Bank of Montreal

DDI Network Engineer

Bank of Montreal • $70K — $150K *
Information Technology
8 - 10 years of experience
Job Overview by Ladders

Qualifications

  • 8+ years of network engineering experience with a minimum of 5 years on DDI platforms (e.g., Infoblox, BlueCat).
  • Bachelor's degree in Engineering, Computer Science, or a related field.
  • Expertise in DNS and DHCP architecture, including ISC BIND and ISC DHCP.
  • Advanced scripting skills in Python and/or bash for network automation.
  • Strong proficiency in Unix/Linux operating systems.

Responsibilities

  • Oversee the design and engineering of DDI core network services globally.
  • Manage day-to-day DDI operations and configuration in a large enterprise environment.
  • Implement and maintain DNS and DHCP architecture, including failover solutions.
  • Develop DNS solutions during mergers, acquisitions, and divestitures.
  • Ensure DNS security through measures like DNSSEC and SPF.

Benefits

  • Health insurance
  • Tuition reimbursement
  • Accident and life insurance
  • Retirement savings plans
  • Performance-based incentives and discretionary bonuses.
Full Job Description
Application Deadline:

10/29/2026

Address:
4100 Gordon Baker Road

Job Family Group:

Technology

DDI Engineering under the Network Engineering & Design division is responsible for the oversight, management, design, and engineering of the bank's core network services (DNS, DHCP, IPAM) globally.

Requirements:
  • 8+ years of network engineering experience with a minimum 5 years on DDI platforms (Infoblox, BlueCat, BT/Cygna Labs Diamond IP - an asset).
  • Bachelor's degree in Engineering, Computer Science, or a related technical field.

Technical Requirements:
  • Expertise in DNS architecture and redundancy - ISC BIND & Microsoft DNS.
  • Expertise in DHCP architecture and failover - ISC DHCP & Kea.
  • Exceptional knowledge in DNS fundamentals and ability to differentiate between querying, forwarding, recursion, delegation, zone transfers and caching mechanisms.
  • Exceptional knowledge in DHCP fundamentals - bootp, PXE, vendor options, client classes.
  • Hands-on experience in IP management (IPv4 & IPv6), capacity planning, subnet aggregation, route summarization, and brand (IP & domain) protection measures.
  • Hands-on experience with day-to-day DDI operations and DNS/DHCP configuration management in a large enterprise environment.
  • Experience with Intranet (internal) & Extranet DNS design - vendor / B2B / peer networks.
  • Experience with Public (external) DNS management - domain registrars, ownership transfers.
  • Experience with Public IP & ASN management - regional registries (ARIN), IXPs, IRR, RPKI.
  • Experience with CDNs (Akamai, Cloudflare), application delivery, and web (301/302) redirections.
  • Experience with Public Clouds (AWS, Azure) and designing scalable Hybrid DNS architectures.
  • Experience in providing DNS solutions in case of mergers, acquisitions, and divestitures (M&A).
  • Experience with DNS security - DNSSEC, DNS Firewall, email (SPF, DMARC, DKIM), CAA.
  • Advanced troubleshooting, reverse engineering, and root cause analysis (RCA) skills.
  • Advanced scripting skills in Python and/or bash - telemetry & network tool integration experience.
  • Advanced knowledge in Load Balancers (LTM/GTM), GSLB, NTP, SSL/TLS, traffic steering.
  • Strong proficiency in Unix/Linux operating systems - cronjobs, logging, hardening techniques.
  • Strong proficiency in network automation using SOAP and/or RESTful APIs.
  • Adept with routing protocols (BGP, OSPF, EIGRP), NAC (DHCP snooping, 802.1x, MAC auth), IDS/IPS, IPSEC VPN, Firewalls (NAT, PAT), Proxy (forward/reverse), SDA, SDWAN, and SASE.
  • Practical understanding of data structures, algorithms, and database (MySQL) fundamentals.
  • Excellent communication (verbal & written) skills with ability to create technical documentation (SOP, BCP, deploy guides, conventions/templates) and network diagrams.
  • Analytical ability to decipher complex technical requirements and convey subsequent solutions in an effective manner to cross-functional teams & senior leadership.
  • Willingness to learn, adapt to new processes, and deliver projects within specified deadlines.

Nice-to-Have:
  • Banking / Finance experience a big plus.
  • DDI Certifications and CCNA/CCNP.
  • Audit & Compliance experience with internal and/or external regulatory bodies.
  • Proficiency with SIEM platforms (Elastic ELK, Splunk) and vulnerability management.
  • Familiarity with ITIL, ITSM, TOGAF, SDLC, Release Management, PM (Agile/Scrum, Waterfall).


Salary:

$70,000.00 - $150,000.00

Pay Type:

Salaried

The above represents BMO Financial Group's pay range and type.

Salaries will vary based on factors such as location, skills, experience, education, and qualifications for the role, and may include a commission structure. Salaries for part-time roles will be pro-rated based on number of hours regularly worked. For commission roles, the salary listed above represents BMO Financial Group's expected target for the first year in this position.

BMO Financial Group's total compensation package will vary based on the pay type of the position and may include performance-based incentives, discretionary bonuses, as well as other perks and rewards. BMO also offers health insurance, tuition reimbursement, accident and life insurance, and retirement savings plans. To view more details of our benefits, please visit: https://jobs.bmo.com/global/en/Total-Rewards

About Bank of Montreal

The Bank of Montreal is a Canadian multinational investment bank and financial services company. It provides a wide range of personal and commercial banking, wealth management, and investment banking products and services. The bank had revenues of CAD 23.6 billion in 2020.
Learn more about Bank of Montreal
Size
45,454 employees
Market Cap
$60.9 billion
Industry
Founded
1817
5 Year Trend
+9.1%
NASDAQ

Similar Jobs

More Jobs at Bank of Montreal

More Information Technology Jobs

Find similar DDI Network Engineer jobs: