SC DNS Architect CGEMJP

Role

Title:

DNS Architect

Duration: contract to run until 27/11/2026 initially

Location: Wokingham. Hybrid 3 days per week onsite

Rate: up to £598 p/d Umbrella inside IR35

Clearance required: Active SC Clearance

Seeking an experienced and highly skilled DNS Architect to design, implement, and maintain scalable, secure, and high-performance Domain Name System (DNS) solutions. This role is critical in ensuring the reliability and efficiency of network naming services across enterprise and cloud environments.

The ideal candidate will combine deep technical expertise in DNS technologies with strong architectural, troubleshooting, and automation capabilities.

• Design and develop robust DNS architectures for enterprise, hybrid, and cloud environments.
• Define DNS strategies for scalability, high availability, redundancy, and performance.
• Create and maintain DNS standards, governance, and best practices.

• Deploy, configure, and manage DNS platforms (e.g., BIND, Microsoft DNS, Infoblox, AWS Route 53, Azure DNS).
• Manage DNS zones, records, delegations, and name resolution processes.
• Oversee DNS migrations, upgrades, and transformations.

• Implement DNS security controls including DNSSEC, DDoS mitigation, and threat protection.
• Collaborate with security teams to detect and mitigate DNS-based attacks (e.g., spoofing, tunneling).
• Ensure compliance with internal and external regulatory requirements.

• Monitor DNS service health, performance, and availability.
• Optimize query resolution performance and latency.
• Implement logging, alerting, and incident response processes.

• Act as an escalation point for complex DNS and network-related issues.
• Conduct root cause analysis and implement preventative solutions.
• Provide expert support for cross-functional teams.

• Develop automation scripts and tools (e.g., Python, Power Shell) for DNS provisioning and management.
• Drive continuous improvement through automation and infrastructure-as-code practices.
• Stay up to date with emerging DNS technologies and trends.

• Expert-level understanding of DNS protocols (UDP/TCP, recursion, caching, zone transfers)
• Hands‑on experience with DNS platforms: BIND, Windows DNS, Infoblox
• Cloud DNS services (AWS Route 53, Azure DNS, Google Cloud DNS)

• DNSSEC, DHCP, IP Address Management (IPAM)
• Networking fundamentals (TCP/IP, routing, firewalls, load balancing)
• Experience with automation and scripting (Python, Power Shell, Bash)
• Familiarity with Infrastructure as Code (Terraform, ARM, Cloud Formation)

• Knowledge of DNS security threats and mitigation techniques
• Experience with DDoS protection services and secure DNS architectures

• Strong troubleshooting and diagnostic skills
• Ability to analyze complex network and DNS issues

• Excellent communication and documentation skills
• Ability to collaborate with cross‑functional teams
• Strong attention to detail and organizational skills