DNS Engineer - Site Reliability Engineer

- Lead the architectural design and development of global DNS systems, ensuring high availability through Anycast routing and multi-provider redundancy - Serve as the primary technical liaison during engagements with DNS and infrastructure vendors, guiding roadmaps that align with our reliability and security objectives - Manage the entire lifecycle of DNS platforms, including automated software deployments and proactive capacity planning to accommodate traffic growth - Define and implement organization-wide standards for DNS record management, security protocols (DNSSEC), and traffic steering policies to enhance user experience - Translate strategic designs into operational realities by establishing Service Level Objectives (SLOs) and Error Budgets for core naming services - Oversee the management of protocol nuances related to UDP/TCP port 53 and various record types (A, AAAA, CNAME, MX, TXT, SRV) - Implement DNSSEC to mitigate cache poisoning risks and serve as a subject matter expert in defending against DDoS and DNS amplification attacks - Automate routine processes using Python, Go, Ansible, or Terraform to reduce manual management efforts - Optimize Linux kernel settings for enhancing network throughput and conduct deep log analyses on systems like BIND, Unbound, or PowerDNS - Utilize monitoring tools like Prometheus, Grafana, and dnstap to track query rates and latency, providing actionable insights into error codes (NXDOMAIN, SERVFAIL)