DNS Security Engineer (m/f) - Remote

DNS Security Engineer (m/f)

Start: ASAP

Duration: 9 months

Location: remote

Tasks:

The contractor will be responsible for planning, executing, and documenting a DNSSEC and DNS-over-TLS (DoT) Proof of Concept (POC) within a virtual lab (Vlab) environment. The objective is to produce comprehensive findings and recommendations to be reviewed with responsible Architects, enabling informed decisions on DNSSEC and DoT adoption and next steps.

Test Planning Gather and define test cases and use cases for DNSSEC and DoT implementation in the existing DNS infrastructure

Metrics Definition Establish measurable criteria and benchmarks to evaluate DNSSEC and DoT behavior during testing

POC Execution Conduct structured testing in the Vlab environment, documenting functionality, risks, dependencies, and edge cases

Data Analysis & Reporting Prepare detailed metrics, comparisons, and conclusions in a clear, presentation-ready format

Stakeholder Presentation Present POC findings to relevant Architects to facilitate discussion and decision-making on next steps

Skills:

• Strong knowledge of DNS fundamentals, DNSSEC, DNS-over-TLS (DoT), and TSIG authentication
• Experience with Ansible for DNS server deployment and configuration management
• Knowledge of Cisco Umbrella integration for external DNS resolution