Lead DNS Engineer

Skills and Competencies
- 10+ years designing and operating enterprise or service provider DNS
- 5+ years hands-on experience with Infoblox technologies
- Strong routing background: BGP, OSPF/IS-IS, Anycast
- Expertise in cloud DNS across AWS Route 53, Azure DNS, and Google Cloud DNS
- Security depth in DDI: DNSSEC, RPZ/Threat Defense, DoT/DoH considerations
- Automation proficiency: Terraform, Ansible, and Python
- Private cloud provisioning experience with Nutanix AHV and VMware vSphere
- Registrar/RIR knowledge: operational experience with ARIN and RIPE
- Demonstrated proficiency in artificial intelligence concepts, with hands-on experience using AI tools to streamline workflows and enhance operational efficiency. Proven ability to implement AI-powered solutions to solve business challenges. Demonstrates a growing awareness of AI risk management and a commitment to responsible and ethical AI use

Education
- Bachelor’s degree in Computer Science, Engineering, or equivalent experience

Responsibilities
Lead the design and governance of enterprise-grade DNS, DHCP, and IPAM architecture with a focus on Infoblox, ensuring secure, resilient, and automated DDI services across hybrid environments.

• Own the DDI target architecture for Infoblox Grid/NIOS—authoritative and recursive DNS, DHCP failover, IPAM taxonomy, Anycast design, and multi-cloud DNS integrations
  - Design and govern DNS for internal, DMZ, and Internet-facing workloads (split-horizon, zone delegation, views, ACLs, TSIG/GSS-TSIG, DNSSEC, RRL, QPS capacity planning, negative caching, TTL strategy)
  - Engineer Anycast DNS and associated BGP routing policies across data centers and branch sites
  - Integrate cloud DNS (AWS Route 53, Azure DNS, Google Cloud DNS) with on-prem/hybrid patterns including F5/Citrix load balancing functions
  - Automate IPAM & DNS workflows using Infoblox WAPI, Terraform, Ansible, and Python tooling
  - Embed DDI into private cloud provisioning for Nutanix AHV and VMware vSphere
  - Secure the DDI estate: DNS firewall/RPZ, threat intelligence, DoT/DoH policies, resolver hardening
  - Build operational excellence: author standards, runbooks, observability dashboards, and lead incident response methodology
  - Lead cross-functional delivery with Network Engineering, Cloud, Security, Platform, and Operations teams

Location is Charlotte, NC