Resident Engineer – DNS, DHCP & IPAM

Role Overview

We seek a seasoned Resident Engineer specializing in DNS, DHCP, and IP Address Management (DDI) to oversee and administer a critical enterprise DDI environment for a premier Qatari organization. The position demands ensuring the reliability, security, and efficiency of DNS, DHCP, and IPAM systems, collaborating closely with operations, security, and vendor teams to maintain a robust and secure network.

Core Responsibilities

• Administer enterprise-level DNS, DHCP, and IPAM platforms, including routine health monitoring and performance assessments.
• Address and resolve system incidents, outages, and configuration anomalies promptly.
• Support scheduled maintenance activities, including upgrades and operational tasks.
• Engage with internal departments and vendor technical support for problem escalation and resolution.
• Configure and manage DNS zones, DHCP scopes, IPAM datasets, and Grid infrastructure components.
• Implement system modifications and upgrades, ensuring seamless integration with SIEM and security frameworks.
• Oversee DNS Firewall configurations, RPZ policies, and threat intelligence systems.
• Detect and respond to DNS-related attacks such as malware infiltration, tunneling, and command-and-control threats.
• Align with cybersecurity standards including Zero Trust, RBAC, and least privilege methodologies while maintaining comprehensive audit records.
• Propose and execute architectural improvements for enhanced redundancy, resilience, and capacity planning.
• Maintain detailed technical documentation, network schematics, and operational reports including RCA and change logs.
• Conduct training and mentorship for engineering teams to enhance DDI expertise and operational proficiency.

Required Qualifications and Experience

• 5 to 7 years’ experience in enterprise networking environments, including at least 3 years hands-on managing DDI platforms.
• Proven experience working in large-scale enterprise or telecommunications settings.
• In-depth expertise with DNS, DHCP, IPAM, Grid Management, DNS Firewall, RPZ, DNSSEC, and threat intelligence integration.
• Familiar with SIEM integration, DNS monitoring/logging, high availability solutions, disaster recovery practices, TCP/IP, routing and switching mechanisms, VLANs, REST APIs, and scripting with Python or PowerShell (preferred).
• Knowledgeable in DNS security, DNS tunneling detection, malware identification, Zero Trust frameworks, RBAC, least privilege access, incident response, and log analysis.

Certifications (Preferred)

• Infoblox Core and Advanced DDI
• Infoblox Security
• CCNA and CCNP
• Security+ and CySA+