Impress employers and recruiters.
Choose from hundreds of resume examples.
Impress employers and recruiters.
Choose from hundreds of resume examples.
Target Resume Now
Tailor your resume to this Senior Network Designer role.
Rezi rewrites your resume against ING's job description. Free.
Tailor your resume to this Senior Network Designer role.
Rezi rewrites your resume against ING's job description. Free.
Don't guess if your resume is good enough.
See how it scores against the Senior Network Designer posting at ING — free, in seconds.
Don't guess if your resume is good enough.
See how it scores against the Senior Network Designer posting at ING — free, in seconds.
About the Role
As a Senior Network Designer, you will design secure, resilient, and scalable network, security, and application delivery solutions across ING's hybrid infrastructure. You will act as a design authority for F5 BIG-IP LTM and GTM/DNS services, AS3-based onboarding models, Palo Alto security solutions, and various network components. You will contribute to cloud migrations, platform modernization, and the delivery of new capabilities, translating requirements into target-state architectures and designs.
Responsibilities
- Design secure, resilient, and scalable network, security, DNS, connectivity, and application delivery solutions across ING's hybrid infrastructure.
- Act as design authority for F5 BIG-IP LTM and GTM/DNS platforms and related application delivery services.
- Produce and maintain High-Level Designs, Low-Level Designs, reference architectures, service blueprints, and reusable design patterns.
- Design F5 LTM services, including virtual servers, pools, pool members, health monitors, SSL/TLS profiles, traffic steering, load-balancing methods, persistence mechanisms, and Source NAT.
- Design F5 GTM/DNS solutions, including Global Server Load Balancing, wide IPs, pools, health monitoring, geographic traffic distribution, failover, and disaster recovery architectures.
- Define AS3-based onboarding models, reusable declarations, and standardized service templates for automated application delivery.
- Contribute to F5 certificate automation by defining design requirements, onboarding standards, integration patterns, and certificate lifecycle processes.
- Design scalable approaches for certificate issuance, deployment, renewal, replacement, revocation, and retirement on F5 application delivery platforms.
- Define integration requirements between F5 platforms, AS3 services, enterprise PKI, certificate management services, and automation tooling.
- Ensure certificate automation designs support secure key handling, certificate traceability, expiry monitoring, controlled renewal, and operational resilience.
- Design Palo Alto firewall solutions, including security rulebases, security policies, NAT configurations, security zones, segmentation, and application traffic flows.
- Review application connectivity requirements and translate them into appropriate Palo Alto rulebase and NAT design changes.
- Design router ACL changes supporting network segmentation, controlled connectivity, infrastructure protection, and application onboarding.
- Define end-to-end traffic flows incorporating firewall policies, router ACLs, routing controls, DNS services, load balancing, and security boundaries.
- Design site-to-site VPN solutions, leased-line connectivity, partner integrations, inter-datacenter communication, and hybrid infrastructure connectivity.
- Define routing changes, route filtering requirements, failover behaviour, network paths, and connectivity models for new business and infrastructure services.
- Assess the impact of firewall rulebase, NAT, router ACL, routing, VPN, DNS, and application delivery changes on security, availability, and resilience.
- Translate business and technical requirements into approved network, security, DNS, certificate management, and application delivery designs.
- Support IPC migrations, internal cloud migrations, infrastructure transformations, and application onboarding through solution design and architecture governance.
- Contribute to Lifecycle Management projects by assessing design impacts and defining target-state solutions for platform upgrades and technology refreshes.
- Review proposed solutions and ensure alignment with ING security standards, resilience requirements, risk controls, and architecture principles.
- Maintain architecture repositories, design documentation, service standards, decision records, and audit-compliant evidence.
- Ensure traceability between design deliverables, Azure DevOps epics and user stories, architecture decisions, and ServiceNow change records.
- Provide architectural guidance during major incident reviews, root cause analysis, and structural service improvement activities.
- Support Disaster Recovery (DR) testing activities through architecture validation, design reviews, failover scenario assessments, and periodic Standby Duty participation to ensure resilience and recoverability objectives are met.
- Provide architectural guidance during major incidents, troubleshooting activities, and service degradation scenarios to support rapid issue identification and resolution.
- Contribute to root cause analysis by evaluating network, security, connectivity, and application delivery designs, identifying structural improvements to enhance platform resilience, availability, and operational stability.
Requirements
- Extensive experience designing enterprise network, security, and application delivery solutions.
- Strong knowledge of F5 BIG-IP LTM and GTM/DNS technologies and application delivery architectures.
- Experience designing F5 services, including virtual servers, pools, health monitors, traffic steering, persistence, SSL/TLS, and high-availability solutions.
- Experience with F5 AS3 and declarative application onboarding models.
- Knowledge of certificate management, PKI integration, and SSL/TLS certificate lifecycle requirements.
- Experience designing Palo Alto firewall rulebases, security policies, NAT configurations, security zones, and traffic flows.
- Experience designing routing solutions, router ACL changes, network segmentation, VPN connectivity, and leased-line services.
- Strong knowledge of DNS, Infoblox DDI/IPAM, traffic management, resilience, and disaster recovery principles.
- Experience working in complex hybrid infrastructure environments.
- The ability to translate business, security, and technical requirements into scalable and supportable designs.
- A strong focus on security, availability, resilience, and operational stability.
- The ability to work in accordance with ING standards, architecture principles, controls, and governance processes.
- Clear communication skills and experience working in an Agile environment.
- A bachelor's degree or equivalent professional and intellectual ability in Information Technology.
- Extensive experience in network architecture, network security, connectivity, and application delivery design.
- Strong knowledge of F5 BIG-IP LTM, F5 BIG-IP GTM/DNS, AS3, SSL/TLS, and application delivery technologies.
- Knowledge of PKI, digital certificates, certificate lifecycle management, and certificate automation principles.
- Strong knowledge of Palo Alto Networks, Panorama, rulebase design, NAT, and security zoning.
- Experience with routing and switching, router ACLs, VPN technologies, leased-line connectivity, and network segmentation.
- Experience with DNS, Infoblox DDI/IPAM, high availability, and disaster recovery design.
- Experience working within Agile delivery organisations and architecture governance processes.
- Excellent command of spoken and written English.
Skills
- F5 BIG-IP LTM
- F5 BIG-IP GTM/DNS
- F5 AS3
- GSLB
- Virtual Servers
- Pools
- Health Monitors
- SSL/TLS Profiles
- Traffic Management
- Load Balancing
- Persistence
- iRules
- PKI Integration
- Digital Certificates
- Certificate Lifecycle Management
- F5 Certificate Automation
- Palo Alto Networks
- Panorama
- Palo Alto Security Policies
- Rulebase Design
- NAT Design
- Security Zoning
- Router ACL Design
- Routing and Switching
- Network Segmentation
- Site-to-Site VPN
- Leased-Line Connectivity
- Infoblox DDI/IPAM
- DNS
- Hybrid Infrastructure Connectivity
- Azure DevOps
- ServiceNow
- Infrastructure as Code
- High Availability
- Disaster Recovery
- Enterprise Network Security Architecture
Location
- Hybrid
Work Type
- Hybrid
Experience Level
- Senior
Education Level
- Bachelor's degree or equivalent professional and intellectual ability in Information Technology
Benefits
- 25-28 vacation days depending on contract
- Pension scheme
- 13th month salary
- 8% Holiday payment
- Hybrid working
- Personal growth and challenging work with endless possibilities
- An informal working environment with innovative colleagues
About the Company
- Curious about how ING empowers people and businesses to move forward?
- Discover what we do and what we can offer you.