Назад
Company hidden
обновлено 29 дней назад

Lead DNS Engineer (DNS)

Формат работы
hybrid
Тип работы
fulltime
Грейд
lead
Английский
b2
Страна
Australia
Вакансия из списка Hirify.GlobalВакансия из Hirify Global, списка международных tech-компаний
Для мэтча и отклика нужен Plus

Мэтч & Сопровод

Для мэтча с этой вакансией нужен Plus

Описание вакансии

Текст:
/
TL;DR
Lead DNS Engineer (DNS): Designing, implementing, and modernising carrier-grade authoritative, recursive, and cache DNS services with an accent on resilience, security, automation, and service correctness. Focus on implementing DNSSEC and TSIG controls, hidden-master and anycast architectures, lifecycle remediation, observability, and safe production change.

Location: Macquarie Park, NSW, Australia; hybrid arrangement with three days in the office and two days remote or from home.

Company

hirify.global is an Australian telecommunications company delivering mobile, broadband, and digital services.

What you will do

  • Design and implement carrier-grade authoritative, recursive, cache, policy, and control-plane DNS services.
  • Define target-state architecture, migration patterns, coexistence models, failover strategies, and rollback plans.
  • Lead complex DNS upgrades, migrations, resilience improvements, and platform transition programs.
  • Improve automation, validation, deployment workflows, observability, service correctness, and recovery readiness.
  • Implement DNS security controls including DNSSEC, TSIG, access control, RPZ handling, secure administration, and auditability.
  • Provide senior technical leadership, support major incidents, improve engineering standards and runbooks, and mentor engineers.

Requirements

  • Deep hands-on experience with authoritative, recursive, cache DNS, and DNS service operations.
  • Strong knowledge of DNS protocols, record types, zone design, split-horizon DNS, recursion, forwarding, and caching.
  • Experience designing and implementing production DNS services in large-scale enterprise, ISP, carrier, or service provider environments.
  • Strong knowledge of DNSSEC, TSIG, response policy mechanisms, access control, service hardening, and resilient DNS architectures.
  • Experience with hidden masters, secondaries, anycast delivery, failover, control/data-plane separation, automation, validation, deployment, or migration workflows.
  • Strong communication, problem-solving, incident response, technical documentation, and engineering leadership skills.

Nice to have

  • Linux-based infrastructure, platform engineering, service hardening, observability, and lifecycle management experience.
  • Knowledge of BGP anycast, load balancing, routing daemons, HA clustering, and service advertisement models.
  • Experience with BIND, Unbound, PowerDNS, F5 BIG-IP DNS, or similar platforms.
  • Experience with APIs, scripting, CI/CD, infrastructure-as-code, configuration management, telemetry, logging, SNMP monitoring, and performance analysis.

Culture & Benefits

  • Flexible hybrid working with three office days and two remote or home-working days.
  • Competitive remuneration, colleague discounts, and a monthly credit of $80.
  • Additional leave days, up to 16 weeks of paid parental leave, and wellbeing counselling and support services.
  • Collaborative workplace with cafes, gym, childcare, healthcare, and other on-site facilities.
  • Inclusive colleague networks and diversity initiatives.
  • Free bus service from Macquarie University Metro Station.

Будьте осторожны: если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого - это мошенники. Обязательно жмите "Пожаловаться" или пишите в поддержку. Подробнее в гайде →