Senior Network Design Engineer

N-iX; Kraków; Hybrid; PLN 180,000 - 320,000; Full time

Benefits offered by this job

Flexible working format

Competitive salary

Career growth

Mentorship program

Education reimbursement

Team events

Job summary

N-iX in Kraków is seeking a Senior Network Design Engineer (OT/industrial focus) to translate security architectures into detailed network, firewall and IDS designs across industrial environments. You will collaborate with Network Operations and site stakeholders to ensure secure, resilient OT connectivity.

You will develop LLDs, define zones, and verify implementations, including traffic visibility and IDS deployment. This role demands strong documentation and hands-on design expertise.

Qualifications

• Minimum 5 years in IP networking and network design (OT/industrial preferred).
• Strong knowledge of IP networking, VLANs, subnets, routing and segmentation.
• Hands-on firewall technologies knowledge: zones/interfaces, NAT, policies, logging.
• Experience designing firewall-based segmentation in brownfield OT environments.
• Practical knowledge of OT/industrial networks and Purdue architectures.
• Experience with OT IDS technologies and deployment in industrial networks.
• Understanding SPAN, TAP, traffic mirroring and IDS sensors/collectors.
• Ability to translate architecture and security requirements into detailed designs.
• Strong technical documentation skills, incl. Low-Level Designs.

Responsibilities

• Translate OT security architecture into detailed network designs.
• Define VLANs, subnets, routing, and firewall boundaries.
• Develop firewall designs with interfaces, traffic flows and rules.
• Analyze firewall logs and traffic to validate dependencies.
• Create IDS deployment designs, sensor placement and visibility.
• Specify SPAN/TAP and mirroring requirements for IDS.
• Produce Low-Level Designs and implementable docs.
• Collaborate with Network Operations, Security Architecture, and site teams.
• Support implementation, troubleshooting and validation.

Skills

IP networking

VLANs & Subnets

Routing

Firewall design

IDS technologies

OT networks

Network visibility

Documentation

Job description

We are looking for a Senior Network Design Engineer to join our team! As an OT Network Design Engineer, you will be responsible for translating approved security and segmentation architectures into detailed, implementation-ready network, firewall and IDS designs across industrial environments. Your role will focus on enabling secure and resilient OT connectivity by converting security requirements, zones and conduits into practical network designs, while working closely with Network Operations, project teams and local site stakeholders to support successful implementation.

Responsibilities:

• Translate approved OT security and segmentation architecture into detailed, implementation-ready network designs.
• Translate defined zones, segments and conduits into VLANs, subnets, routing, firewall boundaries and network connectivity.
• Develop detailed firewall designs, including interfaces/zones, traffic flows, rule requirements, protocols, ports and services.
• Analyse firewall logs and network traffic to identify and validate OT communication dependencies.
• Translate approved OT IDS architecture into detailed deployment designs, including sensor/collector placement, connectivity and traffic visibility.
• Define SPAN/TAP and traffic-mirroring requirements required for IDS monitoring.
• Develop detailed designs suitable for brownfield OT/industrial environments, considering existing infrastructure and operational dependencies.
• Produce Low-Level Designs (LLDs) and technical documentation suitable for implementation.
• Work closely with Network Operations, project teams and local site stakeholders during design and implementation.
• Support implementation, troubleshooting and validation to ensure the deployed network, firewall and IDS configurations conform to the approved architecture and design.

Requirements:

• Minimum 5 years of relevant experience in IP networking and network design, preferably including OT/industrial environments.
• Strong knowledge of IP networking, VLANs, subnets, routing and network segmentation.
• Strong hands-on knowledge of firewall technologies, including zones/interfaces, routing, NAT, access-control policies, logging and traffic analysis.
• Experience designing and implementing firewall-based segmentation in brownfield OT environments.
• Practical knowledge of OT/industrial networks, including Purdue architectures, industrial DMZs and industrial protocols.
• Experience with OT IDS technologies and their deployment in industrial networks.
• Understanding of SPAN, TAP, traffic mirroring, IDS sensors/collectors and network visibility requirements.
• Strong ability to analyse firewall logs, network traffic and communication flows.
• Good understanding of OT assets, protocols, services and communication dependencies.
• Ability to translate architecture and security requirements into detailed network, firewall and IDS designs.
• Strong technical documentation skills, particularly Low-Level Designs and implementation-ready network documentation.
• Strong collaboration skills across Network Operations, Security Architecture, project teams and local site stakeholders.

We offer*:

• Flexible working format - remote, office-based or flexible
• A competitive salary and good compensation package
• Personalized career growth
• Professional development tools (mentorship program, tech talks and trainings, centers of excellence, and more)
• Active tech communities with regular knowledge sharing
• Education reimbursement
• Memorable anniversary presents
• Corporate events and team buildings
• Other location-specific benefits
• not applicable for freelancers