Senior Infrastructure Engineer - DNS

Rumble•Washington, DC

5d•$150,000 - $195,000

About The Position

Rumble is seeking a Senior Infrastructure Engineer (DNS) to build, operate, and advance the authoritative DNS infrastructure that supports Rumble’s platform and related services. This is a high-impact role focused on maintaining reliable global reachability, service discovery, traffic steering, and resilience for mission-critical internet-facing systems. As a Senior Infrastructure Engineer (DNS), you will work across network infrastructure, CDN, systems, and security teams to operate highly available DNS services at scale. You’ll help design and automate zone management, authoritative name-server infrastructure, anycast routing, DNSSEC, health checks, and failover mechanisms while improving observability and operational response. This role requires deep DNS and Linux expertise, strong internet-routing fundamentals, and sound judgment during production incidents. If you enjoy solving complex name-resolution and routing problems, improving the security and reliability of globally distributed services, and building infrastructure that is foundational to how users reach Rumble, you’ll have the opportunity to make a significant impact here.

Requirements

8+ years of relevant network, DNS, systems, or infrastructure engineering experience.
Deep understanding of DNS architecture, including delegation, zones, authoritative and recursive DNS, record types, TTLs, negative caching, and name-resolution processes.
Demonstrated experience operating a robust, production-grade authoritative DNS deployment.
Strong understanding of IP networking, TCP/IP, UDP, HTTP/HTTPS, routing, and internet-facing production services.
Experience designing or operating high-availability, geographically distributed, and fault-tolerant infrastructure.
Knowledge of DNS security concepts, including DNSSEC, zone signing, key rotation, spoofing, cache poisoning, and amplification risks.
Strong Linux systems experience and proficiency with Python, Bash, Perl, or similar languages for automation, deployment, validation, and maintenance.
Expert troubleshooting skills, including the ability to analyze resolution, delegation, routing, and availability failures under pressure.
Excellent technical documentation and verbal and written communication skills.

Nice To Haves

Experience with anycast DNS deployments and BGP-based traffic engineering.
Experience with DNS server software and tooling, such as BIND, Knot DNS, NSD, PowerDNS, Unbound, or comparable platforms.
Experience managing DNSSEC at scale, including automated signing, key management, rollover processes, and validation troubleshooting.
Experience with DNS-based global server load balancing, geo-routing, health checks, and traffic failover.
Experience with open-source routing daemons on Linux, such as BIRD or FRR.
Experience with DNS monitoring, query analytics, packet capture, and network-observability tools.

Responsibilities

Design, build, operate, and improve Rumble’s authoritative DNS and global traffic-steering infrastructure.
Build fault-tolerant, secure, and highly available DNS services capable of handling large-scale query volume.
Develop and maintain DNS architecture, including zones, delegation, records, name-server infrastructure, recursive-resolution dependencies, and failover mechanisms.
Improve performance, resiliency, and reliability through anycast routing, load balancing, capacity planning, query analysis, and infrastructure automation.
Implement and maintain DNS security controls, including DNSSEC and protections against spoofing, cache poisoning, amplification, and other DNS-focused attacks.
Partner with CDN, network, systems, and security teams on service discovery, traffic routing, DDoS resilience, and incident response.
Build automation for zone management, configuration deployment, validation, change control, and operational maintenance.
Create and maintain architecture documentation, runbooks, incident postmortems, and operational procedures.
Participate in an on-call rotation, respond to incidents, and clearly communicate service status and remediation progress.