qualifikationen und Ihre Stärken. Deshalb ist jeder unabhängig von der Herkunft, des Geschlechts, der Religion oder Weltanschauung, einer Behinderung, des Alters oder der sexuellen Identität willkommen! Required Qualifications5–8+ years in enterprise networking with multi-site/global exposureProven expertise with Fortinet FortiGate and Cisco Firepower (FMC), including policy creation, NAT, VPN (IPsec/SSL), and HAStrong experience with Cisco and Juniper switching (Layer 2/3, routing protocols OSPF/BGP, EVPN/VXLAN nice to have)Solid understanding of network security (segmentation, NAC/802.1X, IDS/IPS, TLS inspection), DNS/DHCP/IPAM, and PKI fundamentalsAutomation: Proficiency in Python and/or Ansible for network tasks; experience with Git-based workflowsExperience operating under ITIL (Change/Incident/Problem) and creating high-quality documentationExcellent communication skills; comfortable in an international environment.Language: Professional German and English are requiredCertifications (one or more of the following)Fortinet: NSE 4/5/6 (NSE 7 is a plus)Cisco: CCNP Enterprise or CCNP Security (CCIE a plus)Juniper: JNCIS-ENT / JNCIP-ENT (JNCIE a plus)Security: CompTIA Security+ or CISSP (plus)Nice-to-HaveFamiliarity with cloud networking (Azure)Exposure to modern NAC (Cisco ISE, Aruba Clearpass), SASE/ZTNA, and wireless (Cisco Meraki, Juniper MistAI )Observability tools (e.g., SolarWinds, Zabbix, Grafana)Key ResponsibilitiesArchitecture & DesignDefine scalable, secure LAN/WAN/SD-WAN architectures and standards for global sitesProduce high-quality HLD/LLD documentation, network diagrams, IP schemas, and security policiesEvaluate and select technologies aligned with performance, security, and cost goals.Build & ImplementationInstall, configure, and optimize firewalls: Fortinet FortiGate and Cisco Firepower (including FMC, policy objects, IPS/IDS, SSL inspection, HA clustering, SD-WAN)Configure enterprise switches: Cisco Catalyst/Nexus and Juniper EX/QFX (VLANs, STP, LAG/MLAG, VRRP/HSRP, QoS, port-security, 802.1X)Implement site rollouts, migrations, and cutovers with minimal downtimeMaintain and configure SASE platformOperation & SecurityOwn Level 3 incident/problem management; perform advanced troubleshooting (packet captures, flow analysis, logs)Maintain firewall and switch gold configs, rule hygiene, and change control (ITIL)Ensure compliance with security baselines, segmentation, and zero-trust principlesMonitor capacity/performance and proactively remediate risksAutomation & ScriptingBuild and maintain automation for configuration, compliance checks, and deployments using Python and/or Ansible (e.g., templates, linting, CI/CD pipelines)Develop scripts for backup/restore, inventory, API-based object management (Fortinet/Cisco/Juniper)Collaboration & GovernanceWork cross-functionally with Workplace, Cloud, Security, and Site Operations teamsSupport audits and contribute to policy development and continuous improvementMentor junior engineers; act as technical escalation pointTravelTravel to German sites for installations, surveys, and hands-on support (approx. 10–25%, as needed)VollzeitPosting Date: 2025-11-18