Senior Network Design Engineer

1 day, 6 hours ago
Full-time
Senior
DevOps and Infrastructure
N-iX

N-iX

N-iX is a global software development company that helps organizations achieve lasting business value through advanced technology solutions, serving various sectors with expertise in cloud, data analytics, and IoT.

Internet Software & Services
1001-5000
Founded 2002

Description

  • Translate OT security and segmentation architectures into detailed network designs.
  • Convert zones, segments, and conduits into VLANs, subnets, routing, firewall boundaries, and connectivity designs.
  • Develop firewall designs covering interfaces, zones, traffic flows, rules, protocols, ports, and services.
  • Analyze firewall logs and network traffic to validate OT communication dependencies.
  • Design OT IDS deployments, including sensor and collector placement, connectivity, and traffic visibility.
  • Define SPAN, TAP, and traffic-mirroring requirements for IDS monitoring.
  • Create designs for brownfield industrial environments that account for existing infrastructure and operational dependencies.
  • Produce implementation-ready Low-Level Designs and technical documentation.
  • Collaborate with Network Operations, project teams, and local site stakeholders during design and implementation.
  • Support implementation, troubleshooting, and validation of deployed network, firewall, and IDS configurations.

Requirements

  • At least 5 years of experience in IP networking and network design, preferably in OT or industrial environments.
  • Strong knowledge of IP networking, VLANs, subnets, routing, and network segmentation.
  • Hands-on knowledge of firewall technologies, including zones, interfaces, routing, NAT, access-control policies, logging, and traffic analysis.
  • Experience designing and implementing firewall-based segmentation in brownfield OT environments.
  • Knowledge of OT and industrial networks, including Purdue architectures, industrial DMZs, and industrial protocols.
  • Experience deploying OT IDS technologies in industrial networks.
  • Understanding of SPAN, TAP, traffic mirroring, IDS sensors and collectors, and network visibility requirements.
  • Ability to analyze firewall logs, network traffic, communication flows, OT assets, protocols, services, and dependencies.
  • Ability to translate security architecture requirements into detailed network, firewall, and IDS designs.
  • Strong Low-Level Design, technical documentation, and cross-functional collaboration skills.

Benefits

  • Flexible remote, office-based, or hybrid working options.
  • Competitive salary and compensation package.
  • Personalized career growth support.
  • Professional development through mentorship, tech talks, training, and centers of excellence.
  • Active technical communities and knowledge-sharing opportunities.
  • Education reimbursement.
  • Anniversary gifts, corporate events, and team-building activities.
  • Additional location-specific benefits.

Interested in this position?

Apply directly on the company website

Apply Now

Similar Roles

Senior Network Engineer

RFA 501-1000 IT Services

Senior Network Engineer at RFA, supporting financial-services clients by designing, implementing, and maintaining secure Cisco and Palo Alto network infrastructure across client and global environments.

Cisco DHCP FTP SSH TLS
9 hours, 7 minutes ago

Cisco Network Architect (CCIE)

Dijital Team 11-50 Internet Software & Services

As a Cisco Network Architect (CCIE) at an established IT consultancy, you will lead the design, modernisation and support of secure, resilient enterprise and service-provider network solutions for customers.

Ansible AWS Azure Fortinet Network Security Python REST API TCP/IP
9 hours, 37 minutes ago

MS Foundry Cloud / Networking Engineer | B2B Contract

HITCONTRACT 11-50 Professional Services

As a Cloud & Network Engineer/Architect, you will build the secure, scalable Azure cloud and network foundation for a production voice-enabled AI assistant connecting AI services, enterprise systems, and customer channels.

Azure DNS Generative AI Load Balancing Network Security Terraform WebSockets
2 days, 9 hours ago

HPE Aruba Networking ClearPass / NAC Specialist

Dijital Team 11-50 Internet Software & Services

Lead the design, implementation, and handover of enterprise HPE Aruba ClearPass and Network Access Control solutions for a specialist technology services provider supporting customers across Australia and the South Pacific.

Cybersecurity SIEM
2 days, 9 hours ago

You're on a roll! Sign up now to keep applying.

Sign Up

Already have an account? Log in

Used by 14,729+ remote workers