Cloud DNS Admin

Key skills:
DNS with cloud
AWS migration

We are looking for a DNS/DDI Engineer to join our team and help us...
- Design, deploy, and maintain AWS Route 53 DNS infrastructure that provides highly available and scalable DNS services across our network.
- Take inventory of the current current DNS system and work with IT stakeholders to design a modern cloud-based (AWS) DNS system.
- Collaborate with network engineers, system administrators, and cybersecurity specialists to integrate DNS solutions into our network architecture and security framework.
- Implement DNS policies, DNS views, and DNSSEC configurations to enforce access control, prevent DNS spoofing, and enhance the security of our DNS infrastructure.
- Where necessary, make changes and/or remediate issues with the current DNS system.
- Define workarounds for known errors and initiate process improvements and work with your peers to improve and/or remediate the configuration of the current current DNS system; identify and manage risks and issues
- Performs device configurations, internal operating system upgrades and software upgrades and deploys physical/VM appliances to support corporate DNS infrastructure.
- Troubleshoots DDI problems and recommends corrective procedures; leads troubleshooting DDI issues.
- Configure and maintain DNS, DHCP, and IP Address Management (DDI) solutions to ensure optimal performance and security.
- Maintain current DNSSEC infrastructure and configuration to enhance DNS security.
- Monitor and analyze DNS traffic for anomalies and potential threats.
QUALIFICATIONS
- BS or BA degree, Computer Science, Engineering, or equivalent education, training or work experience required
- 5+ years working as an DNS Engineer, with expertise in designing, implementing, and managing DNS protocols, DNSSEC, BIND, DHCP, IPAM, and related networking technologies, including TCP/IP, UDP, DNS over TLS (DoT), and DNS over HTTPS (DoH) solutions.
- Experience planning and executing migrations to or from any of the various DDI OEM platforms
- Deep knowledge on DNS and BIND, working knowledge of network automation for UNIX and Windows operating systems
- Experience with Disaster Recovery testing, and simulating a recovery environment.
- Experience with scripting languages, such as Python, Perl, Powershell, or BASH for automating tasks, generating reports, and interacting with APIs.
- Knowledge of cybersecurity principles and best practices related to DNS security, including DNS cache poisoning, DDoS attacks, and DNS firewall configurations.
- Certifications such as Infoblox Certified Implementation Engineer (ICIE), AWS solution architect, or equivalent certifications are desirable.
- Excellent analytical and problem-solving skills, with the ability to diagnose and resolve complex DNS issues and performance bottlenecks.
- Strong communication and interpersonal skills, with the ability to collaborate effectively with cross-functional teams and stakeholders.
- Ability to work independently and prioritize tasks in a fast-paced environment, managing multiple projects and deadlines effectively.