Senior DNS & Infrastructure Engineer (SME)
- DNS
- Windows
- Active Directory
- Zero Trust
- AWS
- Azure
- VPC
- Load Balancing
- Disaster Recovery
- Windows Server
- System Design
- IaC
- PowerShell
- Technical Writing
- CI/CD
- Configuration Management
- Pension
Job Description
BAE Systems, a top-ten prime contractor to the U.S. Department of Defense, enables the U.S. government to transform data into intelligence and provides engineering, integration and sustainment support for critical military platforms and systems. Intelligence & Security provides services and products to the Department of Defense, the government, federal law enforcement officials, and troops deployed around the world.Â
Â
At BAE Systems, we promote a strong, collaborative culture and provide our employees with the tools, skills and training they need to succeed. We are all about trust, camaraderie, and a shared ambition to lead the world in defense technologies and national security services. We offer flexible work environment to support the balance in your life and keep you performing at your best. Be a part of a company that is part of the community; driven to improve our future and protect our freedom.Â
Seeking a Senior DNS & Infrastructure Engineer to join our team. In this position you will play a critical role in designing, securing, and evolving the enterprise DNS and Windows infrastructure across on-premises, hybrid, and multi-cloud environments. Serving as the Subject Matter Expert (SME) for enterprise DNS architecture and Windows-based identity services, you will provide technical leadership, architectural direction, and operational excellence supporting large-scale, mission-critical environments.Â
In this role, you will lead the design, implementation, security, and lifecycle management of enterprise DNS, DNS Anycast, Active Directory-integrated DNS, and related infrastructure services. You will drive modernization, resiliency, automation, and zero trust initiatives while partnering closely with senior stakeholders across operations, architecture, engineering, networking, and security teams.Â
The ideal candidate will possess deep expertise in enterprise DNS architecture, cloud-integrated networking, and hybrid identity solutions, including experience with cloud DNS platforms in AWS and Azure. Success in this role requires proven experience delivering SME-level troubleshooting, architecting highly available DNS infrastructures, implementing DNS resiliency and Anycast solutions, and leading enterprise-scale modernization initiatives in fast-paced, high-availability environments.Â
Required Skills and Education
Bachelor’s degree in Computer Science, Information Technology, or a related field, or equivalent professional experienceÂ
16+ years of progressively responsible experience in enterprise infrastructure engineering within large-scale environmentsÂ
SME-level experience designing and operating enterprise DNS infrastructures in mission-critical environmentsÂ
Extensive experience architecting and supporting:Â
Enterprise DNS platformsÂ
DNS Anycast environmentsÂ
Hybrid and multi-cloud integrationsÂ
On-premises and cloud-integrated infrastructureÂ
Disconnected and air-gapped systemsÂ
Hands-on experience administering and architecting:Â
Enterprise DNS servicesÂ
Strong experience with cloud providers and cloud-native networking services, including:Â
AWS (Route 53, VPC networking, hybrid DNS integration)Â
Microsoft Azure (Azure DNS, virtual networking, hybrid connectivity)Â
Experience designing and supporting highly available (HA) DNS and infrastructure solutions utilizing:Â
DNS AnycastÂ
Load balancingÂ
Disaster recovery and COOP architecturesÂ
Strong understanding of DNS protocols, name resolution processes, and DNS-related networking conceptsÂ
Proven experience performing security assessments and implementing remediations for critical IT systemsÂ
Demonstrated experience architecting and operating hybrid and multi-cloud environments integrating identity, networking, DNS, and security servicesÂ
Expert-level troubleshooting and root-cause analysis across DNS, Windows infrastructure, identity services, and supporting platformsÂ
Strong proficiency with Windows Server 2019–2025Â
Deep understanding of Windows authentication, authorization, and identity servicesÂ
Strong working knowledge of:Â
Routing and switchingÂ
FirewallsÂ
Load balancingÂ
Network segmentationÂ
Enterprise network design principlesÂ
