Senior DNS Infrastructure Engineer

Role overview Lead the architecture and operation of a large-scale DNS platform built around PowerDNS. The focus is on resilience, automation, and tenant-safe routing: DNS zones, delegations, and record changes should be managed through APIs and code, while supporting global traffic and availability needs.

Responsibilities - Design, scale, and maintain authoritative and recursive DNS infrastructure using PowerDNS. - Use dnsdist for traffic distribution, query filtering, and denial-of-service mitigation. - Establish a GitOps workflow for DNS configuration, using infrastructure-as-code practices and tools such as SaltStack or Ansible. - Build automated approaches for subdomain delegation and tenant isolation so customers can create and remove records safely. - Work with networking teams on BGP Anycast deployment, regional latency, and failover. - Document the DNS platform and create runbooks that help SRE and platform teams use its pipelines effectively.

Requirements - Extensive experience operating and tuning PowerDNS Authoritative, Recursor, and dnsdist at scale. - Strong DNS knowledge, including delegation, routing behavior, and diagnosing propagation or resolution issues. - Several years managing infrastructure as code with SaltStack or Ansible. - Experience designing resilient, automated infrastructure and communicating complex DNS behavior clearly to technical teams and leadership.

Nice to have - Lua scripting for dnsdist traffic management or security filtering. - Contributions to PowerDNS open source or participation in internet infrastructure groups such as IETF DNSOP. - Experience deploying DNS-over-TLS or DNS-over-HTTPS at scale.

Benefits and work setup - Full-time, permanent role, remote within the EU. - Cash and equity compensation, plus fringe benefits.