Senior Network Engineer
Summary
Senior Network Engineer responsible for planning and executing a large-scale public-to-private IP address migration and DNS cleanup across enterprise infrastructure, coordinating across security, systems, and ops teams. Core tech: IPv4/IPv6, routing protocols, firewalls, DNS, NAT, VPNs, and load balancers.
Key responsibilities
• Conduct a comprehensive assessment of all servers, applications, databases, and network devices currently using public IP addresses.
• Develop a detailed IP migration plan covering timelines, phased execution, backup strategies, and service rollback procedures when required.
• Perform application and service dependency analysis to identify and mitigate the impact of IP address migration on interconnected systems.
• Design and allocate new private IP address ranges, ensuring full compatibility with the existing network architecture and infrastructure standards.
• Execute the migration from public to private IP addresses in a secure and controlled manner, while maintaining continuous operation of business-critical applications and services.
• Coordinate with security, systems, application, and operations teams to align firewall rules, routing, NAT, DNS, and access controls with the new private addressing model.
• Perform post-migration validation and testing to confirm service availability, performance, and network stability.
• Prepare and maintain comprehensive documentation for all migration phases, including implemented changes, encountered issues, root causes, and applied solutions.
• Assess and analyze all DNS records to identify unused, obsolete, or outdated entries.
• Classify DNS records based on criticality, activity level, and operational validity.
• Remove or update invalid, obsolete, or unnecessary DNS entries in accordance with approved change procedures.
• Ensure that DNS cleanup activities do not impact applications, services, or end users.
• Establish periodic review procedures to maintain the accuracy and health of DNS records on an ongoing basis.
• Document all DNS review, cleanup activities, and applied changes for audit, compliance, and operational reference.
Requirements
• Strong expertise in enterprise network design, IP addressing (IPv4/IPv6), subnetting, and routing protocols.
• Hands-on experience with IP address migration projects in large-scale environments (on-prem, cloud, or hybrid).
• Solid knowledge of firewalls, load balancers, DNS, NAT, VPNs, and network security controls.
• Experience working with high-availability and mission-critical environments, ensuring zero or minimal downtime.
• Ability to analyze complex application-to-network dependencies.
• Familiarity with change management, rollback planning, and disaster recovery practices.
• Bachelor’s degree in Computer Science, Information Technology, or a related field.
• Relevant certifications such as CCNP/CCIE, JNCIP/JNCIE, Infoblox Technical Certifications or equivalent are highly preferred.