About the role
We are looking for a Principal DNS Infrastructure Engineer to completely own our DNS ecosystem. You will inherit a platform built on PowerDNS and take it to the next level of massive scale, resilience, and automation. In our "move fast" culture, your goal is to build an API-driven, bulletproof DNS architecture where zone provisioning, subdomain delegation, and record updates happen instantly and programmatically via code, removing all human bottlenecks.
Your Responsibilities
•Absolute Ownership of DNS Architecture: Shape, scale, and maintain our global PowerDNS authoritative and recursive infrastructure.
•Massive Scale Engineering: Leverage dnsdist for intelligent load balancing, query filtering, and denial-of-service mitigation to keep our DNS layer highly available under extreme loads.
•Automate Everything: Use SaltStack and Ansible to drive a strict GitOps model for DNS. Every zone, record type, and configuration change must be managed as code.
•Master Subdomain & Multi-Tenancy Routing: Design clean, automated architectures for dynamic subdomain delegation and tenant isolation, ensuring cloud customers can programmatically spin up and tear down records safely.
•Architect Anycast DNS: Partner with our networking team to scale our DNS footprint globally using BGP Anycast, ensuring ultra-low latency and seamless failover across deployment regions.
•Collaborate & Communicate: Act as the organization's resident DNS evangelist. Write crystal-clear internal documentation and runbooks, ensuring our core SRE and platform teams understand how to interface with your DNS pipelines without fear.
Your Key Requirements
•Deep PowerDNS Mastery: Proven experience architecting, tuning, and operating PowerDNS components (Authoritative, Recursor, and dnsdist) at massive scale.
•Expertise in DNS Mechanics: In-depth knowledge of DNS internals (TSIG, DNSSEC automation, EDNS, SOA timers, and query/response optimization).
•Scale & Routing Fundamentals: Solid understanding of how DNS scales using database backends (MySQL/PostgreSQL) and how routing protocols like BGP/Anycast distribute query loads globally.
•Automation-First Mindset: 5+ years of experience managing infrastructure via configuration management (SaltStack or Ansible) and treating infrastructure strictly as code.
•Clear, Collaborative Communicator: The ability to explain complex DNS routing, delegation anomalies, or propagation delays to external teams and leadership with absolute clarity.
Nice-to-Haves
•Experience writing custom Lua scripts for advanced traffic management or security filtering inside dnsdist.
•Active contributor to the open-source PowerDNS community or related internet infrastructure working groups (IETF/DNSOP).
•Experience implementing modern privacy/security protocols at scale, such as DNS-over-TLS (DoT) or DNS-over-HTTPS (DoH).
Why Verda
•Cash + equity compensation along with various fringe benefits.
•Profitable operations with rapid, sustained growth.
•31 nationalities, with 6 different ones on the management team.
•An opportunity to make a clear impact and work alongside world-class engineers, researchers, and partners across the global AI ecosystem.
Practicalities
•Work mode: Remote (EU)
•Employment type: Full-time, permanent
•Start date: As soon as possible
Please submit your application through the company's Careers page. Applications sent by email or through agencies are not accepted.
