DNS SME / Sr. Network Engineer

System One, Inc.; Fort Meade (MD); Híbrido; USD 130.000 - 170.000; Jornada completa

Descripción de la vacante

System One, Inc. is seeking a Senior Network Engineer with deep DNS expertise to lead architecture and engineering standards for a federal network infrastructure.

The ideal candidate combines advanced networking with DNS specialization and will partner with an existing DNS SME to drive technical initiatives. You will troubleshoot complex DNS and network issues, apply protocol-level knowledge, and translate RFCs and DoD requirements into practical engineering solutions.

Formación

• 10+ years of network engineering experience on large enterprise or service-provider networks.
• Strong routing and switching expertise: TCP/IP, BGP, OSPF, anycast.
• Deep DNS protocol knowledge: resolution, caching, delegation, EDNS, DNSSEC.
• Hands-on troubleshooting with Wireshark, tcpdump, dig.
• Experience with Linux-based environments and RHEL/BIND integration.
• Ability to lead initiatives while remaining hands-on.

Responsabilidades

• Lead DNS architecture, standards, and engineering policy.
• Partner with DNS SME to own and deliver independent workstreams.
• Troubleshoot DNS and network issues using packet captures and logs.
• Apply networking knowledge across TCP/IP, BGP, OSPF, anycast and perimeter design.
• Guide DNS security modernization, including DNSSEC and encrypted DNS.
• Translate RFCs/DoD requirements into actionable engineering standards.
• Collaborate with RHEL/BIND engineers and mentor teams.

Conocimientos

DNS expertise

Network engineering

Troubleshooting

Linux

Communication

Security clearance readiness

Herramientas

Wireshark

tcpdump

dig

Cisco IOS

Juniper

Arista

Descripción del empleo

Job Title: Senior Network Engineer / DNS SME

Location: Mainly REMOTE (some onsite required for classified and high-side activities – but you can report to multiple locations)
Employment Type: Contract-to-Hire
Clearance: Must be eligible to obtain the required U.S. government security clearance; active clearance preferred but not required up-front.

About the Role

We are seeking a Senior Network Engineer with deep DNS expertise to help lead architecture, technical direction, and engineering standards for a mission-critical federal network infrastructure and cybersecurity environment.

The ideal candidate is a strong network engineer first, with DNS as a technical specialty. You will partner with an established DNS SME to lead technical initiatives, troubleshoot complex network and DNS issues, and guide the evolution of secure, resilient enterprise DNS services. This role emphasizes protocol-level expertise, engineering judgment, and technical leadership over experience with any single DNS product. You will work closely with RHEL and BIND engineers to translate DNS standards, RFCs, and DoD policies into practical engineering solutions.

Key Responsibilities

• Lead DNS architecture, technical direction, configuration standards, and engineering policy.
• Partner with the existing DNS SME to own and deliver independent technical workstreams.
• Troubleshoot complex DNS and network issues using packet captures, query logs, routing tables, and other diagnostic tools.
• Apply deep networking knowledge across TCP/IP, BGP, OSPF, anycast, routing, and perimeter architectures.
• Guide DNS security and modernization initiatives, including DNSSEC, encrypted DNS, resolver privacy, and hardening.
• Translate RFCs and DoD requirements into actionable engineering standards and recommendations.
• Collaborate with RHEL/BIND engineers, mentor technical teams, and communicate design decisions to engineering and government stakeholders.
• Support technical documentation, security hardening, and accreditation/compliance activities as needed.

Required Qualifications

• 10+ years of network engineering experience, including hands-on troubleshooting and optimization of large enterprise or service-provider networks.
• Strong routing and switching expertise, including TCP/IP, BGP, OSPF, and anycast.
• Experience with Cisco IOS, IOS-XE, or NX-OS; equivalent depth with Juniper or Arista will be considered.
• Deep understanding of DNS protocols, resolution, caching, delegation, EDNS, and DNSSEC.
• Hands-on troubleshooting experience using tools such as Wireshark, tcpdump, and dig.
• Ability to work with Linux-based environments and collaborate with RHEL/BIND engineers.
• Experience leading technical initiatives, establishing engineering standards, or guiding technical decisions while remaining hands-on.
• Strong written and verbal communication skills.
• U.S. citizenship and eligibility to obtain the required government security clearance.

Preferred Qualifications

• Experience with BIND, Unbound, Knot DNS, PowerDNS, Infoblox, or comparable DNS technologies.
• DoD, DISA, federal, Intelligence Community, or other secure government network experience.
• Familiarity with DNSSEC modernization, encrypted DNS, resolver privacy, protective DNS, or DNS security hardening.
• Experience with DISA STIGs, RHEL hardening, accreditation, or security compliance.
• CCNP, CCIE, JNCIP, JNCIE, or equivalent experience.
• Scripting and automation experience using Python or shell.

System One, and its subsidiaries including Joulé and Mountain Ltd., are leaders in delivering outsourced services and workforce solutions across North America. We help clients get work done more efficiently and economically, without compromising quality. System One not only serves as a valued partner for our clients, but we offer eligible employees health and welfare benefits coverage options including medical, dental, vision, spending accounts, life insurance, voluntary plans, as well as participation in a 401(k) plan.

System One is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex (including pregnancy, childbirth, or related medical conditions), sexual orientation, gender identity, age, national origin, disability, family care or medical leave status, genetic information, veteran status, marital status, or any other characteristic protected by applicable federal, state, or local law.