Senior Network Designer

ppAs a Senior Network Designer, you are responsible for designing secure, resilient, and scalable network, security, and application delivery solutions across ING’s hybrid infrastructure. You act as a design authority for F5 BIG-IP LTM and GTM/DNS services, AS3-based onboarding models, Palo Alto security solutions, router ACLs, network segmentation, routing, VPN services, leased-line connectivity, and certificate management. /ppYou contribute to cloud migrations, Lifecycle Management (LCM) projects, F5 certificate automation, platform modernization, and the delivery of new network and application delivery capabilities. You translate business and technical requirements into target-state architectures, High-Level Designs, Low-Level Designs, reusable service patterns, and secure connectivity solutions. /ppYou work effectively with engineers, architects, service consumers, security specialists, and management. You combine clear communication with strong conceptual thinking and a structured approach to solution design. You are thorough, detail-oriented, and committed to producing accurate, maintainable, and high-quality architecture documentation.br/ /ppWe are looking for you if you have: /pulliExtensive experience designing enterprise network, security, and application delivery solutions. /liliStrong knowledge of F5 BIG-IP LTM and GTM/DNS technologies and application delivery architectures. /liliExperience designing F5 services, including virtual servers, pools, health monitors, traffic steering, persistence, SSL/TLS, and high-availability solutions. /liliExperience with F5 AS3 and declarative application onboarding models. /liliKnowledge of certificate management, PKI integration, and SSL/TLS certificate lifecycle requirements. /liliExperience designing Palo Alto firewall rulebases, security policies, NAT configurations, security zones, and traffic flows. /liliExperience designing routing solutions, router ACL changes, network segmentation, VPN connectivity, and leased-line services. /liliStrong knowledge of DNS, Infoblox DDI/IPAM, traffic management, resilience, and disaster recovery principles. /liliExperience working in complex hybrid infrastructure environments. /liliThe ability to translate business, security, and technical requirements into scalable and supportable designs. /liliA strong focus on security, availability, resilience, and operational stability. /liliThe ability to work in accordance with ING standards, architecture principles, controls, and governance processes. /liliClear communication skills and experience working in an Agile environment. /li /ulpYou’ll get extra points for: /pulliExperience contributing to F5 certificate automation and automated certificate lifecycle management. /liliExperience designing integrations between F5 platforms, enterprise PKI services, certificate management tooling, and automation platforms. /liliExperience defining reusable AS3 templates and standardized application onboarding models. /liliExperience supporting cloud migration programmes. /liliExperience contributing to Lifecycle Management (LCM) and technology refresh projects. /liliExperience designing Global Server Load Balancing, high-availability, and disaster recovery solutions. /liliExperience developing reusable service patterns, design standards, and reference architectures. /li /ulpYour responsibilities: /pulliDesign secure, resilient, and scalable network, security, DNS, connectivity, and application delivery solutions across ING’s hybrid infrastructure. /liliAct as design authority for F5 BIG-IP LTM and GTM/DNS platforms and related application delivery services. /liliProduce and maintain High-Level Designs, Low-Level Designs, reference architectures, service blueprints, and reusable design patterns. /liliDesign F5 LTM services, including virtual servers, pools, pool members, health monitors, SSL/TLS profiles, traffic steering, load-balancing methods, persistence mechanisms, and Source NAT. /liliDesign F5 GTM/DNS solutions, including Global Server Load Balancing, wide IPs, pools, health monitoring, geographic traffic distribution, failover, and disaster recovery architectures. /liliDefine AS3-based onboarding models, reusable declarations, and standardized service templates for automated application delivery. /liliContribute to F5 certificate automation by defining design requirements, onboarding standards, integration patterns, and certificate lifecycle processes. /liliDesign scalable approaches for certificate issuance, deployment, renewal, replacement, revocation, and retirement on F5 application delivery platforms. /liliDefine integration requirements between F5 platforms, AS3 services, enterprise PKI, certificate management services, and automation tooling. /liliEnsure certificate automation designs support secure key handling, certificate traceability, expiry monitoring, controlled renewal, and operational resilience. /liliDesign Palo Alto firewall solutions, including security rulebases, security policies, NAT configurations, security zones, segmentation, and application traffic flows. /liliReview application connectivity requirements and translate them into appropriate Palo Alto rulebase and NAT design changes. /liliDesign router ACL changes supporting network segmentation, controlled connectivity, infrastructure protection, and application