Senior Network Architect (VLAN/Segmentation)
(m/f/d)
Freelance/Contracting project remote, Düsseldorf Start date: asap Reference number: 856730/1
Diesen Job teilen oder drucken
Project information
1. Energy industry
Responsibilities
2. VLAN Discovery, Assessment & Cleanup Strategy
3. Conduct a full assessment of existing VLAN structures across all of the client's locations
4. Identify unused, obsolete, conflicting, or non-compliant VLANs
5. Develop a strategic cleanup and redesign plan that aligns with the client’s network architecture standards, segmentation requirements, and resilience objectives
6. Present the cleanup concept and proposed redesign to the client for sign-off prior to execution
7. VLAN Migration Planning & Execution
8. Develop site-specific and global migration plans, including fallback procedures, maintenance windows, and change execution sequences
9. Coordinate with internal teams and external vendors to prepare each site for VLAN transitions
10. Oversee or perform VLAN migrations, ensuring minimal service disruption and adherence to change management processes
11. Present migration results and documentation for each site to the client for sign-off
12. Network Risk Assessment & Mitigation
13. Identify risks associated with VLAN redesign and migrations, including dependencies with firewalls, routing, OT/IT boundaries, and legacy systems
14. Develop mitigation strategies and present all findings, alternatives, and recommended urgent initiatives to the client for review and sign-off
15. Compliance & Information Security Alignment
16. Validate that the new VLAN structure and migration approach comply with the client's information security policies, industry best practices, and audit requirements
17. Provide recommendations to resolve any compliance gaps and present results to stakeholders
18. Documentation & Reporting
19. Maintain detailed, accurate documentation of VLAN structures, cleanup activities, migrations, and dependencies
20. Produce weekly progress reports for senior management
21. Prepare and deliver presentations summarizing status, risks, and next steps
22. Alignment with Network Security Team
23. Proactively support internal stakeholders and with expert-level input on VLAN design, migration strategy, and network segmentation practices
Profile
24. VLAN & Network Segmentation: Design, assessment, cleanup, and migration
25. Layer 2/3 Networking: STP, OSPF, BGP, VRRP, inter-VLAN routing
26. Switching & Routing: Multi-vendor (Cisco, Juniper, Aruba) configuration and troubleshooting
27. Network Security: Firewall policies, ACLs, OT/IT segmentation, compliance with security standards
28. Risk & Compliance: ISO 27001, NIST, audit readiness, gap analysis
29. Migration Planning & Execution: Change management, rollback strategies, minimal downtime
30. Documentation & Reporting: Network diagrams, migration plans, executive presentations
31. Stakeholder Communication: Technical and non-technical audiences, vendor coordination
32. Project Management: Multi-site migrations, timeline control
33. Fluent German & English
34. Bonus: SASE/Zero Trust
Benefits
35. A very renowned company
36. Dynamic and innovative market environment
37. High degree of personal responsibility