DDI SME (Hands-On)

This role calls for a hands-on DDI Subject Matter Expert with deep expertise in DNS, DHCP, and IPAM. It is not purely strategic; the position requires the ability to design, build, integrate, and take end-to-end ownership of DDI initiatives across a diverse ecosystem. The focus is on driving modernization, automation, and observability while ensuring scalability and security. A key responsibility is also to lead a comprehensive resilience assessment and provide informed recommendations to the bank based on the findings.
Key Responsibilities
Lead a comprehensive DDI resilience assessment, providing clear recommendations to strengthen availability, recovery, and risk posture across the bank
Own DDI initiatives end-to-end: design, deployment, and ongoing optimization
Design and implement robust DNS architectures, including Anycast deployments
Work hands-on with multiple DDI platforms (Infoblox, Cygna Labs/QIP, EfficientIP) and integrate them into a cohesive ecosystem
Build and enhance DDI observability and monitoring (DNS Tap, telemetry pipelines, dashboards)
Define and improve governance, compliance, and control frameworks for DNS/IP services
Ensure secure DNS and IP management, including Active Directory integration and authentication
Collaborate with network teams on routing and switching engineering (BGP, OSPF) to support DNS resiliency
Drive automation initiatives across DDI (APIs, infrastructure-as-code, orchestration)
Troubleshoot complex DNS and IPAM issues across distributed environments
Act as the technical SME and escalation point for all DDI-related matters
Ideal Experience
Required Skills & Experience
15+ years of progressive experience in DDI (DNS, DHCP, IPAM), including leading large-scale enterprise deployments, transformations and resilience initiatives
Strong hands-on experience with DDI platforms (Infoblox, Cygna Labs/QIP, EfficientIP, or similar)
Deep understanding of DNS architecture, design, and operations
Experience with Anycast DNS deployments in enterprise or large-scale environments
Solid understanding of networking protocols, especially BGP and OSPF
Knowledge of DNS observability tools (DNS Tap, logging, telemetry pipelines)
Experience integrating DDI with Active Directory and secure authentication mechanisms
Familiarity with compliance, governance, and control frameworks in network services
Strong troubleshooting and problem-solving skills in complex, distributed environments
Nice to Have
Experience with DDI automation (Python, APIs, Ansible, Terraform)
Exposure to cloud-based DNS architectures (AWS Route 53, Azure DNS)
Experience with high-availability, globally distributed DNS systems
Knowledge of DNS security best practices (DNSSEC, DDoS mitigation)

Work arrangement
Yes