Network Infrastructure Engineer, DNS & Proxy

GovTech is the lead agency driving Singapore’s Smart Nation initiatives and public sector digital transformation. As the Centre of Excellence for Infocomm Technology and Smart Systems (ICT & SS), GovTech develops the Singapore Government’s capabilities in Data Science & Artificial Intelligence, Application Development, Smart City Technology, Digital Infrastructure, and Cybersecurity.
At GovTech, we offer you a purposeful career to make lives better where we empower our people to master their craft through robust learning and development opportunities all year round.
Play a part in Singapore’s vision to build a Smart Nation and embark on your meaningful journey to build tech for public good. Join us to advance our mission and shape your future with us today!
Learn more about GovTech at tech.gov.sg.
[What you will be working on]
We are constantly looking for Network Infrastructure Engineers with broad and deep technical expertise across multiple domains, best practices and technologies. You will help to execute new initiatives and enhancements that result in innovative use of your domain technology knowledge to meet the needs of forward-looking Public Service agencies.
Operate and continuously improve production DNS, DNSSEC, protective DNS and secure web proxy services as an in-house capability.
Perform hands-on troubleshooting, incident response, change implementation, lifecycle management, backup, recovery and root-cause analysis.
Engineer DNS zones, records, delegations, forwarding, caching, split-horizon DNS, access controls, DNSSEC signing and proxy policies.
Build and maintain automation scripts, playbooks, pipelines and reusable modules using Python, PowerShell, Ansible, Terraform, REST APIs or equivalent tools.
Codify infrastructure, configurations and policies using Infrastructure as Code, configuration-as-code, Git and CI/CD workflows.
Analyse DNS queries, proxy logs and threat intelligence to detect malicious domains, tunnelling, command-and-control traffic and policy violations.
Integrate DNS and proxy services with identity, firewall, cloud, monitoring, SIEM, ITSM and threat-intelligence platforms.
Explore practical network AI and AIOps use cases for anomaly detection, event correlation, predictive analysis, troubleshooting and governed remediation.
Work with vendors and partners where required while retaining internal technical ownership, operational control and accountability for production outcomes.
[What we are looking for]
At least five years of relevant experience in enterprise network, infrastructure or security engineering, with substantial hands-on responsibility for production DNS and proxy services.
Deep knowledge of authoritative and recursive DNS, zone delegation, record lifecycle management, forwarding, caching, split-horizon DNS, DNSSEC, encrypted DNS and systematic troubleshooting.
Hands-on experience with enterprise DDI platforms covering DNS, DHCP and IP address management; experience with Infoblox, Bluecoat or an equivalent platform is advantageous.
Strong experience operating enterprise proxy or secure web gateway platforms, including access controls, URL filtering, authentication, TLS inspection, certificate management, bypass policies and log analysis.
Sound knowledge of protective DNS, response policy zones, domain reputation, DNS logging, query analytics and DNS-based threat detection.
Strong understanding of TCP/IP, IPv4 and IPv6, HTTP/HTTPS, TLS, routing, NAT, firewalls, load balancing, Anycast and common application traffic flows.
Proficiency in Python or PowerShell, REST APIs and automation tools such as Ansible or Terraform, with practical exposure to Git, CI/CD, automated testing and configuration management.
Experience with monitoring, telemetry, observability, log analytics, SIEM or event-correlation platforms, and the ability to turn operational data into action.
An interest in AI-enabled network operations, with the discipline to validate recommendations, protect operational data and retain appropriate human oversight over production changes.
Strong analytical and troubleshooting skills, with the confidence to work through ambiguity and resolve difficult multi-layer or multi-vendor problems.
Clear written and verbal communication, technical documentation, stakeholder-engagement and vendor-management skills.
What we offer you:
GovTech is an equal opportunity employer committed to fostering an inclusive workplace that values diverse voices and perspectives, as we believe that diversity is the foundation to innovation.
Our employee benefits are based on a total rewards approach, offering a holistic and market-competitive suite of perks. These include leave benefits to meet your work-life needs and employee wellness programs.
We champion flexible work arrangements (subject to your job role) and trust that you will manage your own time to deliver your best, wherever you are, and whatever works best for you.
Learn more about life inside GovTech at go.gov.sg/GovTechCareers.
Stay connected with us on social media at go.gov.sg/ConnectWithGovTech