Senior Network Engineer - KSA

The Senior Network Engineer is responsible for leading and executing enterprise-wide migration initiatives from public to private IP addressing across applications, databases, servers, and network devices. This role ensures secure, resilient, and uninterrupted service delivery through careful planning, dependency analysis, execution, validation, and documentation of network changes in complex on-premises, cloud, or hybrid environments.

Key Responsibilities

• Conduct a comprehensive assessment of all servers, applications, databases, and network devices currently using public IP addresses.

• Develop a detailed IP migration plan covering timelines, phased execution, backup strategies, and service rollback procedures when required.

• Perform application and service dependency analysis to identify and mitigate the impact of IP address migration on interconnected systems.

• Design and allocate new private IP address ranges, ensuring full compatibility with the existing network architecture and infrastructure standards.

• Execute the migration from public to private IP addresses in a secure and controlled manner, while maintaining continuous operation of business-critical applications and services.

• Coordinate with security, systems, application, and operations teams to align firewall rules, routing, NAT, DNS, and access controls with the new private addressing model.

• Perform post-migration validation and testing to confirm service availability, performance, and network stability.

• Prepare and maintain comprehensive documentation for all migration phases, including implemented changes, encountered issues, root causes, and applied solutions.

• Assess and analyze all DNS records to identify unused, obsolete, or outdated entries.

• Classify DNS records based on criticality, activity level, and operational validity.

• Remove or update invalid, obsolete, or unnecessary DNS entries in accordance with approved change procedures.

• Ensure that DNS cleanup activities do not impact applications, services, or end users.

• Establish periodic review procedures to maintain the accuracy and health of DNS records on an ongoing basis.

• Document all DNS review, cleanup activities, and applied changes for audit, compliance, and operational reference.

• Strong expertise in enterprise network design, IP addressing (IPv4/IPv6), subnetting, and routing protocols.

• Hands-on experience with IP address migration projects in large-scale environments (on-prem, cloud, or hybrid).

• Solid knowledge of firewalls, load balancers, DNS, NAT, VPNs, and network security controls.

• Experience working with high-availability and mission-critical environments, ensuring zero or minimal downtime.

• Ability to analyze complex application-to-network dependencies.

• Familiarity with change management, rollback planning, and disaster recovery practices.

• Bachelor’s degree in Computer Science, Information Technology, or a related field

• Relevant certifications such as CCNP/CCIE, JNCIP/JNCIE, Infoblox Technical Certifications or equivalent are highly prefer.