VP, Network Engineering

Job Summary:

This role is for a member of the MUFG Bank Enterprise Network Engineering and Operations team and will provide collaboration and support within the team and across IT to ensure that load balancing and DNS infrastructures are up and running 24x7, support corresponding projects, and provide sound engineering with best redundant architectures and practices. The job is pivotal in supporting load balancing of on-prem and AWS hosted mission critical applications and core Domain Name Services for the financial institution.

The ideal candidate will proactively review current infrastructure architecture, engineer future cloud migration projects, and ensure that sound security controls and high availability are embedded across the infrastructure lifecycle.

Responsibilities:

• Maintain the organization’s DNS / DHCP infrastructure, including installing, configuring, upgrading and managing DNS servers and zones in-house and AWS.
• Designing, configuring, managing and troubleshooting DNS infrastructure using services like Amazon Route 53 and its related tools, such as the DNS Firewall, to ensure scalable, secure, and reliable domain name resolution and traffic management for cloud environments. Responsibilities include configuring and managing public and private hosted zones, record sets, implementing various routing policies, and ensuring high availability through health checks and failover mechanisms.
• Record management: Create, update, and manage DNS records (A, CNAME, MX, TXT) for various systems, including web, email, and other network and applications services.
• Maintain comprehensive records of DNS/F5 architecture diagrams, IP schema etc.
• Assist with domain registration, transfers, and renewals
• Manage domain security features for customers, such as domain privacy protection and domain locking.
• Understanding of SSL/TLS, security protocols, and certificate management
• Be able to provide 24x7 on call rotation for DNS/f5 related issues.
• Address security vulnerabilities and patching for both DNS and F5 load balancing environments in-house and in AWS environments.

Qualifications:

• BS Degree in Computer Science or related technical area preferred.
• 7-10+ years’ hands on experience with design/implement/configure/maintain enterprise-level DNS, F5, AWS route 53 and AWS load balancing infrastructures.
• AWS Certified Solutions architect and AWS Certified Advanced Networking are a must.
• Infoblox DNS / DHCP / IPAM / Threat Defense product hardware and configurations hands on experience a must.
• F5 LTM/GTM virtual hardware and configurations including iRules hands on experience a must.
• Hands on proficiency with AWS load balancing services - AWS ALB / ELB / NLB / CLB / GLB
• Hands on knowledge of tools like Ansible, CloudFormation or Terraform to automate DNS provisioning, configuration, and updates in AWS route 53 and load balancing environments.
• Understanding of SSL/TLS, security protocols, and certificate management
• Strong communications skills are a must.
• Strong project management skills are a must.
• In depth knowledge of scripting with python, PowerShell preferred

Education:

Bachelor’s degree in Computer Science or a closely-related discipline, or an equivalent combination of formal education and experience