Principal Engineer, DNS (Domain Name System)

About ST Engineering

ST Engineering is a global technology, defence, and engineering group with offices across Asia, Europe, the Middle East, and the U.S., serving customers in more than 100 countries. The Group uses technology and innovation to solve real-world problems and improve lives through its diverse portfolio of businesses across the aerospace, smart city, defence, and public security segments. Headquartered in Singapore, ST Engineering ranks among the largest companies listed on the Singapore Exchange.

Our history spans more than 50 years, and our strategy is underpinned by our core values - Integrity, Value Creation, Courage, Commitment and Compassion. These 5 core values guide every aspect of our business and are embedded in our ST Engineering culture - from the people we hire, to working with each other, to our partners and customers.

About our Line of Business - Mission Software & Services

Our Mission Software & Services business provides leading-edge mission critical command, control, and communications (C3) systems with secured IT infrastructure and managed services. We support our client's innovation journey through design thinking, analytics, and AI-enabled decision support with our full suite of cloud computing solutions. We provide intelligent, actionable insights and sustainable solutions to our valued partners in diverse industries including defence, government, and commercial sectors.

Together, We Can Make A Significant Impact

The role involves managing and deploying DNSSEC (Domain Name System Security Extension) to secure DNS infrastructure. This includes a deep understanding of key DNSSEC concepts like the Zone Signing Key (ZSK), Key Signing Key (KSK), and digital signatures. The responsibilities cover the full DNSSEC lifecycle, from preparing and configuring DNS zones to signing zones and publishing DNSSEC records.

Be Part of Our Success

• Deep understanding of DNSSec Basics, eg what is one signing key (ZSK), key signing key (KSK), Digital Signatures, etc
• Able to prepare DNS Zone which will include identify the Zone and Check DNS Software Support
• Able to generate Cyrptographic Keys which will include generate ZSK and KSK and also select the correct key algorithm
• Able to sign the zone which include creation of DNSSec records
• Able to publish DNSSec records which include update DNS server configuration and test DNSSec Zone
• Able to establish a Chain of Trust which include parent zone delegation
• Able to maintain DNSSec which include Key rollover, monitor & audit
• Able to deploy DNSSec on Resolvers which include enable DNSSec Validation and Test Validation
• Able to troubleshoot DNSSec problems with appropriate tools

Qualities We Value

• Relevant certifications, such as CCNA or CCNP
• Relevant working experience in DNS
• Relevant experience in setup/ managed large scale DNS environment/ system for a large enterprise of MNC
• Strong knowledge of DNS and DNSSec.
• Excellent problem-solving and analytical skills.
• Strong communication and teamwork abilities

Our Commitment That Goes Beyond the Norm

• An environment where you will be working on cutting-edge technologies and architectures.
• Safe space where diverse perspectives are valued, and everyone's unique contributions are celebrated.
• Meaningful work and projects that make a difference in people's lives.
• A fun, passionate and collaborative workplace.
• Competitive remuneration and comprehensive benefits.