> Markdown version of [/jobs/ext/1185240-senior-dns-infrastructure-engineer](https://www.wearedevelopers.com/jobs/ext/1185240-senior-dns-infrastructure-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Senior DNS Infrastructure Engineer - **Company:** Verda - **Location:** Berlin, Germany - **Experience:** Expert - **Contract:** Permanent contract - **Skills:** Artificial Intelligence, Border Gateway Protocol, Configuration Management, Databases, Domain Name System Security Extensions, Domain Name System (DNS), PostgreSQL, Lua (Scripting Language), MySQL, Network Architecture, Routing, Open Source Technology, Performance Tuning, Ansible, Runbook, Service-Oriented Architecture, Load Balancing, Saltstack, Low Latency, Api Design - **Published:** July 5, 2026 - **Apply:** https://de.indeed.com/viewjob?jk=2b5b079f8b0e9664 ## About the Role * Deep PowerDNS Mastery: Proven experience architecting, tuning, and operating PowerDNS components (Authoritative, Recursor, and dnsdist) at massive scale. * Expertise in DNS Mechanics: In-depth knowledge of DNS internals (TSIG, DNSSEC automation, EDNS, SOA timers, and query/response optimization). * Scale & Routing Fundamentals: Solid understanding of how DNS scales using database backends (MySQL/PostgreSQL) and how routing protocols like BGP/Anycast distribute query loads globally. * Automation-First Mindset: 5+ years of experience managing infrastructure via configuration management (SaltStack or Ansible) and treating infrastructure strictly as code. * Clear, Collaborative Communicator: The ability to explain complex DNS routing, delegation anomalies, or propagation delays to external teams and leadership with absolute clarity., * Experience writing custom Lua scripts for advanced traffic management or security filtering inside dnsdist. * Active contributor to the open-source PowerDNS community or related internet infrastructure working groups (IETF/DNSOP). * Experience implementing modern privacy/security protocols at scale, such as DNS-over-TLS (DoT) or DNS-over-HTTPS (DoH). ## Description We are looking for a Principal DNS Infrastructure Engineer to completely own our DNS ecosystem. You will inherit a platform built on PowerDNS and take it to the next level of massive scale, resilience, and automation. In our "move fast" culture, your goal is to build an API-driven, bulletproof DNS architecture where zone provisioning, subdomain delegation, and record updates happen instantly and programmatically via code, removing all human bottlenecks., * Absolute Ownership of DNS Architecture: Shape, scale, and maintain our global PowerDNS authoritative and recursive infrastructure. * Massive Scale Engineering: Leverage dnsdist for intelligent load balancing, query filtering, and denial-of-service mitigation to keep our DNS layer highly available under extreme loads. * Automate Everything: Use SaltStack and Ansible to drive a strict GitOps model for DNS. Every zone, record type, and configuration change must be managed as code. * Master Subdomain & Multi-Tenancy Routing: Design clean, automated architectures for dynamic subdomain delegation and tenant isolation, ensuring cloud customers can programmatically spin up and tear down records safely. * Architect Anycast DNS: Partner with our networking team to scale our DNS footprint globally using BGP Anycast, ensuring ultra-low latency and seamless failover across deployment regions. * Collaborate & Communicate: Act as the organization's resident DNS evangelist. Write crystal-clear internal documentation and runbooks, ensuring our core SRE and platform teams understand how to interface with your DNS pipelines without fear., * Cash + equity compensation along with various fringe benefits (e.g., healthcare, lunch, wellbeing, etc.). * Profitable operations with rapid, sustained growth. * 31 nationalities, with 6 different ones on the management team. * An opportunity to make a clear impact and work alongside world-class engineers, researchers, and partners across the global AI ecosystem. ## Related Videos - [Unlocking the potential of Digital & IT at Vodafone](https://www.wearedevelopers.com/videos/602-unlocking-the-potential-of-digital-it-at-vodafone) - [Dev & Test in the Cloud? Deploy your cloud environments with Ansible & Terraform](https://www.wearedevelopers.com/videos/1607-dev-test-in-the-cloud-deploy-your-cloud-environments-with-ansible-terraform) - [Technical Documentation - How Can I Write Them Better and Why Should I Care?](https://www.wearedevelopers.com/videos/681-technical-documentation-how-can-i-write-them-better-and-why-should-i-care) - [MySQL Protocol Features You Should Be Aware Of](https://www.wearedevelopers.com/videos/100267-mysql-protocol-features-you-should-be-aware-of) - [Branch your database like your code: How schema changes and pull requests go hand in hand](https://www.wearedevelopers.com/videos/350-branch-your-database-like-your-code-how-schema-changes-and-pull-requests-go-hand-in-hand) - [Embracing the Hybrid Cloud: Unlocking Success with Ansible](https://www.wearedevelopers.com/videos/932-embracing-the-hybrid-cloud-unlocking-success-with-ansible) ## Related Articles - [How We Built a Worry-Free System That Runs for 10+ Years – And What We’d Do Again](https://www.wearedevelopers.com/magazine/751-how-we-built-a-worry-free-system-that-runs-for-10-years-and-what-we-d-do-again) - [Dev Digest 121 - AI goes offline](https://www.wearedevelopers.com/magazine/456-dev-digest-121-ai-goes-offline) - [Dev Digest 120 - Apple and peers](https://www.wearedevelopers.com/magazine/455-dev-digest-120-apple-and-peers) - [Dev Digest 139 - Soft and hard queries](https://www.wearedevelopers.com/magazine/487-dev-digest-139-soft-and-hard-queries) - [Dev Digest 129 - Now that's what I call private data!](https://www.wearedevelopers.com/magazine/468-dev-digest-129-now-that-s-what-i-call-private-data) - [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing)