DNS Engineer III (Hybrid)

Summary / Objective
The DNS Engineer will be instrumental in the ongoing architecture, design, deployment and implementation of the supporting infrastructure to facilitate DNS applications in a globally distributed environment, including traditional as well as cloud-based initiatives. The DNS Engineer may also take an active lead in developing and shaping the future of the Internet by working within the Internet community to define, build and implement emerging technologies.
The DNS Engineer will be an integral part of our DNS Infrastructure group. The DNS Infrastructure Group is responsible for running the DNS for over 450 Top Level Domains on the Internet, as well as devising and providing support for emerging protocols in our industry.
This role reports to the Sr. Director, DNS Infrastructure.
We're looking for candidates who possess deep operational expertise with the following:

• How a DNS query is resolved from start to finish.
• How to configure DNS transfers, including DNS NOTIFYs and Transaction signatures without the use of an appliance, such as Bluecat or Infoblox.
• Working understanding of the SOA record and its parameters.
• Full understanding of widely used DNS Resource Records, including A, AAAA, NS, and CNAME records.
• Linux kernel tuning and general system administration.
• CI/CD and automation tools, such as Salt or Ancible, Terreform, etc.
• The basics of BGP and anycast in a global configuration.

What You'll Do

• Implement new hardware and software infrastructure for DNS security, publication and resolution
• Design next generation DNS infrastructure, including systems, networks, and cloud-based initiatives
• Retrofit of existing DNS hardware/software
• Troubleshoot and Maintain DNS hardware/software
• Evaluate new hardware/software/protocols for production viability
• Work with vendors to integrate and support systems
• Document and train peers and non-peer groups both within the organization, as well as externally for customers, government agencies, and the Internet community at-large
• Provide second-level support to resolve customer and organization name service issues as submitted within the ticketing system, or as escalated by the NOC
• Develop pipelines, workflows, scripts and applications to automate common or repetitive tasks
• Participate in DNS-Operator and Network-Operator Communities
• Collaborate on protocol specification and review
• Other duties as assigned

Who You Are / What You Bring

• Demonstrated knowledge of DNS protocol and operations
• 3+ years experience at the corporate level (or within the registry industry) in DNS Administration and Operations, using one or more of: BIND, NSD, knot)
• Bachelor's degree in computer science, engineering, or a related field, or equivalent experience
• 7+ years experience in UNIX systems operations, preferably Linux and FreeBSD
• Extensive experience in scripting using UNIX-based tools, (shell, sed, awk, perl, etc.)
• Experience with packet and traffic analysis
• Knowledge of domain name registration and resolution protocols beneficial
• Participate in on-call rotation
• Ability to work across time zones as part of an international organization
• Ability to travel as needed

Nice to Have

• 1+ years DNSSEC operations experience, including work with High Security Modules (HSMs)
• Python experience
• Experience in containerization, production rollouts and deployment scheduling in a widely distributed environment
  • Cloud-based rollouts are a plus.
• Experience in routing protocols, including BGP (quagga, ExaBGP), multicast, and anycast
• 2+ years experience working with IPv6
• Cisco CCNA or equivalent experience
• Demonstrated knowledge of DNSSEC

Physical Requirements

• Prolonged periods of sitting at a desk and working on a computer.
• Must be able to lift up to 15 pounds at times.

Salary Range
The base salary range for this full-time position is CAD $100,000 - $145,000 (flexibility based on experience) plus additional benefits. In addition, the successful candidate will be eligible to receive other compensation from time to time in the form of discretionary and/or nondiscretionary bonuses and long-term incentive plan. Actual compensation will be influenced by a candidate's qualifications, internal employee equity considerations, and location. We will not ask for information about a candidate's current or past compensation for purposes of developing an offer of employment.
Note: Benefits programs are subject to eligibility requirements and may vary in certain locations.
A few things to know about us
Identity Digital is an Equal Opportunity Employer and does not discriminate based on race, color, religion, sex, age, national origin, veteran status, marital status, sexual orientation, gender identity, disability or any other category prohibited by local, state or federal law. This policy applies to all aspects of employment, including recruitment, placement, promotion, transfer, demotion, compensation, benefits, social and recreational activities, and termination.
Background Check Statement
At the time of an offer, you will be required to complete a background check. Any offer is contingent upon a satisfactory background check.
Sponsorship Statement
Please note that work sponsorship for this position may not be available now or in the future. While we strive to support our candidates, not all roles will qualify. Eligibility will be reviewed on a case-by-case basis.
Accommodation Statement
We are committed to the full inclusion of all qualified individuals. As part of this commitment, Identity Digital will ensure that persons with disabilities are provided reasonable accommodations. If reasonable accommodation is needed to participate in the job application or interview process, please contact our Recruiting Team at [email protected].