Network Engineer (DNS & Proxy)

Assurity Trusted Solutions; Singapore; On-site; SGD 90,000 - 150,000; Full time

Job summary

Assurity Trusted Solutions invites a seasoned Network Engineer (DNS & Proxy) to join our secure digital connectivity team in Singapore. You will design, build and evolve critical DNS and secure web proxy services, aiming for high availability, performance and security across users, data centres and cloud platforms.

You will lead hands-on troubleshooting, incident response and CI/CD driven automation, while encoding infrastructure as code and collaborating with vendors.

Qualifications

• At least five years of relevant experience in enterprise network, infrastructure or security engineering, with substantial hands-on responsibility for production DNS and proxy services.
• Deep knowledge of authoritative and recursive DNS, zone delegation, record lifecycle management, forwarding, caching, split-horizon DNS, DNSSEC, encrypted DNS and systematic troubleshooting.
• Hands-on experience with enterprise DDI platforms covering DNS, DHCP and IP address management; experience with Infoblox, Bluecoat or an equivalent platform is advantageous.
• Strong experience operating enterprise proxy or secure web gateway platforms, including access controls, URL filtering, authentication, TLS inspection, certificate management, bypass policies and log analysis.
• Sound knowledge of protective DNS, response policy zones, domain reputation, DNS logging, query analytics and DNS-based threat detection.
• Strong understanding of TCP/IP, IPv4 and IPv6, HTTP/HTTPS, TLS, routing, NAT, firewalls, load balancing, Anycast and common application traffic flows.
• Proficiency in Python or PowerShell, REST APIs and automation tools such as Ansible or Terraform, with practical exposure to Git, CI/CD, automated testing and configuration management.
• Experience with monitoring, telemetry, observability, log analytics, SIEM or event-correlation platforms, and the ability to turn operational data into action.
• An interest in AI-enabled network operations, with the discipline to validate recommendations, protect operational data and retain appropriate human oversight over production changes.
• Strong analytical and troubleshooting skills, with the confidence to work through ambiguity and resolve difficult multi-layer or multi-vendor problems.
• Clear written and verbal communication, technical documentation, stakeholder-engagement and vendor-management skills.

Responsibilities

• Operate and continuously improve production DNS, DNSSEC, protective DNS and secure web proxy services as an in-house capability.
• Perform hands-on troubleshooting, incident response, change implementation, lifecycle management, backup, recovery and root-cause analysis.
• Engineer DNS zones, records, delegations, forwarding, caching, split-horizon DNS, access controls, DNSSEC signing and proxy policies.
• Build and maintain automation scripts, playbooks, pipelines and reusable modules using Python, PowerShell, Ansible, Terraform, REST APIs or equivalent tools.
• Codify infrastructure, configurations and policies using Infrastructure as Code, configuration-as-code, Git and CI/CD workflows.
• Analyse DNS queries, proxy logs and threat intelligence to detect malicious domains, tunnelling, command-and-control traffic and policy violations.
• Integrate DNS and proxy services with identity, firewall, cloud, monitoring, SIEM, ITSM and threat-intelligence platforms.
• Explore practical network AI and AIOps use cases for anomaly detection, event correlation, predictive analysis, troubleshooting and governed remediation.
• Work with vendors and partners where required while retaining internal technical ownership, operational control and accountability for production outcomes.

Skills

DNS & Proxy engineering

Incident response

Automation

Python

PowerShell

Ansible

Terraform

Git

CI/CD

Troubleshooting

Analytical thinking

Tools

Infoblox

Blue Coat ProxySG

REST APIs

Terraform

Ansible

Job description

Assurity Trusted Solutions (ATS) is a wholly owned subsidiary of the Government Technology Agency (GovTech). As a Trusted Partner over the last decade. ATS offers a comprehensive suite of products and services ranging from infrastructure and operational services, governance and assurance services as well as managed processes. In a dynamic digital & cyber landscape where trust & collaboration is key, ATS continues to drive mutually beneficial business outcomes through collaboration with GovTech, government agencies and commercial partners to mitigate cyber risks and bolster security postures.

