Network & Cygna DDI Operations Engineer - L3

About the role

The Network & Cygna DDI Operations Engineer (L3) will serve as the senior technical focal point for a global customer’s network infrastructure and DDI platform. You will ensure high availability, performance and security while leading complex incident resolution and change management.

Key responsibilities

• Act as the final escalation point for LAN/WLAN, switches, routers and wireless issues, handling Priority 1/2 incidents and performing root‑cause analysis.
• Administer, design and optimise Cygna Labs DDI (IPControl, Diamond IP, Sapphire) including container hierarchy, address policies, least‑privilege access and DNSSEC.
• Develop DDI automation workflows using REST API, ServiceNow, Terraform and Cisco Catalyst Center, and synchronise across BIND/Kea, Microsoft and cloud platforms (AWS, Azure, GCP).
• Operate DDI security features such as Protective DNS, DNS firewall, DGA detection and forward logs to SIEM.
• Manage device lifecycle, perform LAN/WAN capacity planning, coordinate upgrades and work with Cisco TAC.
• Mentor L2 engineers, maintain runbooks, SOPs and documentation, and ensure compliance with ISO 27001, NIST and Zero‑Trust standards.

Required profile

• Bachelor’s degree in IT, networking or related field.
• Minimum 4 years of enterprise network operations/design experience with Cisco platforms.
• Strong background in advanced routing (OSPF, BGP, EIGRP), switching (VLAN, STP, VPC/stacking) and enterprise Wi‑Fi.
• Hands‑on experience with Cygna Labs DDI or equivalent (Infoblox, BlueCat, EfficientIP).
• Proficiency in English (B1 minimum) and ability to work independently in shifts.

Required skills

• Cisco enterprise routing & switching (OSPF, BGP, EIGRP, VLAN, STP, VPC, stacking)
• Enterprise Wi‑Fi, QoS, multicast
• Cygna Labs DDI platforms (IPControl, Diamond IP, Sapphire)
• DNSSEC, Protective DNS, DNS firewall, DGA detection
• REST API, ServiceNow, Terraform, Cisco Catalyst Center
• ISC BIND, Kea, Microsoft DNS/DHCP
• Cloud integration (AWS, Azure, GCP)
• SIEM log forwarding, ISO 27001, NIST, Zero‑Trust

What we offer

• Competitive salary aligned with experience, including a 13th‑month bonus.
• Opportunity to work on cutting‑edge network and DDI technologies for a global client.
• Professional development and certification support.