Lead - Network & Design Engineer (DNS, BIND, Route53)
About the Role
We are seeking a highly skilled Network & DNS Design Engineer to join our Network Engineering team. This role is responsible for the design, governance, automation and L3 support of enterprise DNS, domain management and core network services across cloud, datacentre and corporate environments.
The successful candidate will be a subject matter expert in DNS technologies including AWS Route53, Microsoft Active Directory-integrated DNS and BIND, with responsibility for ensuring the availability, security and scalability of critical name resolution services supporting both internal users and customer-facing platforms.
The role requires a strong engineering mindset, a passion for automation, and practical experience applying AI-driven solutions to improve operational efficiency, governance and service reliability.
Key Responsibilities
- Design, implement and manage enterprise DNS services across AWS Route53, Microsoft DNS and BIND platforms.
-
Own the design and governance of public and private DNS infrastructure, including hosted zones, delegation, forwarding, conditional forwarding and resolver services.
-
Manage the organisation's domain portfolio, including registrations, renewals, transfers, security controls and lifecycle governance.
-
Design and support DNS services integrated with Active Directory Domain Services (AD DS), ensuring reliable operation of authentication, Group Policy and Windows-based services.
-
Act as the L3 escalation point for complex DNS, domain and network-related incidents.
-
Develop and maintain DNS, domain and network standards, documentation and operational processes.
-
Design and implement automation solutions using APIs, scripting and Infrastructure as Code.
-
Leverage AI-assisted tooling to improve DNS management, domain governance, change validation, troubleshooting and operational reporting.
-
Collaborate with infrastructure, security and application teams to deliver resilient and secure services.
-
Contribute to the design and support of routing, switching, firewalls, load balancing and hybrid-cloud networking solutions.
Essential skills & experience:
-
Extensive experience with AWS Route53, including public and private hosted zones, delegation and DNS governance.
-
Strong hands-on experience with Microsoft DNS running on Active Directory Domain Controllers.
-
Strong experience with BIND DNS administration and architecture.
-
Deep understanding of DNS protocols, DNSSEC, recursive and authoritative DNS services.
-
Experience managing enterprise domain portfolios and registrar relationships.
-
Strong knowledge of TCP/IP networking, routing, switching and network security principles.
-
Experience with DNS/IPAM integration and tooling.
-
Experience with automation technologies such as Python, PowerShell, Terraform or similar.
-
Experience using APIs and Infrastructure as Code to automate operational processes.
-
Experience applying AI technologies to infrastructure management, operational efficiency or service automation.
Desirable experience:
-
AWS networking and infrastructure services.
-
F5 DNS/GTM and load balancing technologies.
-
NetBox, SolarWinds, Infoblox or similar IPAM platforms.
-
VPN, firewall and cloud networking technologies.
-
GitOps and modern infrastructure automation practices.
-
Experience supporting large-scale global enterprise environments.
Key Attributes
-
Strong analytical and troubleshooting skills.
-
Automation-first mindset.
-
Excellent documentation and governance discipline.
-
Ability to lead technical standards and best practices.
-
Strong communication and stakeholder management skills.
-
Passion for innovation and the practical application of AI within infrastructure operations.
Skills
As published by lever · 13 questions · 10 written answers
Basics
Resume/CV, Full name, Pronouns, Email, Phone, Current location, Current company, LinkedIn URL, Twitter URL, GitHub URL, Portfolio URL, Other website, What is your age range?, I identify my ethnicity asSelect all that apply, What gender do you identify as?, Do you consider yourself to have a disability or be differently abled?, Were you previously employed by Armed Forces?
Short answers (1)
- Please confirm type of right to work document
Pick from a list (2)
- Are you currently authorised to work in the country of the job without any restrictions? optional
- Will you now or in future require visa sponsorship to work in country of the job optional
Written answers (10)
- What is your experience with AI Tools like Claude? optional
- Describe the DNS environments you have personally administered (Route53, AD-integrated DNS, BIND). For each, state the scale (number of zones or records), your role (design, build, or support), and the last time you worked on it hands-on.
- Your company has AWS VPCs, an on-prem datacentre running AD DNS, and BIND for external zones. Briefly outline how you would design name resolution between them, covering forwarding, conditional forwarding, Route53 Resolver, and split-horizon. Mention one risk you would plan for.
- Describe a complex DNS or domain-related incident you personally resolved as an escalation point (e.g. intermittent resolution failures, DNSSEC validation errors, replication or delegation issues). What was the root cause, how did you diagnose it, and what permanent fix did you put in place?
- Give a specific example of a DNS or network process you automated using Python, PowerShell, Terraform, or APIs. State what it replaced, the tools used, and the measurable outcome (time saved, errors reduced, or scale achieved).
- Share one real example where you used AI (LLMs, AI-assisted tooling, or ML) to improve infrastructure operations, such as change validation, troubleshooting, documentation, or reporting. What was the use case, what did it deliver, and what limitations or controls did you apply?
- Which tools have you used for IPAM or DNS/IPAM integration (Infoblox, NetBox, SolarWinds, etc.)? Also describe how you have managed a domain portfolio, including registrar relationships, renewals, transfers, and security controls like registry lock or DNSSEC. Include portfolio size if possible.
- Current salary and expected salary
- Notice period
- Current location