Senior Network Design Engineer

Jobgether; Schweiz; Hybrid; CHF 120,000 - 180,000; Full time

Benefits offered by this job

Remote/hybrid options

Competitive salary

Career development opportunities

Mentorship programs

Knowledge-sharing events

Education reimbursement

Anniversary gifts

Team-building activities

Location-dependent benefits

Job summary

Partner Company in Switzerland seeks a Senior Network Design Engineer to translate OT security architectures into detailed network, firewall, and IDS designs for industrial environments.

You will design VLANs, subnets, zones, NAT rules, and SPAN/TAP configurations, producing Low-Level Designs for implementation and collaborating with Network Operations and site stakeholders to ensure secure, reliable connectivity across brownfield systems.

Qualifications

• Minimum 5 years in IP networking and network design, OT/industrial environments preferred.
• Strong firewall knowledge: interfaces, zones, NAT, ACLs, logging, traffic analysis.

Responsibilities

• Translate OT security architectures into detailed network designs and configurations.
• Define VLANs, subnets, routing, firewall boundaries, and connectivity.
• Create detailed firewall designs and IDS deployment plans.
• Analyze firewall logs and traffic to verify OT dependencies.
• Specify SPAN, TAP, and traffic mirroring for IDS monitoring.
• Produce Low-Level Designs and implementation-ready documentation.
• Collaborate with Network Operations, project teams, and site stakeholders.
• Support implementation, validation, and troubleshooting to ensure compliant configurations.

Skills

IP networking

Network design

Firewall technologies

OT security

Industrial networks

IDS deployment

Technical documentation

Collaboration

Tools

Firewalls (NAT, ACLs)

IDS sensors & collectors

SPAN/TAP/Traffic mirroring

Job description

This position is listed on behalf of a partner company, who manages all applications and next steps. Our partner is looking for a Senior Network Design Engineer based in Switzerland.

Join a technical team supporting a worldwide leader in automotive safety systems, where secure and resilient industrial connectivity is essential. As a Senior Network Design Engineer, you will translate approved Operational Technology (OT) security architectures into detailed, implementation-ready network, firewall, and intrusion detection system (IDS) designs. You will work across complex industrial environments, including brownfield infrastructure, ensuring that security requirements align with operational needs. The role combines advanced IP networking, firewall segmentation, traffic analysis, and industrial network visibility. Working closely with Network Operations, Security Architecture, project teams, and local site stakeholders, you will help ensure successful implementation and reliable network performance. This is an opportunity to contribute your expertise to critical industrial systems while working in a flexible and collaborative environment.

Accountabilities

You will transform approved OT security and segmentation architectures into practical technical designs, supporting secure connectivity and successful implementation across industrial environments.

• Translate approved OT security and network segmentation architectures into detailed, implementation-ready network designs.

• Convert defined security zones, segments, and conduits into practical network configurations, including VLANs, subnets, routing, firewall boundaries, and connectivity requirements.

• Develop detailed firewall designs covering interfaces, zones, traffic flows, access rules, protocols, ports, and services.

• Analyze firewall logs and network traffic to identify, understand, and validate OT communication dependencies.

• Translate approved OT IDS architectures into detailed deployment designs, including sensor and collector placement, connectivity, and traffic visibility requirements.

• Define SPAN, TAP, and traffic-mirroring requirements to support effective IDS monitoring.

• Design solutions suitable for brownfield OT and industrial environments, taking existing infrastructure, operational constraints, and dependencies into account.

• Produce comprehensive Low-Level Designs (LLDs) and technical documentation that can be used directly by implementation teams.

• Collaborate with Network Operations, project teams, and local site stakeholders throughout the design and implementation process.

• Support implementation, troubleshooting, and technical validation to ensure deployed network, firewall, and IDS configurations comply with approved architectures and designs.

Requirements

The ideal candidate has extensive IP networking and network design experience, with strong expertise in firewall technologies, industrial network environments, and OT security implementation.

• At least 5 years of relevant experience in IP networking and network design, preferably within OT or industrial environments.

• Strong understanding of IP networking fundamentals, including VLANs, subnetting, routing, and network segmentation.

• Hands-on expertise with firewall technologies, including interfaces and zones, routing, Network Address Translation (NAT), access-control policies, logging, and traffic analysis.

• Experience designing and implementing firewall-based segmentation in brownfield OT environments.

• Practical knowledge of industrial networks, including Purdue architectures, industrial DMZs, and industrial communication protocols.

• Experience with OT IDS technologies and their deployment in industrial network environments.

• Understanding of SPAN, TAP, traffic mirroring, IDS sensors and collectors, and network visibility requirements.

• Strong analytical skills, particularly in interpreting firewall logs, network traffic, and communication flows.

• Good understanding of OT assets, industrial protocols, services, and communication dependencies.

• Ability to translate high-level architecture and security requirements into detailed network, firewall, and IDS designs.

• Strong technical documentation skills, especially in producing Low-Level Designs and implementation-ready network documentation.

• Excellent collaboration and communication skills, with the ability to work effectively across Network Operations, Security Architecture, project teams, and local site stakeholders.

Benefits

• Flexible working arrangements, including remote, office-based, or hybrid options.

• Competitive salary and comprehensive compensation package.

• Personalized career development and growth opportunities.

• Professional development resources, including mentorship programs, technical talks, training sessions, and centers of excellence.

• Active technical communities and regular knowledge-sharing opportunities.

• Education reimbursement to support continuous learning.

• Anniversary gifts and recognition of professional milestones.

• Corporate events and team-building activities.

• Additional benefits depending on the employment location.