DNS Engineer (secret clearance)

The Judge Group is currently seeking a DNS Engineer with an active secret clearance or higher to support a classified customer in Springfield, VA. This position offers a hybrid schedule.

The DNS Engineer will be responsible for the design, implementation, security, governance, and operational oversight of enterprise DNS platforms across on-premises, hybrid, and cloud environments. This role provides technical expertise for DNS architecture, DNS security, naming standards, service resiliency, and integration with enterprise networking, and cloud services. This individual ensures highly available, scalable, and secure DNS services that support business-critical applications while maintaining compliance with organizational and industry security standards.

Responsibilities:

• Design, implement, and maintain enterprise DNS architectures across on-premises and cloud environments.
• Develop DNS standards, policies, governance models, and operational procedures.
• Architect secure DNS solutions that support high availability, disaster recovery, and business continuity requirements.
• Lead DNS modernization initiatives including migration to hybrid and cloud-based DNS platforms.
• Provide technical leadership for DNS integration with Active Directory, cloud platforms, and enterprise applications.
• Manage and optimize Infoblox DDI (DNS, DHCP, and IPAM) deployments and associated services.
• Architect hybrid DNS solutions integrating on-premises infrastructure with cloud services (e.g., Azure, AWS, Oracle, Google).
• Collaborate with cybersecurity, cloud, infrastructure, and network engineering teams to ensure secure DNS architecture.
• Conduct DNS health assessments, performance analysis, and capacity planning.
• Develop and maintain technical documentation, architecture diagrams, and operational runbooks.
• Support incident response activities related to DNS outages, security events, and service disruptions.

Requirements:

• Minimum Secret Clearance (Top Secret Preferred)
• Minimum of 5 years of experience, but preferably 10+ years
• Expert written and verbal communication skills

DNS Architecture & Core Services

• Expert-level knowledge of DNS protocols, architecture, and enterprise DNS design principles.
• Extensive experience designing and supporting Windows Domain Controller-based DNS environments.
• Strong understanding of Active Directory-integrated DNS zones, replication, delegations, forwarders, and conditional forwarding.
• Experience designing highly available and geographically distributed DNS infrastructures.
• Thorough understanding of recursive and authoritative DNS services.

DNS Security

• Hands-on experience implementing and managing DNSSEC.
• Experience with DNS security controls, threat mitigation, and DNS abuse prevention.
• Knowledge of protected DNS services and DNS security architectures.
• Understanding of DNS filtering, sink holing, response policy zones (RPZ), and DNS threat intelligence integration.
• Experience supporting compliance and security requirements for enterprise DNS environments.

Infoblox

• Experience deploying, administering, and architecting Infoblox appliances and DDI solutions.
• Knowledge of Infoblox Grid architecture, DNS services, DHCP services, and IPAM functionality.
• Experience with Infoblox reporting, automation, API integration, and operational best practices.