{"id":1174171,"url":"https://alion.io/job/ing-group-senior-network-designer","title":"Senior Network Designer","company":{"id":3744,"name":"ING Group","domain":"ing.com","url":"https://alion.io/company/ing","size_band":"5000+","is_staffing_agency":false,"is_intermediary":false,"listed_via":null,"ats_vendor":"Workday","truth_index":{"grade":"A","score":85,"open_postings":88,"ghost_share":0,"stale_share":0.784,"repost_share":0,"time_to_fill_p50_days":16,"computed_at":"2026-09-24T05:45:00Z"}},"role":"Design","role_family":"Design","seniority":"senior","employment_type":"full_time","work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Rotterdam, Netherlands","Amsterdam, Netherlands"],"countries":["NL"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":60000,"max_usd":139000,"period":"year","method":"global_role_cell_scaled_by_country","sample_n":738},"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Agile","optional":false},{"name":"Azure DevOps","optional":false},{"name":"DNS","optional":false},{"name":"PKI","optional":false},{"name":"ServiceNow","optional":false},{"name":"VPN","optional":false},{"name":"Azure","optional":true}],"status":"live","first_seen_at":"2026-09-24T10:28:48Z","employer_posted_date":"2026-09-24","last_verified_at":"2026-09-24T12:56:56Z","board_verified":true,"closed_at":null,"days_open":0,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":0},"description":"First published date: 16-09-2026\nAs a Senior Network Designer, you are responsible for designing secure, resilient, and scalable network, security, and application delivery solutions across ING's hybrid infrastructure. You act as a design authority for F5 BIG-IP LTM and GTM/DNS services, AS3-based onboarding models, Palo Alto security solutions, router ACLs, network segmentation, routing, VPN services, leased-line connectivity, and certificate management.\nYou contribute to cloud migrations, Lifecycle Management (LCM) projects, F5 certificate automation, platform modernization, and the delivery of new network and application delivery capabilities. You translate business and technical requirements into target-state architectures, High-Level Designs, Low-Level Designs, reusable service patterns, and secure connectivity solutions.\nYou work effectively with engineers, architects, service consumers, security specialists, and management. You combine clear communication with strong conceptual thinking and a structured approach to solution design. You are thorough, detail-oriented, and committed to producing accurate, maintainable, and high-quality architecture documentation.\nWe are looking for you if you have:\nExtensive experience designing enterprise network, security, and application delivery solutions.\nStrong knowledge of F5 BIG-IP LTM and GTM/DNS technologies and application delivery architectures.\nExperience designing F5 services, including virtual servers, pools, health monitors, traffic steering, persistence, SSL/TLS, and high-availability solutions.\nExperience with F5 AS3 and declarative application onboarding models.\nKnowledge of certificate management, PKI integration, and SSL/TLS certificate lifecycle requirements.\nExperience designing Palo Alto firewall rulebases, security policies, NAT configurations, security zones, and traffic flows.\nExperience designing routing solutions, router ACL changes, network segmentation, VPN connectivity, and leased-line services.\nStrong knowledge of DNS, Infoblox DDI/IPAM, traffic management, resilience, and disaster recovery principles.\nExperience working in complex hybrid infrastructure environments.\nThe ability to translate business, security, and technical requirements into scalable and supportable designs.\nA strong focus on security, availability, resilience, and operational stability.\nThe ability to work in accordance with ING standards, architecture principles, controls, and governance processes.\nClear communication skills and experience working in an Agile environment.\nYou'll get extra points for:\nExperience contributing to F5 certificate automation and automated certificate lifecycle management.\nExperience designing integrations between F5 platforms, enterprise PKI services, certificate management tooling, and automation platforms.\nExperience defining reusable AS3 templates and standardized application onboarding models.\nExperience supporting cloud migration programmes.\nExperience contributing to Lifecycle Management (LCM) and technology refresh projects.\nExperience designing Global Server Load Balancing, high-availability, and disaster recovery solutions.\nExperience developing reusable service patterns, design standards, and reference architectures.\nYour responsibilities:\nDesign secure, resilient, and scalable network, security, DNS, connectivity, and application delivery solutions across ING's hybrid infrastructure.\nAct as design authority for F5 BIG-IP LTM and GTM/DNS platforms and related application delivery services.\nProduce and maintain High-Level Designs, Low-Level Designs, reference architectures, service blueprints, and reusable design patterns.\nDesign F5 LTM services, including virtual servers, pools, pool members, health monitors, SSL/TLS profiles, traffic steering, load-balancing methods, persistence mechanisms, and Source NAT.\nDesign F5 GTM/DNS solutions, including Global Server Load Balancing, wide IPs, pools, health monitoring, geographic traffic distribution, failover, and disaster recovery architectures.\nDefine AS3-based onboarding models, reusable declarations, and standardized service templates for automated application delivery.\nContribute to F5 certificate automation by defining design requirements, onboarding standards, integration patterns, and certificate lifecycle processes.\nDesign scalable approaches for certificate issuance, deployment, renewal, replacement, revocation, and retirement on F5 application delivery platforms.\nDefine integration requirements between F5 platforms, AS3 services, enterprise PKI, certificate management services, and automation tooling.\nEnsure certificate automation designs support secure key handling, certificate traceability, expiry monitoring, controlled renewal, and operational resilience.\nDesign Palo Alto firewall solutions, including security rulebases, security policies, NAT configurations, security zones, segmentation, and application traffic flows.