Network Engineer

Contract:

6 month contract with ongoing extension Compensation: T4: $61/HR-$65/HR | IC: $70/HR-$77/HR DDI Engineering

under the Network Engineering & Design division is responsible for the oversight, management, design, and

engineering

of the bank's core network services (DNS, DHCP, IPAM) globally. Requirements

8+ years of network engineering experience

with a minimum

5 years on DDI platforms

(Infoblox, BlueCat, BT/Cygna Labs Diamond IP - an asset). Bachelor's degree

in Engineering, Computer Science, or a related technical field. Technical Requirements

Expertise in

DNS architecture

and redundancy - ISC BIND & Microsoft DNS. Expertise in

DHCP architecture

and failover - ISC DHCP & Kea. Exceptional knowledge in

DNS fundamentals

and ability to differentiate between querying, forwarding, recursion, delegation, zone transfers and caching mechanisms. Exceptional knowledge in

DHCP fundamentals

– bootp, PXE, vendor options, client classes. Hands-on experience in

IP management

(IPv4 &

IPv6 ),

capacity planning , subnet aggregation, route summarization, and brand (IP & domain) protection measures. Hands-on experience with day-to-day DDI operations and

DNS/DHCP configuration management

in a large enterprise environment. Experience with

Intranet (internal) & Extranet DNS design

– vendor / B2B / peer networks. Experience with

Public (external) DNS management

– domain registrars, ownership transfers. Experience with

Public IP & ASN management

– regional registries (ARIN), IXPs, IRR, RPKI. Experience with

CDNs

(Akamai, Cloudflare), application delivery, and web (301/302) redirections. Experience with

Public Clouds

(AWS, Azure) and designing scalable Hybrid DNS architectures. Experience in providing

DNS solutions

in case of mergers, acquisitions, and divestitures ( M&A ). Experience with

DNS security

- DNSSEC, DNS Firewall, email (SPF, DMARC, DKIM), CAA. Advanced troubleshooting, reverse engineering, and

root cause analysis (RCA)

skills. Advanced scripting skills in

Python

and/or bash - telemetry & network tool integration experience. Advanced knowledge in Load Balancers (LTM/GTM),

GSLB , NTP, SSL/TLS,

traffic steering . Strong proficiency in

Unix/Linux

operating systems – cronjobs, logging, hardening techniques. Strong proficiency in

network automation

using SOAP and/or

RESTful APIs . Adept with routing protocols ( BGP , OSPF, EIGRP),

NAC

(DHCP snooping, 802.1x, MAC auth), IDS/IPS, IPSEC VPN, Firewalls ( NAT , PAT),

Proxy

(forward/reverse), SDA, SDWAN, and SASE. Practical understanding of data structures,

algorithms , and database ( MySQL ) fundamentals. Excellent communication (verbal & written) skills with ability to create

technical documentation

(SOP, BCP, deploy guides, conventions/templates) and

network diagrams . Analytical

ability to

decipher complex technical requirements

and convey subsequent solutions in an effective manner to cross-functional teams & senior leadership. Willingness to learn,

adapt to new processes , and deliver projects within specified deadlines. Nice-to-Have

Banking / Finance

experience a big plus. DDI Certifications

and CCNA/CCNP. Audit & Compliance

experience with internal and/or external regulatory bodies. Proficiency with

SIEM platforms

(Elastic ELK, Splunk) and

vulnerability management . Familiarity with

ITIL , ITSM, TOGAF,

SDLC , Release Management, PM (Agile/Scrum, Waterfall).

#J-18808-Ljbffr