Senior DNS & IP Network Engineer

About the role

Citi is looking for a Senior DNS & IP Network Engineer to own and evolve the enterprise DNS, DHCP and IP Address Management (IPAM) infrastructure that underpins network connectivity across a global, multi-cloud environment. The engineer acts as technical authority for DDI services, shaping how the bank manages its IP address estate across on-premises, cloud and hybrid environments.

Key responsibilities

• Design and implement highly available DNS architectures across global enterprise environments, aligned with network security standards.
• Manage the full lifecycle of IPv4 and IPv6 address allocations, from subnet design and planning to utilization tracking, reclamation and capacity forecasting.
• Own IP space governance, defining allocation policies, standards and workflows across data centers, cloud platforms, branch offices and application environments.
• Coordinate public IP allocations with regional internet registries (ARIN, RIPE NCC, APNIC, LACNIC) and manage ASN and routing resource requirements.
• Build automation for DNS, DHCP and IPAM using Python, Ansible, Terraform or REST APIs.
• Lead DNS security initiatives such as DNSSEC, Response Policy Zones, threat intelligence, monitoring, logging and DDoS protection.
• Investigate and resolve DNS, DHCP and IP allocation incidents, with root cause analyses and preventive recommendations.

Required profile

• 5 to 10 years of hands-on experience in enterprise DNS, DHCP, IPAM or network infrastructure engineering.
• Bachelor's degree in a relevant field, or equivalent professional experience.
• Strong analytical and diagnostic skills, with a track record of solving complex network issues under pressure.
• Ability to work across global virtual teams in a fast-paced, cross-functional setting.

Required skills

• Deep knowledge of IPv4 and IPv6, subnetting, CIDR notation, route summarization and address utilization analysis.
• Experience with enterprise DDI platforms such as Infoblox, BlueCat, TCPWave or EfficientIP.
• Beneficial: ASN, BGP, RPKI, ROA, geofeed administration, and direct coordination with internet registries, cloud providers or telecom carriers.
• Background in financial services or large-scale enterprise environments; Master's degree is beneficial.

What we offer

• Hybrid working model (up to 2 days at home per week) in a business casual workplace.
• Cafeteria program, home office allowance and paid parental leave.
• Private medical care program and onsite medical rooms, pension plan contribution, group life insurance and employee assistance program.
• Learning and development programs, flexible work arrangements and career progression opportunities.