Take on a high-impact engineering role at the heart of secure digital connectivity. As a Network Engineer (DNS & Proxy), youwill design, build and evolve the critical name-resolution and secure web access services that connect users, applications, data centres and cloud platforms. You will solve complex availability, performance and security challenges, codify infrastructure, automate operations and explore practical network AI mechanisms that make services more proactive, resilient and efficient.

What You Will Do

• Operate and continuously improve production DNS, DNSSEC, protective DNS and secure web proxy services as an in-house capability.
• Perform hands-on troubleshooting,incident response, change implementation, lifecycle management, backup,recovery and root-cause analysis.
• Engineer DNS zones, records,delegations, forwarding, caching, split-horizon DNS, access controls, DNSSEC signing and proxy policies.
• Build and maintain automation scripts, playbooks, pipelines and reusable modules using Python, PowerShell, Ansible, Terraform, REST APIs or equivalent tools.
• Codify infrastructure, configurations and policies using Infrastructure as Code, configuration-as-code, Git and CI/CD workflows.
• Analyse DNS queries, proxy logs and threat intelligence to detect malicious domains, tunnelling, command-and-control traffic and policy violations.
• Integrate DNS and proxy services with identity, firewall, cloud, monitoring, SIEM, ITSM and threat-intelligence platforms.
• Explore practical network AI and AIOps use cases for anomaly detection, event correlation, predictive analysis,troubleshooting and governed remediation.
• Work with vendors and partners where required while retaining internal technical ownership, operational control and accountability for production outcomes.

What You Will Bring

At least five years of relevant experience in enterprise network, infrastructure or security engineering, with substantial hands-on responsibility for production DNS and proxy services.

Deep knowledge of authoritative and recursive DNS, zone delegation, record lifecycle management, forwarding, caching, split-horizon DNS, DNSSEC, encrypted DNS and systematic troubleshooting.

Hands-on experience with enterprise DDI platforms covering DNS, DHCP and IP address management; experience with Infoblox, Bluecoat or an equivalent platform is advantageous.

Strong experience operating enterprise proxy or secure web gateway platforms, including access controls,URL filtering, authentication, TLS inspection, certificate management, bypass policies and log analysis.

Sound knowledge of protective DNS, response policy zones, domain reputation, DNS logging, query analytics and DNS-based threat detection.

Strong understanding of TCP/IP, IPv4 and IPv6, HTTP/HTTPS, TLS, routing, NAT, firewalls, load balancing, Anycast and common application traffic flows.

Proficiency in Python or PowerShell,REST APIs and automation tools such as Ansible or Terraform, with practical exposure to Git, CI/CD, automated testing and configuration management.

Experience with monitoring,telemetry, observability, log analytics, SIEM or event-correlation platforms,and the ability to turn operational data into action.

An interest in AI-enabled network operations, with the discipline to validate recommendations, protect operational data and retain appropriate human oversight over productionchanges.

Strong analytical and troubleshooting skills, with the confidence to work through ambiguity and resolve difficult multi-layer or multi-vendor problems.

Clear written and verbal communication, technical documentation, stakeholder-engagement and vendor-management skills.

Why Join Us

Join us to shape the critical DNS and proxy services that keep digital experiences secure, fast and dependable. You will solve complex,high-impact engineering challenges, gain end-to-end ownership and work across networking, cloud, cybersecurity and applications. The role gives you space to codify infrastructure, build automation and explore practical AI-enabled operations- developing future-ready skills while turning emerging ideas into resilient production capabilities that deliver visible, meaningful impact.

Join us and discover a meaningful and exciting career with Assurity Trusted Solutions!

The remuneration package will commensurate with your qualifications and experience.

We thank you for your interest and please note that only shortlisted candidates will be notified.

By submitting your application, you agree that your personal data may be collected, used and disclosed by Assurity Trusted Solutions Pte. Ltd. (ATS), GovTech and their service providers and agents in accordance with ATS's privacy statement which can be found at:https://www.assurity.sgor such other successor site.