DDI SME (Hands-On)

This role calls for a hands-on DDI Subject Matter Expert with deep expertise in DNS, DHCP, and IPAM. It is not purely strategic; the position requires the ability to design, build, integrate, and take end-to-end ownership of DDI initiatives across a diverse ecosystem. The focus is on driving modernization, automation, and observability while ensuring scalability and security. A key responsibility is also to lead a comprehensive resilience assessment and provide informed recommendations to the bank based on the findings.

Key Responsibilities

Lead a comprehensive DDI resilience assessment, providing clear recommendations to strengthen availability, recovery, and risk posture across the bankOwn DDI initiatives end-to-end: design, deployment, and ongoing optimizationDesign and implement robust DNS architectures, including Anycast deploymentsWork hands-on with multiple DDI platforms (Infoblox, Cygna Labs/QIP, EfficientIP) and integrate them into a cohesive ecosystemBuild and enhance DDI observability and monitoring (DNS Tap, telemetry pipelines, dashboards)Define and improve governance, compliance, and control frameworks for DNS/IP servicesEnsure secure DNS and IP management, including Active Directory integration and authenticationCollaborate with network teams on routing and switching engineering (BGP, OSPF) to support DNS resiliencyDrive automation initiatives across DDI (APIs, infrastructure-as-code, orchestration)Troubleshoot complex DNS and IPAM issues across distributed environmentsAct as the technical SME and escalation point for all DDI-related matters

Ideal Experience

Required Skills & Experience

15+ years of progressive experience in DDI (DNS, DHCP, IPAM), including leading large-scale enterprise deployments, transformations and resilience initiativesStrong hands-on experience with DDI platforms (Infoblox, Cygna Labs/QIP, EfficientIP, or similar)Deep understanding of DNS architecture, design, and operationsExperience with Anycast DNS deployments in enterprise or large-scale environmentsSolid understanding of networking protocols, especially BGP and OSPFKnowledge of DNS observability tools (DNS Tap, logging, telemetry pipelines)Experience integrating DDI with Active Directory and secure authentication mechanismsFamiliarity with compliance, governance, and control frameworks in network servicesStrong troubleshooting and problem-solving skills in complex, distributed environments

Experience with DDI automation (Python, APIs, Ansible, Terraform)Exposure to cloud-based DNS architectures (AWS Route 53, Azure DNS)Experience with high-availability, globally distributed DNS systemsKnowledge of DNS security best practices (DNSSEC, DDoS mitigation)