Strong knowledge of enterprise security principles, zero trust architectures, and secure system designÂ
Experience developing automation and infrastructure-as-code solutions with an emphasis on repeatability and standardizationÂ
Strong scripting and automation experience using PowerShell and related automation frameworksÂ
Excellent documentation, technical writing, communication, and stakeholder engagement skillsÂ
Ability to operate effectively in fast-paced, mission-critical, high-availability environmentsÂ
Preferred Skills and Education
Master’s degree in Computer Science, Information Technology, Cybersecurity, or related fieldÂ
Experience designing enterprise-scale DNS architectures for globally distributed environmentsÂ
Experience implementing or supporting DNS Anycast deployments in large-scale environmentsÂ
Experience supporting hybrid cloud networking and DNS integrations across AWS and AzureÂ
Experience with:Â
Route 53 ResolverÂ
Azure Private DNSÂ
NetScalerÂ
Experience supporting compliance-driven or highly regulated environmentsÂ
Experience leading infrastructure modernization initiativesÂ
Experience with CI/CD pipelines, configuration management, and infrastructure-as-code toolingÂ
Knowledge of DNS security best practices and DNS threat mitigation techniquesÂ
Strong analytical ability, communication skills, and problem-solving capabilitiesÂ
Ability to influence enterprise architectural decisions and technical strategyÂ
About BAE Systems, Inc.
BAE Systems, Inc. is a defense, aerospace, and security company headquartered in Falls Church, Virginia, with more than 40,000 employees worldwide. We serve, supply, and protect those who protect us. As one of the most geographically diverse international defense companies, we deliver a full range of products and services spanning air, land, maritime, space, and cyber, including advanced electronics, intelligence solutions, and dedicated customer support.Our culture is performance-driven and values-led, built on curiosity, creativity, and collaboration. Purpose isn't a tagline here. It's what drives us. We're developing breakthrough technologies that defend national security and make a lasting impact on our communities and our planet. When you join BAE Systems, you're not just building a career. You're contributing to a mission that truly matters.
This position will be posted for at least 5 calendar days. The posting will remain active until the position is filled, or a qualified pool of candidates is identified.
Benefits Information
Employee Benefits: At BAE Systems, we support our employees in all aspects of their life, including their health and financial well-being. Regular employees scheduled to work 20+ hours per week are offered: health, dental, and vision insurance; health savings accounts; a 401(k) savings plan; disability coverage; and life and accident insurance. We also have an employee assistance program, a legal plan, and other perks including discounts on things like home, auto, and pet insurance. Our leave programs include paid time off, paid holidays, as well as other types of leave, including paid parental, military, bereavement, and any applicable federal and state sick leave. Employees may participate in the company recognition program to receive monetary or non-monetary recognition awards. Other incentives may be available based on position level and/or job specifics.Intern Benefits: Temporary employees generally are not eligible for BAE Systems benefits, but can elect to participate in the 401(k) savings plan. Temporary employees working 20+ hours per week are eligible for medical benefits, the employee assistance program, and business travel accident insurance.
Please note: Some benefits may be different for union employees that are governed by a collective bargaining agreement (CBA) or for positions covered by a wage law called the McNamara-O’Hara Service Contract Act (SCA).
- Sector: Intelligence & Security
- Job Category: Engineering & Technology
- Salary Min Point: 149603
- Salary Max Point: 254317
- Referral Bonus: 10000
- Full Time / Part Time: Full-Time
- Career Level: Experienced
- Travel Percentage:<10%
- Shift: 1st Shift
- U.S. Person Required: Yes
- Clearance Level – Must be able to obtain for position: Top Secret/SCI Polygraph
- Clearance Level – Must currently possess: Top Secret/SCI Polygraph
- Country: United States
- U.S. Citizenship Required: Yes
Senior DNS & Infrastructure Engineer (SME) · BAE Systems