Description
About the Role:
We are seeking a Senior Network Engineer to join our Global Network Services team. You will design, automate, and operate DNS, edge delivery, and application delivery services that keep S&P Global's platforms fast, secure, and available.
Responsibilities and Impact
DDI, Edge Security, and Application Delivery
- Own the architecture and operation of enterprise DDI services, including Infoblox (DNS, DHCP, IPAM) and cloud DNS (AWS Route 53, Azure DNS/Private DNS, Google Cloud DNS), with hybrid DNS resolution across on-premises and multi-cloud environments.
- Integrate IPAM/DDI with the CMDB to keep IP, host, and network records accurate and in sync, using discovery data and API-driven reconciliation to detect and correct drift.
- Design and operate DNS security controls, including DNSSEC, DNS firewall (e.g., Infoblox BloxOne Threat Defense), protection against DNS attacks.
- Design and manage CDN, WAF, bot management, and DDoS protection using Akamai and Cloudflare, including rule tuning, policy management, and traffic analysis.
- Design and operate load balancing and traffic management, including F5, cloud-native load balancers (AWS ELB/ALB, Azure Application Gateway, GCP Load Balancing), and global server load balancing.
Automation and Infrastructure as Code
- Write, test, and maintain Terraform modules to provision DNS, edge, and load balancing services across AWS, Azure, and GCP, setting shared-module patterns.
- Build Python tooling and API integrations (e.g., Infoblox WAPI, Akamai, Cloudflare APIs) to remove repetitive manual tasks and improve consistency.
- Build and improve CI/CD pipelines for changes, including automated validation, pre-deployment testing, and policy checks.
- Develop automated configuration and compliance checks to catch deviations from approved standards (e.g., DNS records, WAF policies, IPAM allocations) early.
- Follow good engineering practice in shared repositories: version control, peer review, modular code, and clear documentation.
Collaboration and Continuous Improvement
- Serve as subject matter expert and third-line escalation point for complex incidents, leading root cause analysis.
- Collaborate with application, product, engineering, and security teams to deliver changes meeting enterprise standards and compliance requirements.
- Plan and execute approved changes within agreed maintenance windows, with documented back-out steps, and join out-of-hours change windows as required.
- Produce and maintain architecture documentation, automation runbooks, and standard operating procedures.
- Mentor engineers, share knowledge, and identify ways to reduce risk, improve efficiency, and raise standards.
What We're Looking For
Basic Required Qualifications
- 5+ years' experience in network or infrastructure engineering supporting hybrid, multi-cloud environments.
- Extensive hands-on experience with Infoblox DDI, including DNS architecture, DHCP, and IPAM design and operations.
- Hands-on experience with DNS in Infoblox and at least two cloud DNS providers: AWS Route 53, Azure DNS, Google Cloud DNS.
- Strong experience with Akamai and/or Cloudflare, including CDN, WAF, bot mitigation, and DDoS protection.
- Hands-on experience with load balancers (e.g., F5, NGINX, AWS ELB/ALB, Akamai GTM).
- Strong experience with Terraform and Infrastructure as Code, including module design and Git-based version control.
- Proficiency in Python for automation and API integration, following software development best practices (testing, code review).
- Solid understanding of core networking, DNS, and HTTP protocols, able to read configuration as code and assess a change's impact before deploying it.
- Strong troubleshooting and analytical skills, with attention to detail.
- Ability to manage multiple projects and priorities simultaneously.
- Excellent written and verbal communication skills, and the ability to work effectively in a cross-functional team.
Additional Preferred Qualifications
- Experience querying observability and logging platforms (e.g., Splunk, Grafana, Google Secops etc) to analyze DNS, CDN/WAF, and load balancer telemetry, build dashboards and alerts, and troubleshoot incidents.
- Experience building AI-assisted automation, such as agents that call Infoblox, Akamai, Cloudflare, or cloud APIs (e.g., via MCP servers).
- Experience integrating IPAM/DDI with a CMDB or ITSM platform including discovery-based synchronization and automated request workflows.
- Experience with low-code automation platforms.
- Active Directory infrastructure knowledge.
- Experience in a regulated environment with formal change and audit requirements.
- AI fundamentals.
- Relevant certifications, such as Infoblox DDI Professional, Terraform Associate, Akamai or Cloudflare certifications, or AWS, Azure, or GCP networking certifications.
Benefits
- Health & Wellness: Health care coverage designed for the mind and body.
- Flexible Downtime: Generous time off helps keep you energized for your time on.
- Continuous Learning: Access a wealth of resources to grow your career and learn valuable new skills.
- Invest in Your Future: Secure your financial future through competitive pay, retirement planning, a continuing education program with a company-matched student loan contribution, and financial wellness programs.
- Family Friendly Perks: It's not just about you. S&P Global has perks for your partners and little ones, too, with some best-in-class benefits for families.
- Beyond the Basics: From retail discounts to referral incentive awards,small perks can make a big difference.