6 дней назад
Lead DNS Engineer
Вакансия из Hirify Global, списка международных tech-компанийДля мэтча и отклика нужен Plus
Мэтч & Сопровод
Для мэтча с этой вакансией нужен Plus
Описание вакансии
Текст:
TL;DR
Lead DNS Engineer (Carrier-Grade DNS): Designing, implementing, and modernising authoritative, recursive, and cache DNS services with an accent on resilience, security, automation, and service correctness. Focus on building hidden-master and anycast architectures, implementing DNSSEC and TSIG controls, leading complex migrations, and reducing technical risk across production platforms.
Location: Macquarie Park, NSW, Australia; hybrid arrangement with three days in the office and two days remote
Company
is an Australian telecommunications company delivering mobile, broadband, and digital services to more than 11 million customers.
What you will do
- Design and implement carrier-grade authoritative, recursive, cache, policy, and control-plane DNS services.
- Define target-state architecture, engineering standards, migration patterns, coexistence models, failover designs, and rollback strategies.
- Lead complex DNS upgrades, migrations, resilience improvements, service cutovers, and platform transition programs.
- Improve automation, validation, deployment workflows, observability, recovery readiness, and lifecycle management.
- Implement DNS security controls including DNSSEC, TSIG, response policy zones, access control, secure administration, and auditability.
- Provide senior technical leadership during incidents and critical changes, collaborate with platform, network, security, operations, and vendor teams, and mentor engineers.
Requirements
- Deep hands-on DNS engineering experience across authoritative, recursive, cache, and operational DNS services.
- Strong knowledge of DNS protocols, record types, zone design, split-horizon DNS, recursion, forwarding, and caching.
- Experience designing and implementing production DNS in large-scale enterprise, ISP, carrier, or service-provider environments.
- Experience with DNSSEC, TSIG, response policy mechanisms, access control, service hardening, hidden masters, secondaries, anycast, failover, and control/data-plane separation.
- Experience with DNS automation, validation, deployment, migration workflows, engineering documentation, incident response, and technical risk reduction.
- Strong communication and engineering judgement, with the ability to explain complex DNS concepts to technical and leadership audiences.
Nice to have
- Linux-based platform engineering, server and OS operations, virtualisation, observability, and lifecycle management.
- Knowledge of BGP anycast, load balancing, routing daemons, HA clustering, and service advertisement models.
- Experience with BIND, Unbound, PowerDNS, F5 BIG-IP DNS, or similar platforms.
- Experience with APIs, scripting, CI/CD, infrastructure as code, configuration management, telemetry, logging, SNMP monitoring, and performance analysis.
Culture & Benefits
- Flexible hybrid working with three office days and two remote or home-based days.
- Competitive remuneration, an $80 monthly credit, colleague discounts, and partner retail discounts.
- Leave benefits including additional Connected days and up to 16 weeks of paid parental leave.
- On-site campus facilities including cafes, gym, childcare, medical support, and a convenience store.
- Access to 24/7 counselling and wellbeing support, alongside colleague-led diversity and inclusion networks.
- Free shuttle bus service from Macquarie University Metro Station.
Будьте осторожны: если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого - это мошенники. Обязательно жмите "Пожаловаться" или пишите в поддержку. Подробнее в гайде →