Senior Network Design Engineer

Wwshemi; Polska; Híbrido; PLN 180.000 - 240.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Flexible work format

Competitive salary

Career growth

Mentorship program

Tech talks

Training centers

Education reimbursement

Anniversary presents

Team events

Descripción de la vacante

Wwshemi is seeking a Senior Network Design Engineer to translate OT security architecture into detailed, implementation-ready network designs, including VLANs, subnets, routing and segmentation. You will define SPAN/TAP and traffic-mirroring for IDS visibility and develop LLDs and documentation for deployment.

You will collaborate with Network Operations, Security Architecture and local site teams during design and implementation, and provide hands-on support to verify that firewall, IDS and

Formación

• Minimum 5 years of IP networking and network design experience, preferably in OT/industrial environments.
• Strong knowledge of IP networking, VLANs, subnets, routing and segmentation.
• Hands-on firewall design and policy, NAT, logging and traffic analysis.

Responsabilidades

• Translate OT security and segmentation architecture into detailed, implementation-ready network designs.
• Define zones, interfaces, routing, NAT, and firewall boundaries for VLANs and connectivity.
• Develop firewall designs including interfaces/zones, traffic flows, rule requirements, and services.
• Analyse firewall logs and network traffic to validate OT communication dependencies.
• Translate OT IDS architecture into deployment designs: sensor/collector placement and connectivity.
• Define SPAN/TAP requirements for IDS monitoring and traffic visibility.
• Create low-level designs suitable for brownfield OT environments and document them.
• Collaborate with Network Operations, project teams and site stakeholders during design and implementation.
• Support implementation, troubleshooting and validation to ensure configurations conform to the architecture.

Conocimientos

IP networking

VLANs and subnets

Routing

Firewall design

Network segmentation

OT/industrial networks

IDS deployment

SPAN/TAP and traffic mirroring

LLD and technical documentation

Collaborative teamwork

Descripción del empleo

We are looking for a Senior Network Design Engineer to join our team!

Responsibilities:

• Translate approved OT security and segmentation architecture into detailed, implementation-ready network designs.
• Translate defined zones, segments and conduits into VLANs, subnets, routing, firewall boundaries and network connectivity.
• Develop detailed firewall designs, including interfaces/zones, traffic flows, rule requirements, protocols, ports and services.
• Analyse firewall logs and network traffic to identify and validate OT communication dependencies.
• Translate approved OT IDS architecture into detailed deployment designs, including sensor/collector placement, connectivity and traffic visibility.
• Define SPAN/TAP and traffic-mirroring requirements required for IDS monitoring.
• Develop detailed designs suitable for brownfield OT/industrial environments, considering existing infrastructure and operational dependencies.
• Produce Low-Level Designs (LLDs) and technical documentation suitable for implementation.
• Work closely with Network Operations, project teams and local site stakeholders during design and implementation.
• Support implementation, troubleshooting and validation to ensure the deployed network, firewall and IDS configurations conform to the approved architecture and design.

Requirements:

• Minimum 5 years of relevant experience in IP networking and network design, preferably including OT/industrial environments.
• Strong knowledge of IP networking, VLANs, subnets, routing and network segmentation.
• Strong hands‑on knowledge of firewall technologies, including zones/interfaces, routing, NAT, access‑control policies, logging and traffic analysis.
• Experience designing and implementing firewall‑based segmentation in brownfield OT environments.
• Practical knowledge of OT/industrial networks, including Purdue architectures, industrial DMZs and industrial protocols.
• Experience with OT IDS technologies and their deployment in industrial networks.
• Understanding of SPAN, TAP, traffic mirroring, IDS sensors/collectors and network visibility requirements.
• Strong ability to analyse firewall logs, network traffic and communication flows.
• Good understanding of OT assets, protocols, services and communication dependencies.
• Ability to translate architecture and security requirements into detailed network, firewall and IDS designs.
• Strong technical documentation skills, particularly Low‑Level Designs and implementation‑ready network documentation.
• Strong collaboration skills across Network Operations, Security Architecture, project teams and local site stakeholders.

We offer*:

• Flexible working format - remote, office-based or flexible
• A competitive salary and good compensation package
• Personalized career growth
• Professional development tools (mentorship program, tech talks and trainings, centers of excellence, and more)
• Active tech communities with regular knowledge sharing
• Education reimbursement
• Memorable anniversary presents
• Corporate events and team buildings
• Other location‑specific benefits

*not applicable for freelancers