Network Engineer - DNS/Proxy
No salary listed
Senior
Singapore
Hybrid
IT OperationsNetwork Engineering & Administration
About the job
Requirements
- At least five years of relevant experience in enterprise network, infrastructure or security engineering, with substantial hands-on responsibility for production DNS and proxy services.
- Deep knowledge of authoritative and recursive DNS, zone delegation, record lifecycle management, forwarding, caching, split-horizon DNS, DNSSEC, encrypted DNS and systematic troubleshooting.
- Hands-on experience with enterprise DDI platforms covering DNS, DHCP and IP address management.
- Strong experience operating enterprise proxy or secure web gateway platforms, including access controls, URL filtering, authentication, TLS inspection, certificate management, bypass policies and log analysis.
- Sound knowledge of protective DNS, response policy zones, domain reputation, DNS logging, query analytics and DNS-based threat detection.
- Strong understanding of TCP/IP, IPv4 and IPv6, HTTP/HTTPS, TLS, routing, NAT, firewalls, load balancing, Anycast and common application traffic flows.
- Proficiency in Python or PowerShell, REST APIs and automation tools such as Ansible or Terraform, with practical exposure to Git, CI/CD, automated testing and configuration management.
- Experience with monitoring, telemetry, observability, log analytics, SIEM or event-correlation platforms, and the ability to turn operational data into action.
- An interest in AI-enabled network operations, with the discipline to validate recommendations, protect operational data and retain appropriate human oversight over production changes.
- Strong analytical and troubleshooting skills to resolve difficult multi-layer or multi-vendor problems.
- Clear written and verbal communication, technical documentation, stakeholder-engagement and vendor-management skills.
Responsibilities
- Operate and continuously improve production DNS, DNSSEC, protective DNS and secure web proxy services as an in-house capability.
- Perform hands-on troubleshooting, incident response, change implementation, lifecycle management, backup, recovery and root-cause analysis.
- Engineer DNS zones, records, delegations, forwarding, caching, split-horizon DNS, access controls, DNSSEC signing and proxy policies.
- Build and maintain automation scripts, playbooks, pipelines and reusable modules using Python, PowerShell, Ansible, Terraform, REST APIs or equivalent tools.
- Codify infrastructure, configurations and policies using Infrastructure as Code, configuration-as-code, Git and CI/CD workflows.
- Analyse DNS queries, proxy logs and threat intelligence to detect malicious domains, tunnelling, command-and-control traffic and policy violations.
- Integrate DNS and proxy services with identity, firewall, cloud, monitoring, SIEM, ITSM and threat-intelligence platforms.
- Explore practical network AI and AIOps use cases for anomaly detection, event correlation, predictive analysis, troubleshooting and governed remediation.
- Work with vendors and partners where required while retaining internal technical ownership, operational control and accountability for production outcomes.
Desired Qualifications
- Experience with Infoblox, Bluecoat or an equivalent enterprise DDI platform is advantageous.
About the company
Assurity Trusted Solutions sells technology services to Singapore government agencies and commercial customers. Its engineers take digital products from design through operation, while managed services teams support the infrastructure and business processes behind them. Its assurance practice advises customers on cyber risks and tests applications, networks and systems for weaknesses before attackers exploit them. The business also supports agency product adoption, connecting government services with users and private sector organisations. Founded in 2010 by Singapore's Infocomm Development Authority, Assurity is headquartered in Singapore and is a wholly owned subsidiary of the Government Technology Agency.
Company Size
201-500
Company Stage
N/A
Total Funding
N/A
Headquarters
N/A
Founded
2010
Get referred to Assurity Trusted Solutions
See people who can refer or advise you
Simplify's Take
What believers are saying
- Contract staff retain benefits: the current senior manager vacancy promises the same package as permanent employees.
- Hybrid work is available: the Singapore Singpass Product Ops Specialist vacancy lists a hybrid workplace.
- Extra leave is documented: the Platform Operations Engineer vacancy lists family care and birthday leave.
What critics are saying
- Employment has an end date: the infrastructure operations senior manager contract runs until March 2029, with conditional renewal.
- Government focus concentrates exposure: Assurity's cybersecurity supplier profile assigns 90% of its target-sector focus to public-sector customers.
- Assurity's DevSecOps opening combines production troubleshooting with product-roadmap ownership: one job covers operations and product management.
What makes Assurity Trusted Solutions unique
- External credentials back testing: Assurity holds CREST penetration testing accreditation and ISO27001 certification for information security management.
- National trust infrastructure falls within Assurity: its leadership oversees National Certification Authority operations and security.
- Governance spans sectors: Assurity's board includes GovTech officials alongside banking and consulting leaders.
Help us improve and share your feedback! Did you find this helpful?