\nReview application connectivity requirements and translate them into appropriate Palo Alto rulebase and NAT design changes.\nDesign router ACL changes supporting network segmentation, controlled connectivity, infrastructure protection, and application onboarding.\nDefine end-to-end traffic flows incorporating firewall policies, router ACLs, routing controls, DNS services, load balancing, and security boundaries.\nDesign site-to-site VPN solutions, leased-line connectivity, partner integrations, inter-datacenter communication, and hybrid infrastructure connectivity.\nDefine routing changes, route filtering requirements, failover behaviour, network paths, and connectivity models for new business and infrastructure services.\nAssess the impact of firewall rulebase, NAT, router ACL, routing, VPN, DNS, and application delivery changes on security, availability, and resilience.\nTranslate business and technical requirements into approved network, security, DNS, certificate management, and application delivery designs.\nSupport IPC migrations, internal cloud migrations, infrastructure transformations, and application onboarding through solution design and architecture governance.\nContribute to Lifecycle Management projects by assessing design impacts and defining target-state solutions for platform upgrades and technology refreshes.\nReview proposed solutions and ensure alignment with ING security standards, resilience requirements, risk controls, and architecture principles.\nMaintain architecture repositories, design documentation, service standards, decision records, and audit-compliant evidence.\nEnsure traceability between design deliverables, Azure DevOps epics and user stories, architecture decisions, and ServiceNow change records.\nProvide architectural guidance during major incident reviews, root cause analysis, and structural service improvement activities.\nSupport Disaster Recovery (DR) testing activities through architecture validation, design reviews, failover scenario assessments, and periodic Standby Duty participation to ensure resilience and recoverability objectives are met.\nProvide architectural guidance during major incidents, troubleshooting activities, and service degradation scenarios to support rapid issue identification and resolution.\nContribute to root cause analysis by evaluating network, security, connectivity, and application delivery designs, identifying structural improvements to enhance platform resilience, availability, and operational stability.\nYour education and background:\nA bachelor's degree or equivalent professional and intellectual ability in Information Technology.\nExtensive experience in network architecture, network security, connectivity, and application delivery design.\nStrong knowledge of F5 BIG-IP LTM, F5 GTM/DNS, AS3, SSL/TLS, and application delivery technologies.\nKnowledge of PKI, digital certificates, certificate lifecycle management, and certificate automation principles.\nStrong knowledge of Palo Alto Networks, Panorama, rulebase design, NAT, and security zoning.\nExperience with routing and switching, router ACLs, VPN technologies, leased-line connectivity, and network segmentation.\nExperience with DNS, Infoblox DDI/IPAM, high availability, and disaster recovery design.\nExperience working within Agile delivery organisations and architecture governance processes.\nExcellent command of spoken and written English.\nTechnical Environment\nF5 BIG-IP LTM, F5 BIG-IP GTM/DNS, F5 AS3, GSLB, Virtual Servers, Pools, Health Monitors, SSL/TLS Profiles, Traffic Management, Load Balancing, Persistence, iRules, PKI Integration, Digital Certificates, Certificate Lifecycle Management, F5 Certificate Automation, Palo Alto Networks, Panorama, Palo Alto Security Policies, Rulebase Design, NAT Design, Security Zoning, Router ACL Design, Routing and Switching, Network Segmentation, Site-to-Site VPN, Leased-Line Connectivity, Infoblox DDI/IPAM, DNS, Hybrid Infrastructure Connectivity, Azure DevOps, ServiceNow, Infrastructure as Code, High Availability, Disaster Recovery, and Enterprise Network Security Architecture.\nStand-by shifts\nBusiness critical systems, such as client processes, payment processes, software applications and websites, require a 24/7 accessibility and availability of several (groups) of employees to act quickly during unforeseen circumstances, such as calamities or incidents. For these (groups) of employees ING have set up a Stand-by regulation. To compensate for the inconvenience of being available currently, a Stand-by compensation is awarded. If you are designated by your lead for stand-by shifts to be available for incidents outside of your regular working hours, a Stand-by compensation is awarded.\nRewards and benefits\nWe want to make sure that it’s possible for you to strike the right balance between your career and your private life. Find out more about our employment conditions.\nThe benefits of working with us at ING include:\n25-28 vacation days depending on contract\nPension scheme\n13th month salary\n8% Holiday payment\nHybrid working\nPersonal growth and challenging work with endless possibilities\nAn informal working environment with innovative colleagues\nAbout us\nCurious about how ING empowers people and businesses to move forward?\nDiscover what we do and what we can offer you.\nQuestions?\nPlease visit our Frequently Asked Questions section to find some answers on questions you might have.\nContact the recruiter attached to the advertisement. Want to apply directly? Please upload your CV and motivation letter by clicking the ‘Apply’ button.","description_format":"text","description_chars":10520,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[{"language":"English","level":"All levels","optional":false}]},"benefits":["Hybrid work"],"hiring_locations":[{"name":"Netherlands","iso":"NL","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Financial Services"],"lifecycle":[{"event":"open","at":"2026-09-24T10:28:48Z"}],"liveness":{"score":86,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.86,"p_room":1,"age_days":0,"expected_fill_days":16,"reasons":["conf:4","win:early","comp:brand"],"computed_at":"2026-09-24T17:15:03Z"},"pay":null,"html_url":"https://alion.io/job/ing-group-senior-network-designer","json_url":"https://alion.io/job/ing-group-senior-network-designer.json","meta":{"generated_at":"2026-09-24T17:15:03Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers"}}