Senior Network Design Engineer

We are looking for a Senior Network Design Engineer to join our team!

As an OT Network Design Engineer, you will be responsible for translating approved security and segmentation architectures into detailed, implementation-ready network, firewall and IDS designs across industrial environments. Your role will focus on enabling secure and resilient OT connectivity by converting security requirements, zones and conduits into practical network designs, while working closely with Network Operations, project teams and local site stakeholders to support successful implementation.

Responsibilities:

• Translate approved OT security and segmentation architecture into detailed, implementation-ready network designs.
• Translate defined zones, segments and conduits into VLANs, subnets, routing, firewall boundaries and network connectivity.
• Develop detailed firewall designs, including interfaces/zones, traffic flows, rule requirements, protocols, ports and services.
• Analyse firewall logs and network traffic to identify and validate OT communication dependencies.
• Translate approved OT IDS architecture into detailed deployment designs, including sensor/collector placement, connectivity and traffic visibility.
• Define SPAN/TAP and traffic-mirroring requirements required for IDS monitoring.
• Develop detailed designs suitable for brownfield OT/industrial environments, considering existing infrastructure and operational dependencies.
• Produce Low-Level Designs (LLDs) and technical documentation suitable for implementation.
• Work closely with Network Operations, project teams and local site stakeholders during design and implementation.
• Support implementation, troubleshooting and validation to ensure the deployed network, firewall and IDS configurations conform to the approved architecture and design.

Requirements:

• Minimum 5 years of relevant experience in IP networking and network design, preferably including OT/industrial environments.
• Strong knowledge of IP networking, VLANs, subnets, routing and network segmentation.
• Strong hands-on knowledge of firewall technologies, including zones/interfaces, routing, NAT, access-control policies, logging and traffic analysis.
• Experience designing and implementing firewall-based segmentation in brownfield OT environments.
• Practical knowledge of OT/industrial networks, including Purdue architectures, industrial DMZs and industrial protocols.
• Experience with OT IDS technologies and their deployment in industrial networks.
• Understanding of SPAN, TAP, traffic mirroring, IDS sensors/collectors and network visibility requirements.
• Strong ability to analyse firewall logs, network traffic and communication flows.
• Good understanding of OT assets, protocols, services and communication dependencies.
• Ability to translate architecture and security requirements into detailed network, firewall and IDS designs.
• Strong technical documentation skills, particularly Low-Level Designs and implementation-ready network documentation.
• Strong collaboration skills across Network Operations, Security Architecture, project teams and local site stakeholders.