Senior Network Design Engineer

Accountabilities

You will transform approved OT security and segmentation architectures into practical technical designs, supporting secure connectivity and successful implementation across industrial environments.

• Translate approved OT security and network segmentation architectures into detailed, implementation-ready network designs.

• Convert defined security zones, segments, and conduits into practical network configurations, including VLANs, subnets, routing, firewall boundaries, and connectivity requirements.

• Develop detailed firewall designs covering interfaces, zones, traffic flows, access rules, protocols, ports, and services.

• Analyze firewall logs and network traffic to identify, understand, and validate OT communication dependencies.

• Translate approved OT IDS architectures into detailed deployment designs, including sensor and collector placement, connectivity, and traffic visibility requirements.

• Define SPAN, TAP, and traffic-mirroring requirements to support effective IDS monitoring.

• Design solutions suitable for brownfield OT and industrial environments, taking existing infrastructure, operational constraints, and dependencies into account.

• Produce comprehensive Low-Level Designs (LLDs) and technical documentation that can be used directly by implementation teams.

• Collaborate with Network Operations, project teams, and local site stakeholders throughout the design and implementation process.

• Support implementation, troubleshooting, and technical validation to ensure deployed network, firewall, and IDS configurations comply with approved architectures and designs.

Requirements

The ideal candidate has extensive IP networking and network design experience, with strong expertise in firewall technologies, industrial network environments, and OT security implementation.

• At least 5 years of relevant experience in IP networking and network design, preferably within OT or industrial environments.

• Strong understanding of IP networking fundamentals, including VLANs, subnetting, routing, and network segmentation.

• Hands-on expertise with firewall technologies, including interfaces and zones, routing, Network Address Translation (NAT), access-control policies, logging, and traffic analysis.

• Experience designing and implementing firewall-based segmentation in brownfield OT environments.

• Practical knowledge of industrial networks, including Purdue architectures, industrial DMZs, and industrial communication protocols.

• Experience with OT IDS technologies and their deployment in industrial network environments.

• Understanding of SPAN, TAP, traffic mirroring, IDS sensors and collectors, and network visibility requirements.

• Strong analytical skills, particularly in interpreting firewall logs, network traffic, and communication flows.

• Good understanding of OT assets, industrial protocols, services, and communication dependencies.

• Ability to translate high-level architecture and security requirements into detailed network, firewall, and IDS designs.

• Strong technical documentation skills, especially in producing Low-Level Designs and implementation-ready network documentation.

• Excellent collaboration and communication skills, with the ability to work effectively across Network Operations, Security Architecture, project teams, and local site stakeholders.

Benefits

• Flexible working arrangements, including remote, office-based, or hybrid options.

• Competitive salary and comprehensive compensation package.

• Personalized career development and growth opportunities.

• Professional development resources, including mentorship programs, technical talks, training sessions, and centers of excellence.

• Active technical communities and regular knowledge-sharing opportunities.

• Education reimbursement to support continuous learning.

• Anniversary gifts and recognition of professional milestones.

• Corporate events and team-building activities.

• Additional benefits depending on the employment location.