Network Engineer

Swoon; Toronto; On-site; CAD 84,000 - 106,000; Part time

Job summary

DDI Engineering seeks an expert network engineer for a 6‑month contract in Toronto. The role focuses on designing and managing DNS, DHCP, and IPAM services globally. Extensive DDI platform experience and in-depth knowledge of DNS/DHCP architectures are required.

Candidates should bring strong Unix/Linux skills, scripting (Python/bash), and a track record in enterprise network operations, security, and cloud-integrated DNS solutions. Banking sector experience is a plus.

Qualifications

• 8+ years of network engineering experience.
• Minimum 5 years on DDI platforms (Infoblox, BlueCat, BT/Cygna Labs Diamond IP).

Skills

Network engineering

DDI platforms

DNS architecture

DHCP architecture

DNS fundamentals

DHCP fundamentals

IP management

IPv6

Routing protocols

Unix/Linux

Network automation

RESTful APIs

Python scripting

Cloud networking

DNS security

SLA/Capacity planning

M&A DNS design

DNS security

Education

Bachelor's degree in Engineering/CS

Tools

Infoblox

BlueCat

BT/Cygna Labs Diamond IP

Job description

Contract: 6 month contract with ongoing extension

Compensation: T4: $61/HR-$65/HR | IC: $70/HR-$77/HR

DDI Engineering under the Network Engineering & Design division is responsible for the oversight, management, design, and engineering of the bank's core network services (DNS, DHCP, IPAM) globally.

Requirements

• 8+ years of network engineering experience with a minimum 5 years on DDI platforms (Infoblox, BlueCat, BT/Cygna Labs Diamond IP - an asset).
• Bachelor's degree in Engineering, Computer Science, or a related technical field.

Technical Requirements

• Expertise in DNS architecture and redundancy - ISC BIND & Microsoft DNS.
• Expertise in DHCP architecture and failover - ISC DHCP & Kea.
• Exceptional knowledge in DNS fundamentals and ability to differentiate between querying, forwarding, recursion, delegation, zone transfers and caching mechanisms.
• Exceptional knowledge in DHCP fundamentals – bootp, PXE, vendor options, client classes.
• Hands-on experience in IP management (IPv4 & IPv6), capacity planning, subnet aggregation, route summarization, and brand (IP & domain) protection measures.
• Hands-on experience with day-to-day DDI operations and DNS/DHCP configuration management in a large enterprise environment.
• Experience with Intranet (internal) & Extranet DNS design – vendor / B2B / peer networks.
• Experience with Public (external) DNS management – domain registrars, ownership transfers.
• Experience with Public IP & ASN management – regional registries (ARIN), IXPs, IRR, RPKI.
• Experience with CDNs (Akamai, Cloudflare), application delivery, and web (301/302) redirections.
• Experience with Public Clouds (AWS, Azure) and designing scalable Hybrid DNS architectures.
• Experience in providing DNS solutions in case of mergers, acquisitions, and divestitures (M&A).
• Experience with DNS security - DNSSEC, DNS Firewall, email (SPF, DMARC, DKIM), CAA.
• Advanced troubleshooting, reverse engineering, and root cause analysis (RCA) skills.
• Advanced scripting skills in Python and/or bash - telemetry & network tool integration experience.
• Advanced knowledge in Load Balancers (LTM/GTM), GSLB, NTP, SSL/TLS, traffic steering.
• Strong proficiency in Unix/Linux operating systems – cronjobs, logging, hardening techniques.
• Strong proficiency in network automation using SOAP and/or RESTful APIs.
• Adept with routing protocols (BGP, OSPF, EIGRP), NAC (DHCP snooping, 802.1x, MAC auth), IDS/IPS, IPSEC VPN, Firewalls (NAT, PAT), Proxy (forward/reverse), SDA, SDWAN, and SASE.
• Practical understanding of data structures, algorithms, and database (MySQL) fundamentals.
• Excellent communication (verbal & written) skills with ability to create technical documentation (SOP, BCP, deploy guides, conventions/templates) and network diagrams.
• Analytical ability to decipher complex technical requirements and convey subsequent solutions in an effective manner to cross-functional teams & senior leadership.
• Willingness to learn, adapt to new processes, and deliver projects within specified deadlines.

Nice-to-Have

• Banking / Finance experience a big plus.
• DDI Certifications and CCNA/CCNP.
• Audit & Compliance experience with internal and/or external regulatory bodies.
• Proficiency with SIEM platforms (Elastic ELK, Splunk) and vulnerability management.
• Familiarity with ITIL, ITSM, TOGAF, SDLC, Release Management, PM (Agile/Scrum, Waterfall).