Senior Lead DDI Engineer

RoleObjective&AlignmenttoGCC Vision:

This role is a core contributor to Zurichs AI native Global Capability Center (GCC), where Network & Security Operations is delivered with built in intelligence, automation, and continuous optimization from day one.

TheSeniorDDIEngineerisexpectedtoengineerandoperateglobal DNS/DHCP/IPAM

services and to systematically augment DDI delivery using AI assisted observability, anomalydetection,incidenttriage,andautomatedremediationrecommendations.Therole enables higher availability, faster time to restore, improved change success rates, and scalable operations across hybrid and multi cloud environments.

Role Summary:

We are seeking a Senior DDI Engineer to join Network & Security Operations (NetSec Ops). This role is responsible for the design, operation, and continuous improvement of enterprise DDI (DNS, DHCP, IP Address Management) services at global scale.

You will operate and evolve the Blue Cat DDI platform (experience with Infoblox or equivalent enterprise DDI solutions is acceptable). You will partner with Network, Security, Cloud, and Operations teams to improve reliability, resiliency, and delivery efficiency while leveraging enterprise approved AI capabilities to strengthen observability and accelerate troubleshooting.

KeyResponsibilities:

• Operateandsupport enterpriseDNS,DHCP,andIPAMservices(authoritative,recursive, caching; internal and external).
• Designandmaintainresilient,multi regionDDIarchitecturesacrosson premisesand cloud environments (AWS, Azure).
• OwnincidentsandproblemmanagementforDDI:triage, troubleshooting,root cause analysis, and prevention actions.
• Applystandards,governance,andchange controlforDDIservices,ensuringhighchange success rate and audit ready documentation.
• IntegrateDDIwithsecurity andnetworkservices(e.g.,logging/telemetry,threat detection, service discovery, load balancing) to improve end to end service resilience.
• DriveDDItransformationinitiativesincludingautomation,cloud adoption,andservice scalability.
• Contributetooperationalmaturity: runbooks,monitoringstandards,SLO/SLAtracking and continuous improvement.
• Participateinon callrotations supportingglobaloperations.

AI Driven Outcomes Expected from This Role:

• Improved DDI reliability through AI assisted observability and early detection of abnormalDNSquerypatterns, latencyspikes,cache hitdegradation,andfailure trends.
• Fasterincidenttriageandroot causeisolationbyusingAI assistedcorrelationacross
• DNS/DHCPlogs,metrics,topology/dependencydata,andrecentchanges.
• Reduced MTTR by applying AI supported remediation suggestions (e.g., configuration rollbackcandidates,likelyupstreamdependencyfailures)withengineer validationand change controls.
• ProactiveriskreductionviaAI assistedtrendanalysistoidentifycapacity hotspots, misconfigurations,andresiliencegapsbeforecustomer impact.
• HigheroperationalefficiencybyusingAItoaccelerateimpactanalysis,generate clear incident summaries, and standardise diagnostics and runbook updates.

AI RelatedCapabilities&Skills(Outcome Focused):

AI EnabledDelivery&Engineering:

• Demonstrated ability to use AI assisted capabilities available within approved enterpriseplatformstoacceleratetroubleshooting,changeimpactanalysis, and documentation.
• AbilitytotranslateDDIproblemstatementsintowell structuredprompts/queriesthat improve signal to noise in logs/telemetry and quickly surface likely causes.
• Experience validating AI assisted outputs against evidence (resolver behaviour, logs/metrics,packet paths)beforeexecution;understandssafe useboundariesin security environments.
• AbilitytouseAIassistancetodraftandrefineautomationartifacts(scripts,APIcalls,IaC snippets) with peer review and testing before production use.

IntelligentNetworkOperations:

• Capabilitytoleverage AI supportedinsightstoidentifyrecurringDDIfailurepatterns (e.g., resolution timeouts, recursion failures, DHCP scope exhaustion) and translate them into preventative controls.
• Ability to build and tune AI informed detections for anomalies (query spikes, NXDOMAIN bursts, unusual recursion behaviour) to reduce false positives and improve signal quality.
• StrongunderstandingofwhereAIcanaugmentbutnotreplace engineering judgement, change governance, and accountability in network operations.

CoreTechnical Skills:

• DeepexpertiseinenterpriseDNS(authoritative/recursive),DHCP, andIPAMdesign and operations at scale.
• Hands on experience with BlueCat, Infoblox, or equivalent DDI platforms, including multi site resiliency and operational tooling.
• Strong troubleshooting across DNS resolution paths, performance/latency, caching behaviour, and dependency chains.
• Hybrid/multi cloudnetworkingfundamentals(AWSandAzureDNSconstructs, routing, security controls, certificates/TLS).
• ExperiencewithITSMandchange managementprocesses(ServiceNowpreferred); ability to produce audit ready evidence.
• Automationmindset:APIs,scripting,and/or infrastructureascodeforrepeatableDDI provisioning and health checks (nice to have).

Required Experience:

• 5+ years of hands-on experience operating enterprise DDI platforms (BlueCat, Infoblox, or equivalent).
• StrongknowledgeofDNS,DHCP,andIPAMfundamentalsinlargeenterprise environments.
• Experienceoperating DDIservicesinhybrid(on premisesandpubliccloud) environments.
• Provenincident managementandroot causeanalysiscapabilityforhigh impactDDI issues.
• ExperienceworkinginSLA driven,globally distributedoperationsteams,including on call.
• StrongcommunicationandstakeholdercoordinationskillsacrossNetwork, Security, Cloud, and Operations.

Candidate Data Privacy Notice:

Applicability of This Notice This job posting relates to opportunities with Zurich Digital International Private Ltd. (Zurich) and is published with the support of ANSR Inc., (ANSR) an authorized recruitment service provider engaged by Zurich for its hiring activities.

Participation in the Recruitment Process : When you apply for this role, personal data provided as part of your application (such as your name, email address, contact details, address, financial information, background information, medical history, and details of previous employers/employment) is collected for the purposes of recruitment and selection and may be reviewed by Zurich, and transferred/disclosed to Zurichs affiliates, subsidiaries, and related entities and ANSR (Transferees), solely for recruitment and selection purposes (in accordance with their respective privacy policies).

The Transferees maintain at least the same level of protection for your data as maintained by Zurich, and do not further transfer/disclose/share or publish your data.

For information on how your personal data is processed by ANSR, including your rights and how to contact the relevant data protection office, please review:
ANSR Privacy Policy:ANSR Privacy Policy - Ensuring Data Security