Senior Network Engineer {DNS {Infoblox}

This job is with S&P Global, an inclusive employer and a member of myGwork – the largest global platform for the LGBTQ+ business community. Please do not contact the recruiter directly.

Grade Level (for internal use):

About the Role: Senior Network Engineer

The Team: Global Network Services is seeking a Senior Network Engineer to join our dynamic, multi-disciplinary team. You will design, automate, and operate the DNS, edge delivery, and application delivery services that keep S&P Global's platforms fast, secure, and available. We value continuous learning, excellence, and a proactive mindset.

Responsibilities and Impact

DDI, Edge Security, and Application Delivery

• Own the architecture and operation of enterprise DDI services, including Infoblox (DNS, DHCP, IPAM) and cloud DNS (AWS Route 53, Azure DNS/Private DNS, Google Cloud DNS), with hybrid DNS resolution across on-premises and multi-cloud environments.
• Integrate IPAM/DDI with the CMDB to keep IP, host, and network records accurate and in sync, using discovery data and API-driven reconciliation to detect and correct drift.
• Design and operate DNS security controls, including DNSSEC, DNS firewall (e.g., Infoblox BloxOne Threat Defense), protection against DNS attacks
• Design and manage CDN, WAF, bot management, and DDoS protection using Akamai and Cloudflare, including rule tuning, policy management, and traffic analysis.
• Design and operate load balancing and traffic management, including F5, cloud-native load balancers (AWS ELB/ALB, Azure Application Gateway, GCP Load Balancing), and global server load balancing.

Automation and Infrastructure as Code

• Write, test, and maintain Terraform modules to provision DNS, edge, and load balancing services across AWS, Azure, and GCP, setting shared-module patterns.
• Build Python tooling and API integrations (e.g., Infoblox WAPI, Akamai ,Cloudflare APIs) to remove repetitive manual tasks and improve consistency.
• Build and improve CI/CD pipelines for changes, including automated validation, pre-deployment testing, and policy checks.
• Develop automated configuration and compliance checks to catch deviations from approved standards (e.g., DNS records, WAF policies, IPAM allocations) early.
• Follow good engineering practice in shared repositories: version control, peer review, modular code, and clear documentation.

Collaboration and Continuous Improvement

• Serve as subject matter expert and third-line escalation point for complex incidents, leading root cause analysis.
• Collaborate with application, product, engineering, and security teams to deliver changes meeting enterprise standards and compliance requirements.
• Plan and execute approved changes within agreed maintenance windows, with documented back-out steps, and join out-of-hours change windows as required.
• Produce and maintain architecture documentation, automation runbooks, and standard operating procedures.
• Mentor engineers, share knowledge, and identify ways to reduce risk, improve efficiency, and raise standards.

What We're Looking For

Basic Required Qualifications

• 5+ years' experience in network or infrastructure engineering supporting hybrid, multi-cloud environments.
• Extensive hands-on experience with Infoblox DDI, including DNS architecture, DHCP, and IPAM design and operations.
• Hands-on experience with DNS in Infoblox and at least two cloud DNS providers: AWS Route 53, Azure DNS, Google Cloud DNS.
• Strong experience with Akamai and/or Cloudflare, including CDN, WAF, bot mitigation, and DDoS protection.
• Hands-on experience with load balancers (e.g., F5, NGINX, AWS ELB/ALB, Akamai GTM).
• Strong experience with Terraform and Infrastructure as Code, including module design and Git-based version control.
• Proficiency in Python for automation and API integration, following software development best practices (testing, code review).
• Solid understanding of core networking, DNS, and HTTP protocols, able to read configuration as code and assess a change's impact before deploying it.
• Strong troubleshooting and analytical skills, with attention to detail.
• Ability to manage multiple projects and priorities simultaneously.
• Excellent written and verbal communication skills, and the ability to work effectively in a cross-functional team.

Additional Preferred Qualifications

• Experience querying observability and logging platforms (e.g., Splunk, Grafana , Google Secops etc) to analyze DNS, C