Senior DDI Engineer

Job description

Infosys is seeking a Senior Infoblox DDI Engineer for a Global Capability Center (GCC) in Hyderabad, India to serve as the technical authority for enterprise DNS, DHCP, and IP Address Management (IPAM) services within our Infoblox Grid/NIOS platform. We are specifically looking for candidates who can join immediately (015 days notice period only) in Hyderabad. **Roles and Responsibilities** **DDI Architecture & Technical Leadership** - Lead enterprise-wide DNS, DHCP, and IPAM architecture design and lifecycle management - Define and maintain DNS zone structures, delegations, split-horizon configurations, and dual-stack (IPv4/IPv6) models - Design and implement DNSSEC policies, Response Policy Zones (RPZ), and DNS security controls - Architect DHCP failover strategies, scope planning methodologies, reservation policies, and option-based assignments - Establish IPAM governance frameworks, hierarchical CIDR planning, capacity forecasting, and documentation standards **Advanced DDI Engineering & Operations** - Oversee complex DDI implementations including multi-datacenter configurations and disaster recovery architectures - Design and validate DNS/DHCP changes for application migrations, new service deployments, and infrastructure transformations - Implement advanced Infoblox features including Grid replication, DNS Traffic Control (DTC), and threat intelligence integration - Lead troubleshooting efforts for complex DNS propagation issues, DHCP lease conflicts, and performance optimization - Serve as senior escalation point for critical DDI outages affecting banking applications **Automation & Integration Leadership** - Drive automation initiatives using Infoblox WAPI (RESTful API), Ansible, Terraform, and Python - Develop and maintain automation frameworks for bulk DDI operations, migration workflows, and self-service capabilities - Integrate DDI automation with CI/CD pipelines, ServiceNow workflows, and internal platform engineering tools - Build declarative infrastructure-as-code templates and modules for repeatable DDI deployments - Enable API-driven DDI provisioning to support application team self-service requirements **Cross-Platform Integration & Collaboration** - Partner with F5 engineering teams on DNS/GSLB integration, VIP naming standards, SSL certificate automation, and traffic routing - Collaborate with network teams on routing integration, BGP anycast implementations, and multi-site architectures - Work with security teams on DNS filtering, threat feed integration, malware domain blocking, and compliance reporting - Coordinate with application teams on DNS requirements, load balancing integration, and service discovery patterns **Standards Development & Compliance** - Develop and enforce DDI engineering standards, operational runbooks, and security guardrails - Ensure compliance with banking regulations, audit requirements, and change management processes - Create and maintain comprehensive documentation including architecture diagrams, process flows, and troubleshooting guides - Establish monitoring, alerting, and reporting frameworks for DDI service health and performance