onboarding. /liliDefine end-to-end traffic flows incorporating firewall policies, router ACLs, routing controls, DNS services, load balancing, and security boundaries. /liliDesign site-to-site VPN solutions, leased-line connectivity, partner integrations, inter-datacenter communication, and hybrid infrastructure connectivity. /liliDefine routing changes, route filtering requirements, failover behaviour, network paths, and connectivity models for new business and infrastructure services. /liliAssess the impact of firewall rulebase, NAT, router ACL, routing, VPN, DNS, and application delivery changes on security, availability, and resilience. /liliTranslate business and technical requirements into approved network, security, DNS, certificate management, and application delivery designs. /liliSupport IPC migrations, internal cloud migrations, infrastructure transformations, and application onboarding through solution design and architecture governance. /liliContribute to Lifecycle Management projects by assessing design impacts and defining target-state solutions for platform upgrades and technology refreshes. /liliReview proposed solutions and ensure alignment with ING security standards, resilience requirements, risk controls, and architecture principles. /liliMaintain architecture repositories, design documentation, service standards, decision records, and audit-compliant evidence. /liliEnsure traceability between design deliverables, Azure DevOps epics and user stories, architecture decisions, and ServiceNow change records. /liliProvide architectural guidance during major incident reviews, root cause analysis, and structural service improvement activities. /liliSupport Disaster Recovery (DR) testing activities through architecture validation, design reviews, failover scenario assessments, and periodic Standby Duty participation to ensure resilience and recoverability objectives are met. /liliProvide architectural guidance during major incidents, troubleshooting activities, and service degradation scenarios to support rapid issue identification and resolution. /liliContribute to root cause analysis by evaluating network, security, connectivity, and application delivery designs, identifying structural improvements to enhance platform resilience, availability, and operational stability. /li /ulpYour education and background: /pulliA bachelor’s degree or equivalent professional and intellectual ability in Information Technology. /liliExtensive experience in network architecture, network security, connectivity, and application delivery design. /liliStrong knowledge of F5 BIG-IP LTM, F5 GTM/DNS, AS3, SSL/TLS, and application delivery technologies. /liliKnowledge of PKI, digital certificates, certificate lifecycle management, and certificate automation principles. /liliStrong knowledge of Palo Alto Networks, Panorama, rulebase design, NAT, and security zoning. /liliExperience with routing and switching, router ACLs, VPN technologies, leased-line connectivity, and network segmentation. /liliExperience with DNS, Infoblox DDI/IPAM, high availability, and disaster recovery design. /liliExperience working within Agile delivery organisations and architecture governance processes. /liliExcellent command of spoken and written English. /li /ulpTechnical Environment /ppF5 BIG-IP LTM, F5 BIG-IP GTM/DNS, F5 AS3, GSLB, Virtual Servers, Pools, Health Monitors, SSL/TLS Profiles, Traffic Management, Load Balancing, Persistence, iRules, PKI Integration, Digital Certificates, Certificate Lifecycle Management, F5 Certificate Automation, Palo Alto Networks, Panorama, Palo Alto Security Policies, Rulebase Design, NAT Design, Security Zoning, Router ACL Design, Routing and Switching, Network Segmentation, Site-to-Site VPN, Leased-Line Connectivity, Infoblox DDI/IPAM, DNS, Hybrid Infrastructure Connectivity, Azure DevOps, ServiceNow, Infrastructure as Code, High Availability, Disaster Recovery, and Enterprise Network Security Architecture. /ppStand-by shifts /ppBusiness critical systems, such as client processes, payment processes, software applications and websites, require a 24/7 accessibility and availability of several (groups) of employees to act quickly during unforeseen circumstances, such as calamities or incidents. For these (groups) of employees ING have set up a Stand-by regulation. To compensate for the inconvenience of being available currently, a Stand-by compensation is awarded. If you are designated by your lead for stand-by shifts to be available for incidents outside of your regular working hours, a Stand-by compensation is awarded. /ppbRewards and benefits /bbr/We want to make sure that it’s possible for you to strike the right balance between your career and your private life. Find out more about our employment conditions. /ppThe benefits of working with us at ING include: /pulli25-28 vacation days depending on contract /liliPension scheme /lili13th month salary /lili8% Holiday payment /liliHybrid working /liliPersonal growth and challenging work with endless possibilities /liliAn informal working environment with innovative colleagues /li /ulpbAbout us /bbr/Curious about how ING empowers people and businesses to move forward? /ppDiscover what we do and what we can offer you. /ppbQuestions? /bbr/Please visit our Frequently Asked Questions section to find some answers on questions you might have. /p /p #J-18808-Ljbffr