Contract: 6 month contract with ongoing extension Compensation: T4: $61/HR-$65/HR | IC: $70/HR-$77/HR DDI Engineering under the Network Engineering & Design division is responsible for the oversight, management, design, and engineering of the bank's core network services (DNS, DHCP, IPAM) globally.
Requirements ~8+ years of network engineering experience with a minimum 5 years on DDI platforms (Infoblox, BlueCat, BT/Cygna Labs Diamond IP - an asset). ~ Bachelor's degree in Engineering, Computer Science, or a related technical field.
Technical Requirements
Expertise in DNS architecture and redundancy - ISC BIND & Microsoft DNS. Expertise in DHCP architecture and failover - ISC DHCP & Kea. Exceptional knowledge in DNS fundamentals and ability to differentiate between querying, forwarding, recursion, delegation, zone transfers and caching mechanisms.
Exceptional knowledge in DHCP fundamentals – bootp, PXE, vendor options, client classes. Hands-on experience in IP management (IPv4 & IPv6), capacity planning , subnet aggregation, route summarization, and brand (IP & domain) protection measures. Hands-on experience with day-to-day DDI operations and DNS/DHCP configuration management in a large enterprise environment.
Experience with Intranet (internal) & Extranet DNS design – vendor / B2B / peer networks.
Experience with Public (external) DNS management – domain registrars, ownership transfers.
Experience with Public IP & ASN management – regional registries (ARIN), IXPs, IRR, RPKI.
Experience with CDNs (Akamai, Cloudflare), application delivery, and web (301/302) redirections.
Experience with Public Clouds (AWS, Azure) and designing scalable Hybrid DNS architectures.
Experience in providing DNS solutions in case of mergers, acquisitions, and divestitures ( M&A; ).
Experience with DNS security - DNSSEC, DNS Firewall, email (SPF, DMARC, DKIM), CAA. Advanced troubleshooting, reverse engineering, and root cause analysis (RCA) skills. Advanced scripting skills in Python and/or bash - telemetry & network tool integration experience.
Advanced knowledge in Load Balancers (LTM/GTM), GSLB , NTP, SSL/TLS, traffic steering . Strong proficiency in Unix/Linux operating systems – cronjobs, logging, hardening techniques. Strong proficiency in network automation using SOAP and/or RESTful APIs .
Adept with routing protocols ( BGP , OSPF, EIGRP), NAC (DHCP snooping, 802.1x, MAC auth), IDS/IPS, IPSEC VPN, Firewalls ( NAT , PAT), Proxy (forward/reverse), SDA, SDWAN, and SASE. Practical understanding of data structures, algorithms , and database ( MySQL ) fundamentals. Excellent communication (verbal & written) skills with ability to create technical documentation (SOP, BCP, deploy guides, conventions/templates) and network diagrams .
Analytical ability to decipher complex technical requirements and convey subsequent solutions in an effective manner to cross-functional teams & senior leadership. Willingness to learn, adapt to recent processes , and deliver projects within specified deadlines. Nice-to-Have Banking / Finance experience a big plus.
DDI Certifications and CCNA/CCNP. Audit & Compliance experience with internal and/or external regulatory bodies. Proficiency with SIEM platforms (Elastic ELK, Splunk) and vulnerability management .
Familiarity with ITIL , ITSM, TOGAF, SDLC , Release Management, PM (Agile/Scrum, Waterfall).
📌 Network Engineer (Information Technology) (Toronto)
🏢 Swoon
📍 Toronto