Senior DNS & Infrastructure Engineer (SME)

BAE Systems•Herndon, VA

2d•$149,603 - $254,317

About The Position

BAE Systems is seeking a Senior DNS & Infrastructure Engineer to join their team. This role is critical in designing, securing, and evolving the enterprise DNS and Windows infrastructure across on-premises, hybrid, and multi-cloud environments. The position serves as the Subject Matter Expert (SME) for enterprise DNS architecture and Windows-based identity services, providing technical leadership, architectural direction, and operational excellence for large-scale, mission-critical environments. The engineer will lead the design, implementation, security, and lifecycle management of enterprise DNS, DNS Anycast, Active Directory-integrated DNS, and related infrastructure services. Key responsibilities include driving modernization, resiliency, automation, and zero trust initiatives, while collaborating with senior stakeholders across various departments.

Requirements

Bachelor’s degree in Computer Science, Information Technology, or a related field, or equivalent professional experience
16+ years of progressively responsible experience in enterprise infrastructure engineering within large-scale environments
SME-level experience designing and operating enterprise DNS infrastructures in mission-critical environments
Extensive experience architecting and supporting: Enterprise DNS platforms, DNS Anycast environments, Hybrid and multi-cloud integrations, On-premises and cloud-integrated infrastructure, Disconnected and air-gapped systems
Hands-on experience administering and architecting: Enterprise DNS services
Strong experience with cloud providers and cloud-native networking services, including: AWS (Route 53, VPC networking, hybrid DNS integration), Microsoft Azure (Azure DNS, virtual networking, hybrid connectivity)
Experience designing and supporting highly available (HA) DNS and infrastructure solutions utilizing: DNS Anycast, Load balancing, Disaster recovery and COOP architectures
Strong understanding of DNS protocols, name resolution processes, and DNS-related networking concepts
Proven experience performing security assessments and implementing remediations for critical IT systems
Demonstrated experience architecting and operating hybrid and multi-cloud environments integrating identity, networking, DNS, and security services
Expert-level troubleshooting and root-cause analysis across DNS, Windows infrastructure, identity services, and supporting platforms
Strong proficiency with Windows Server 2019–2025
Deep understanding of Windows authentication, authorization, and identity services
Strong working knowledge of: Routing and switching, Firewalls, Load balancing, Network segmentation, Enterprise network design principles
Strong knowledge of enterprise security principles, zero trust architectures, and secure system design
Experience developing automation and infrastructure-as-code solutions with an emphasis on repeatability and standardization
Strong scripting and automation experience using PowerShell and related automation frameworks
Excellent documentation, technical writing, communication, and stakeholder engagement skills
Ability to operate effectively in fast-paced, mission-critical, high-availability environments

Nice To Haves

Master’s degree in Computer Science, Information Technology, Cybersecurity, or related field
Experience designing enterprise-scale DNS architectures for globally distributed environments
Experience implementing or supporting DNS Anycast deployments in large-scale environments
Experience supporting hybrid cloud networking and DNS integrations across AWS and Azure
Experience with: Route 53 Resolver, Azure Private DNS, NetScaler
Experience supporting compliance-driven or highly regulated environments
Experience leading infrastructure modernization initiatives
Experience with CI/CD pipelines, configuration management, and infrastructure-as-code tooling
Knowledge of DNS security best practices and DNS threat mitigation techniques
Strong analytical ability, communication skills, and problem-solving capabilities
Ability to influence enterprise architectural decisions and technical strategy

Responsibilities

Play a critical role in designing, securing, and evolving the enterprise DNS and Windows infrastructure across on-premises, hybrid, and multi-cloud environments.
Serve as the Subject Matter Expert (SME) for enterprise DNS architecture and Windows-based identity services.
Provide technical leadership, architectural direction, and operational excellence supporting large-scale, mission-critical environments.
Lead the design, implementation, security, and lifecycle management of enterprise DNS, DNS Anycast, Active Directory-integrated DNS, and related infrastructure services.
Drive modernization, resiliency, automation, and zero trust initiatives.
Partner closely with senior stakeholders across operations, architecture, engineering, networking, and security teams.
Deliver SME-level troubleshooting, architect highly available DNS infrastructures, implement DNS resiliency and Anycast solutions, and lead enterprise-scale modernization initiatives.