Senior Network Design Engineer

N-iX; Województwo mazowieckie; Hybrid; PLN 180,000 - 240,000; Full time

Benefits offered by this job

Flexible work options

Education reimbursement

Career growth

Team events

Job summary

N-iX is seeking a Senior Network Design Engineer to translate security architectures into detailed OT network, firewall and IDS designs across industrial environments. You will work with site stakeholders to enable secure OT connectivity and implement architecture.

You will define zones, VLANs, NAT and run traffic analysis, develop LLDs, and support deployment and validation to ensure compliance with the approved design.

Qualifications

• Minimum 5 years in IP networking and network design, preferably OT.
• Strong knowledge of IP networking, VLANs, subnets and routing.
• Hands-on firewall experience including NAT and access-control policies.
• Experience with OT/industrial networks and Purdue architectures.

Responsibilities

• Translate OT security architecture into detailed network designs.
• Define VLANs, subnets, routing, and firewall boundaries.
• Develop firewall designs with interfaces, zones, and rules.
• Analyze firewall logs and traffic to verify dependencies.
• Translate OT IDS architecture into deployment designs.
• Define SPAN/TAP and traffic mirroring for IDS.
• Create Low-Level Designs and implementation documentation.
• Collaborate with Network Operations and site stakeholders.
• Support implementation and validation of configurations.
• Ensure designs align with approved architecture.

Skills

IP networking

Network design

Firewall technologies

OT/industrial networks

IDS deployment

LAN/WAN segmentation

VLANs and subnets

Low-Level Design

Technical documentation

Collaboration

Tools

Firewall platforms

SPAN/TAP configuration

IDS deployment tools

Network monitoring tools

Job description

We are looking for a Senior Network Design Engineer to join our team! As an OT Network Design Engineer, you will be responsible for translating approved security and segmentation architectures into detailed, implementation-ready network, firewall and IDS designs across industrial environments. Your role will focus on enabling secure and resilient OT connectivity by converting security requirements, zones and conduits into practical network designs, while working closely with Network Operations, project teams and local site stakeholders to support successful implementation.

Responsibilities:

• Translate approved OT security and segmentation architecture into detailed, implementation-ready network designs.
• Translate defined zones, segments and conduits into VLANs, subnets, routing, firewall boundaries and network connectivity.
• Develop detailed firewall designs, including interfaces/zones, traffic flows, rule requirements, protocols, ports and services.
• Analyse firewall logs and network traffic to identify and validate OT communication dependencies.
• Translate approved OT IDS architecture into detailed deployment designs, including sensor/collector placement, connectivity and traffic visibility.
• Define SPAN/TAP and traffic-mirroring requirements required for IDS monitoring.
• Develop detailed designs suitable for brownfield OT/industrial environments, considering existing infrastructure and operational dependencies.
• Produce Low-Level Designs (LLDs) and technical documentation suitable for implementation.
• Work closely with Network Operations, project teams and local site stakeholders during design and implementation.
• Support implementation, troubleshooting and validation to ensure the deployed network, firewall and IDS configurations conform to the approved architecture and design.

Requirements:

• Minimum 5 years of relevant experience in IP networking and network design, preferably including OT/industrial environments.
• Strong knowledge of IP networking, VLANs, subnets, routing and network segmentation.
• Strong hands-on knowledge of firewall technologies, including zones/interfaces, routing, NAT, access-control policies, logging and traffic analysis.
• Experience designing and implementing firewall-based segmentation in brownfield OT environments.
• Practical knowledge of OT/industrial networks, including Purdue architectures, industrial DMZs and industrial protocols.
• Experience with OT IDS technologies and their deployment in industrial networks.
• Understanding of SPAN, TAP, traffic mirroring, IDS sensors/collectors and network visibility requirements.
• Strong ability to analyse firewall logs, network traffic and communication flows.
• Good understanding of OT assets, protocols, services and communication dependencies.
• Ability to translate architecture and security requirements into detailed network, firewall and IDS designs.
• Strong technical documentation skills, particularly Low-Level Designs and implementation-ready network documentation.
• Strong collaboration skills across Network Operations, Security Architecture, project teams and local site stakeholders.

We offer*:

• Flexible working format - remote, office-based or flexible
• A competitive salary and good compensation package
• Personalized career growth
• Professional development tools (mentorship program, tech talks and trainings, centers of excellence, and more)
• Active tech communities with regular knowledge sharing
• Education reimbursement
• Memorable anniversary presents
• Corporate events and team buildings
• Other location-specific benefits
• not applicable for freelancers