Network Engineer (DNS/Proxy)

About the role

Assurity Trusted Solutions (ATS), a wholly owned subsidiary of GovTech, is hiring a Network Engineer (DNS & Proxy) in Singapore. You will design, build and evolve the name-resolution and secure web access services that connect users, applications, data centres and cloud platforms, solving availability, performance and security challenges while codifying infrastructure, automating operations and exploring practical network AI mechanisms.

Key responsibilities

• Operate and continuously improve production DNS, DNSSEC, protective DNS and secure web proxy services as an in-house capability.
• Perform troubleshooting, incident response, change implementation, lifecycle management, backup, recovery and root-cause analysis.
• Engineer DNS zones, records, delegations, forwarding, caching, split-horizon DNS, access controls, DNSSEC signing and proxy policies.
• Build and maintain automation scripts, playbooks, pipelines and reusable modules using Python, PowerShell, Ansible, Terraform, REST APIs or equivalent tools.
• Codify infrastructure, configurations and policies using Infrastructure as Code, configuration-as-code, Git and CI/CD workflows.
• Analyse DNS queries, proxy logs and threat intelligence to detect malicious domains, tunnelling, command-and-control traffic and policy violations.
• Integrate DNS and proxy services with identity, firewall, cloud, monitoring, SIEM, ITSM and threat-intelligence platforms.
• Explore network AI and AIOps use cases for anomaly detection, event correlation, predictive analysis and governed remediation.
• Work with vendors and partners while retaining internal technical ownership and accountability for production outcomes.

Required profile

• At least five years of relevant experience in enterprise network, infrastructure or security engineering, with hands-on responsibility for production DNS and proxy services.
• Experience with enterprise DDI platforms (DNS, DHCP, IPAM); Infoblox, Bluecoat or equivalent is advantageous.
• Strong experience with enterprise proxy or secure web gateway platforms, including access controls, URL filtering, authentication, TLS inspection, certificate management and log analysis.
• Interest in AI-enabled network operations, with the discipline to validate recommendations and keep human oversight over production changes.

Required skills

• Authoritative and recursive DNS, DNSSEC, encrypted DNS, TCP/IP, IPv4/IPv6, HTTP/HTTPS, TLS, routing, NAT, firewalls, load balancing, Anycast.
• Python or PowerShell, REST APIs, Ansible or Terraform, Git, CI/CD, automated testing and configuration management.
• Monitoring, telemetry, observability, log analytics, SIEM or event-correlation platforms.

What we offer

• Remuneration commensurate with qualifications and experience.
• Annual leave, with additional perks such as Family Care and Birthday Leave; contract staff enjoy the same benefits as permanent employees.
• A learning culture within a GovTech subsidiary.