Overview
Senior Network Engineer on the Global Network Services team, designing, automating and operating the DNS, edge delivery and application delivery services that keep S&P Global's platforms fast, secure and available.
What you'll do
- Own the architecture and operation of enterprise DDI services, including Infoblox (DNS, DHCP, IPAM) and cloud DNS (AWS Route 53, Azure DNS/Private DNS, Google Cloud DNS), with hybrid DNS resolution across on-premises and multi-cloud environments.
- Integrate IPAM/DDI with the CMDB to keep IP, host and network records accurate and in sync, using discovery data and API-driven reconciliation to detect and correct drift.
- Design and operate DNS security controls, including DNSSEC, DNS firewall (e.g., Infoblox BloxOne Threat Defense) and protection against DNS attacks.
- Design and manage CDN, WAF, bot management and DDoS protection using Akamai and Cloudflare, including rule tuning, policy management and traffic analysis.
- Design and operate load balancing and traffic management, including F5, cloud-native load balancers (AWS ELB/ALB, Azure Application Gateway, GCP Load Balancing) and global server load balancing.
- Write, test and maintain Terraform modules to provision DNS, edge and load balancing services across AWS, Azure and GCP, setting shared-module patterns.
- Build Python tooling and API integrations (e.g., Infoblox WAPI, Akamai and Cloudflare APIs) to remove repetitive manual tasks and improve consistency.
- Build and improve CI/CD pipelines for changes, including automated validation, pre-deployment testing and policy checks.
- Develop automated configuration and compliance checks to catch deviations from approved standards (e.g., DNS records, WAF policies, IPAM allocations) early.
- Follow good engineering practice in shared repositories: version control, peer review, modular code and clear documentation.
- Serve as subject matter expert and third-line escalation point for complex incidents, leading root cause analysis.
- Collaborate with application, product, engineering and security teams to deliver changes meeting enterprise standards and compliance requirements.
- Plan and execute approved changes within agreed maintenance windows, with documented back-out steps, and join out-of-hours change windows as required.
- Produce and maintain architecture documentation, automation runbooks and standard operating procedures.
- Mentor engineers, share knowledge, and identify ways to reduce risk, improve efficiency and raise standards.
What you'll need
- 5+ years' experience in network or infrastructure engineering supporting hybrid, multi-cloud environments.
- Extensive hands-on experience with Infoblox DDI, including DNS architecture, DHCP and IPAM design and operations.
- Hands-on experience with DNS in Infoblox and at least two cloud DNS providers: AWS Route 53, Azure DNS, Google Cloud DNS.
- Strong experience with Akamai and/or Cloudflare, including CDN, WAF, bot mitigation and DDoS protection.
- Hands-on experience with load balancers (e.g., F5, NGINX, AWS ELB/ALB, Akamai GTM).
- Strong experience with Terraform and Infrastructure as Code, including module design and Git-based version control.
- Proficiency in Python for automation and API integration, following software development best practices (testing, code review).
- Solid understanding of core networking, DNS and HTTP protocols, able to read configuration as code and assess a change's impact before deploying it.
- Strong troubleshooting and analytical skills, with attention to detail.
- Ability to manage multiple projects and priorities simultaneously.
- Excellent written and verbal communication skills, and the ability to work effectively in a cross-functional team.
Nice to have
- Experience querying observability and logging platforms (e.g., Splunk, Grafana, Google SecOps) to analyze DNS, CDN/WAF and load balancer telemetry, build dashboards and alerts, and troubleshoot incidents.
- Experience building AI-assisted automation, such as agents that call Infoblox, Akamai, Cloudflare or cloud APIs (e.g., via MCP servers).
- Experience integrating IPAM/DDI with a CMDB or ITSM platform, including discovery-based synchronization and automated request workflows.
- Experience with low-code automation platforms.
- Active Directory infrastructure knowledge.
- Experience in a regulated environment with formal change and audit requirements.
- AI fundamentals.
- Relevant certifications, such as Infoblox DDI Professional, Terraform Associate, Akamai or Cloudflare certifications, or AWS, Azure or GCP networking certifications.
Details
- Grade 10; experience range 5 to 10 years.
- Shift time: 2 pm to 11 pm IST.
- Job location: Hyderabad, Gurugram, Noida or Bengaluru.
- Working model: Hybrid, twice a week work from office.
Read the full description and apply on the company’s own careers page.