Sr. SRE, DNS, Platform Engineering

About the role

The Platform Engineering SRE (PESRE) organization builds observability, infrastructure and tooling to ensure the resiliency, efficacy and performance of Netskopes security cloud infrastructure and networking.

Site Reliability Engineer

What s in it for you

As a SRE specializing in DNS on Netskopes PESRE team, you will have an opportunity to exercise and expand your skills in the DNS and general SRE domains at a rapidly growing business with a global data center footprint, and have a chance to build and improve the infrastructure that powers Netskope s security cloud. This is an ideal role for candidates who have the desire to learn new technologies, concepts and architectures, the curiosity and desire to dig into interesting technical challenges, and the belief that good enough is not enough.

What you will be doing

• Architect, deploy, and manage authoritative and recursive DNS infrastructure using

  BIND

  and

  PowerDNS.



• Implement and maintain DNSSEC, RPZ, zone transfers, and performance tuning.


• Develop and maintain configuration management using tools like

  SaltStack

  and

  Ansible.



• Automate operational tasks, reduce manual toil, and ensure infrastructure as code is reproducible and version-controlled.


• Collaborate with security, network, and development teams to support DNS-related integrations and requirements.


• Monitor DNS health and performance using

  Prometheus

  , custom exporters, and alerting pipelines.


• Troubleshoot complex DNS resolution, caching, and propagation issues across internal and external environments.


• Assist in migration efforts, including consolidating or modernizing DNS platforms and tools.


• Write and maintain internal documentation, diagrams, and runbooks.


• Participating in an on-call rotation to organize responses to production incidents.


• Conducting non-functional testing to validate infrastructure and software performance and resiliency requirements.

Required skills and experience

• 5+ years

  of hands-on experience managing DNS infrastructure in production environments.


• Strong expertise with

  BIND

  and

  PowerDNS

  . Experience with DNSdist is a plus.


• Deep understanding of DNS protocols (AXFR/IXFR, TTLs, caching, recursion, DNSSEC, etc.)


• Solid Linux systems engineering experience.


• Proficiency with

  SaltStack

  ,

  Ansible

  ,

  Chef

  or similar configuration management tools.


• Experience with

  Prometheus

  , including exporters and custom metrics, for DNS monitoring.


• Strong scripting abilities (Python, