About the Role

We are seeking a DNS & PKI Engineer responsible for the design, implementation, automation, and operational support of enterprise DNS and certificate services. This role is critical to ensure secure, highly available name resolution and certificate lifecycle management across hybrid environments.

Key Responsibilities

- Design, implement, and maintain enterprise DNS infrastructure, including authoritative and recursive DNS services.

- Administer and optimize Infoblox DDI (DNS, DHCP, IPAM) platforms.

- Implement DNS security controls: DNSSEC, Response policy zones (RPZ), and DDoS protection strategies.

- Integrate DNS services with Cloudflare for public DNS hosting, CDN, and traffic routing.

- Design and manage enterprise PKI solutions, including internal and public Certificate Authorities (CAs).

- Oversee full certificate lifecycle: request, issuance, renewal, revocation, and retirement.

- Implement and maintain automation for certificate lifecycle management (e.g., ACME, APIs).

- Administer and optimize Cloudflare services, including SSL/TLS configuration and WAF.

- Develop automation for DNS and certificate management using Infrastructure as Code (IaC) and API-based integrations.

- Provide L3 support and escalation for DNS and certificate-related incidents.