Sr Network Engineer (DNS Infrastructure Engineer)
United States of America
Full Time
3 hours ago
$6,168 - $90 USD
No H1B
Key skills
DNSDHCPISC BINDISC KeaDNSSECTSIGDynamic DNS updatesAccess controlsRate limitingDisaster recoveryFailover strategiesIncident responseRoot-cause analysisAutomationVersion controlChange managementInfrastructure-as-CodeMonitoringCapacity planningAnycast DNSHybrid cloud DNSMulti-cloud DNSIPAM solutionsScripting - BashScripting - PythonHigh-availability environmentsAnalytical skillsClear writtenCalmness under operational pressurePythonBashExpressPostgreSQLMySQLVersion ControlLeadershipChange ManagementCollaboration
About this role
Federal Express Corporation is seeking a Senior DNS Infrastructure Engineer to lead the design, operation, and evolution of enterprise DNS and DHCP services. This role is critical to ensuring the availability, security, and scalability of name resolution and IP address services across the organization’s global infrastructure, while providing technical leadership and support for various systems.
Responsibilities:
- Design, implement, and maintain highly available DNS and DHCP services supporting enterprise and mission‑critical workloads
- Architect scalable DNS solutions for multi‑datacenter and hybrid environments
- Serve as the technical lead for DNS/DHCP design decisions and long‑term strategy
- Deploy and operate ISC BIND in authoritative and/or recursive roles
- Manage complex zone architectures, delegation models, and views
- Configure and maintain primary/secondary DNS servers and secure zone transfers
- Lead DNSSEC design, implementation, key management, and rollover procedures
- Optimize DNS performance, reliability, and query handling at scale
- Deploy and operate ISC Kea DHCP (IPv4 and IPv6)
- Design and manage subnet architecture, address pools, reservations, and options
- Implement and support DHCP high availability and lease persistence
- Integrate DHCP with DNS using secure dynamic updates (DDNS)
- Utilize database backends (e.g., PostgreSQL or MySQL) for lease management
- Implement DNS and DHCP security best practices, including:
- DNSSEC
- TSIG‑secured dynamic DNS updates
- Access controls and rate limiting
- Identify and mitigate DNS‑based threats and abuse
- Design and test disaster recovery and failover strategies
- Participate in incident response and root‑cause analysis
- Develop automation for DNS/DHCP deployment and configuration
- Enforce configuration standards using version control and change management
- Partner with automation teams to integrate DNS into Infrastructure‑as‑Code workflows
- Improve operational efficiency through tooling and process enhancements
- Implement monitoring, alerting, and logging for DNS/DHCP services
- Analyze trends in query volume, latency, and availability
- Perform capacity planning and scalability assessments
- Act as the DNS/DHCP subject matter expert across the organization
- Mentor junior engineers and review technical designs
- Collaborate with network, security, cloud, and application teams
- Provide technical input for audits, compliance reviews, and architectural planning
Requirements:
- Bachelor's degree in IT-related engineering, computer science or information systems or related field
- Five (5) years work experience in engineering or information technology environment
- Deep experience in ISC BIND and ISC Kea
- Experience in DNS & DHCP Architecture
- Experience in DNS Operations (ISC BIND)
- Experience in DHCP Operations (ISC Kea)
- Experience in Security & Reliability best practices
- Experience in Automation & Engineering Excellence
- Experience in Monitoring & Performance
- Experience in Leadership & Collaboration
- Experience with Anycast DNS deployments
- Hybrid or multi-cloud DNS integration experience
- Familiarity with IPAM solutions (e.g., Micetro, NetBox or similar)
- Experience migrating from appliance-based DNS/DHCP platforms
- Scripting experience (Bash, Python, or similar)
- Experience supporting regulated or high-availability environments