Job Title: Zero Trust Engineer
Location: Bangalore, India
What you will do:
As part of our global Zero Trust team, you will act as the strategic owner, design authority, and visionary architect for our global Infoblox Universal DDI infrastructure. You are expected to bring an "architect mindset" to command the entire Infoblox platform lifecycle. This includes driving global DNS re-architecture, orchestrating complex enterprise domain migrations, and leading advanced security integrations across a massive multi-cloud and on-premises environment. You will govern the platform from a top-down perspective, steering cross-functional teams and vendor professional services to ensure platform stability, optimize modern licensing consumption, and enforce a robust zero-trust network boundary.
How you will do it:
1. Global Platform Governance & Architecture: Command the Infoblox Universal DDI (BloxOne) platform with an architect’s mindset. Define and continuously optimize the global DNS topology across multi-cloud (Azure, AWS, GCP) and on-premises environments to maximize operational efficiency.
2. Complex Domain Migrations: Act as the ultimate technical authority leading large-scale, enterprise DNS migrations from legacy platforms (e.g., Microsoft DNS) to modern DDI solutions. Direct vendor Professional Services and internal cross-functional teams to mitigate technical risks and ensure seamless, zero-downtime cutovers.
3. Advanced DNS Security & Traffic Control: Architect and operationalize native Infoblox security and routing features. Lead strategic initiatives to replace legacy global load balancers with native DNS Traffic Control (DTC), enforce Response Policy Zones (RPZ), and evaluate next-gen capabilities like Threat Defense and Anycast DNS.
4. Proactive Monitoring & Cross-Team Leadership: Dictate the platform's reliability standards by designing a robust, comprehensive monitoring architecture (leveraging API metrics, standard network monitoring tools, and SIEM integrations). Govern overall platform health while collaborating closely with Global Network teams on DHCP and IPAM service consumption.
What we look for:
Required Skills (Must-Haves):
1. Demonstrated architect-level expertise in commanding and designing large-scale enterprise DNS/DDI platforms, specifically Infoblox Universal DDI (BloxOne) and NIOS-X cloud-managed architecture.
2. Strong architectural mindset with a proven track record of leading highly complex, globally distributed Active Directory DNS migrations and multi-cloud DNS topologies.
3. Ability to act as an authoritative technical leader, defining architectural standards, managing vendor relationships (e.g., Professional Services), and driving cross-functional infrastructure changes.
4. Solid knowledge of core networking and DNS security concepts, including DHCP/IPAM integrations, global server load balancing (DTC), and advanced security policies (e.g., RPZ).
.
Desirable Skills (Nice-to-Haves):
1. Infoblox Certifications (e.g., Core DDI Config & Admin or BloxOne equivalents).
2. Experience managing modern token-based DDI licensing consumption models and evaluating DNS-layer security modules.
3. Familiarity with deploying virtual network appliances via public cloud marketplaces (Azure, AWS, GCP).
4. Experience leveraging REST APIs, Python scripting, or similar tools to build automated monitoring workflows, self-service IT catalog integrations, and CMDB enrichment.