Senior Network Engineer (DNS)

Location: Mainly remote in the United States, with some onsite work required in Fort Meade, Maryland, for classified and high-side activities; reporting to multiple locations may be required.

Compensation: $250,000 per hour.

Company

hirify.global delivers outsourced services and workforce solutions across North America.

What you will do

• Lead DNS architecture, technical direction, configuration standards, and engineering policy for mission-critical federal network infrastructure.
• Partner with the existing DNS SME to deliver independent technical workstreams and guide secure, resilient enterprise DNS services.
• Troubleshoot complex DNS and network issues using packet captures, query logs, routing tables, and diagnostic tools.
• Apply networking expertise across TCP/IP, BGP, OSPF, anycast, routing, and perimeter architectures.
• Guide DNS security and modernization initiatives, including DNSSEC, encrypted DNS, resolver privacy, and hardening.
• Translate RFCs and DoD requirements into engineering standards, mentor technical teams, communicate design decisions, and support documentation and accreditation activities.

Requirements

• 10+ years of network engineering experience, including hands-on troubleshooting and optimization of large enterprise or service-provider networks.
• U.S. citizenship and eligibility to obtain the required U.S. government security clearance; an active clearance is preferred but not required upfront.
• Strong routing and switching expertise, including TCP/IP, BGP, OSPF, and anycast.
• Experience with Cisco IOS, IOS-XE, or NX-OS; equivalent depth with Juniper or Arista is considered.
• Deep understanding of DNS protocols, resolution, caching, delegation, EDNS, and DNSSEC.
• Hands-on troubleshooting with Wireshark, tcpdump, and dig.
• Ability to work with Linux-based environments and collaborate with RHEL/BIND engineers.
• Experience leading technical initiatives, establishing engineering standards, or guiding technical decisions while remaining hands-on.
• Strong written and verbal communication skills.

Nice to have

• Experience with BIND, Unbound, Knot DNS, PowerDNS, Infoblox, or comparable DNS technologies.
• DoD, DISA, federal, Intelligence Community, or other secure government network experience.
• Familiarity with DNSSEC modernization, encrypted DNS, resolver privacy, protective DNS, or DNS security hardening.
• Experience with DISA STIGs, RHEL hardening, accreditation, or security compliance.
• CCNP, CCIE, JNCIP, JNCIE, or equivalent experience.
• Scripting and automation experience with Python or shell.

Culture & Benefits

• Contract-to-hire employment arrangement.
• Mainly remote work with onsite support for classified and high-side activities.
• Eligible employees may receive medical, dental, vision, spending account, life insurance, and voluntary plan coverage.
• Eligible employees may participate in a 401(k) plan.
• Equal opportunity employment practices apply.