DDI Network Engineer

Salary: $70,000 - 150,000 per year Requirements: At least 8 years of network engineering experience, including 5 or more years working with DDI platforms such as Infoblox or BlueCat; experience with BT/Cygna Labs Diamond IP is an asset. Bachelors degree in Engineering, Computer Science, or a related technical field. Expert knowledge of DNS architecture and redundancy, including ISC BIND and Microsoft DNS, and strong understanding of DNS querying, forwarding, recursion, delegation, zone transfers, and caching. Expert knowledge of DHCP architecture and failover, including ISC DHCP and Kea, and strong understanding of BOOTP, PXE, vendor options, and client classes. Hands-on IP management experience with IPv4 and IPv6, capacity planning, subnet aggregation, route summarization, and IP and domain brand protection. Experience with enterprise DDI operations and DNS/DHCP configuration management; intranet and extranet DNS design for vendor, B2B, and peer networks; and public DNS management, including registrars and ownership transfers. Experience managing public IP addresses and ASNs, including work with regional registries such as ARIN, IXPs, IRR, and RPKI. Experience with CDNs such as Akamai and Cloudflare, application delivery, and 301/302 web redirects. Experience with AWS and Azure and with designing scalable hybrid DNS architectures. Experience delivering DNS solutions for mergers, acquisitions, and divestitures. Experience with DNS security, including DNSSEC, DNS firewalls, SPF, DMARC, DKIM, and CAA. Advanced troubleshooting, reverse engineering, and root-cause analysis skills. Advanced Python and/or Bash scripting skills, ideally including telemetry and network-tool integration. Advanced knowledge of load balancers (LTM/GTM), GSLB, NTP, SSL/TLS, and traffic steering. Strong Unix/Linux proficiency, including cron jobs, logging, and system hardening. Strong network automation proficiency using SOAP and/or RESTful APIs. Familiarity with BGP, OSPF, EIGRP, NAC (including DHCP snooping, 802.1x, and MAC authentication), IDS/IPS, IPsec VPN, firewalls (NAT/PAT), forward and reverse proxies, SDA, SD-WAN, and SASE. Practical understanding of data structures, algorithms, and database fundamentals, including MySQL. Excellent written and verbal communication skills, including the ability to create technical documentation such as SOPs, BCPs, deployment guides, conventions, and templates, as well as network diagrams. Strong analytical skills, including the ability to interpret complex technical requirements and clearly present solutions to cross-functional teams and senior leaders. Willingness to learn, adapt to new processes, and deliver projects within deadlines. Banking or finance experience is a strong asset. DDI certifications and CCNA/CCNP are assets. Audit and compliance experience with internal and/or external regulatory bodies is an asset. Familiarity with SIEM platforms such as Elastic ELK or Splunk, and with vulnerability management, is an asset. Familiarity with ITIL, ITSM, TOGAF, SDLC, release management, and Agile/Scrum, Waterfall, or other project management approaches is an asset. Responsibilities: Oversee, manage, design, and engineer our global core network services, including DNS, DHCP, and IP address management (IPAM). Technologies: AWS Azure Bash ELK Support ITIL ITSM Linux MySQL NAT Network Python SOAP Security Splunk TOGAF Unix VPN Web Cloud Firewall SDWAN More: We are BMO Financial Group, guided by our purpose to boldly grow the good in business and life. We work together to create positive change for our customers, communities, and people, and to support economic growth around the world. This position is part of DDI Engineering within our Network Engineering & Design division and is based at 4100 Gordon Baker Road. The salaried pay range is $70,000–$150,000; compensation varies with factors such as location, skills, experience, education, and qualifications. Our total rewards may include performance incentives, discretionary bonuses, health insurance, tuition reimbursement, accident and life insurance, and retirement savings plans. We provide training, coaching, manager support, and opportunities to build professional networks and skills. We are committed to an inclusive, equitable, and accessible workplace and provide accommodations during the selection process upon request. last updated 40 week of 2026