Senior DNS & IP Network Engineer
1,429,816 – 2,397,317 Ft / monthBrutto
Employer · Citigroup
System administratorCybersecurity specialistFull-timeMealsBudapest
Citi is looking for a Senior DNS & IP Network Engineer to own and evolve the enterprise DNS, DHCP, and IP Address Management (IPAM) infrastructure that underpins network connectivity across a global, multi-cloud environment. In this role, you will serve as the technical authority for DDI services, driving architecture decisions, automation initiatives, and security improvements that directly support Citi's global operations.
Tasks
- Design and implement highly available DNS architectures across global enterprise environments, ensuring resilience, scalability, and alignment with network security standards.
- Manage the full lifecycle of IPv4 and IPv6 address allocations — from subnet design and address planning through to utilization tracking, reclamation, and capacity forecasting.
- Own enterprise IP space governance, defining and maintaining IP allocation policies, standards, and workflows across data centers, cloud platforms, branch offices, and application environments.
- Coordinate public IP address allocations with Regional Internet Registries including ARIN, RIPE NCC, APNIC, and LACNIC, and manage related ASN and internet routing resource requirements.
- Build automation solutions for DNS, DHCP, and IPAM administration using Python, Ansible, Terraform, or REST APIs to reduce manual effort and improve operational consistency.
- Lead DNS security initiatives including DNSSEC deployment, Response Policy Zones (RPZ), threat intelligence integration, monitoring, logging, and DDoS protection measures.
- Investigate and resolve DNS, DHCP, and IP allocation incidents, producing root cause analyses and recommendations to prevent recurrence and strengthen service reliability.
Conditions & benefits
Cafeteria ProgramHome Office AllowanceFor colleagues working in hybrid work modelsPaid Parental Leave ProgramMaternity and paternity leavePrivate Medical Care ProgramPrivate Medical Care Program and onsite medical rooms at our officesPension Plan ContributionContribution to voluntary pension fundGroup Life InsuranceEmployee Assistance Program
Requirements
- 5 to 10 years of hands-on experience in enterprise DNS, DHCP, IPAM, or network infrastructure engineering.
- Deep knowledge of IPv4 and IPv6 addressing, subnetting, CIDR notation, route summarization, and address utilization analysis applied in large-scale environments.
- Demonstrated ability to architect, administer, troubleshoot, and secure enterprise DNS services across authoritative and recursive resolvers.
- Practical experience managing IP address allocations across data centers, cloud platforms, and branch networks, including governance and lifecycle processes.
- Experience working with enterprise DDI platforms such as Infoblox, BlueCat, TCPWave, or EfficientIP.
- Strong analytical and diagnostic skills, with a track record of resolving complex network infrastructure issues under pressure.
- Bachelor's degree in a relevant field, or equivalent professional experience.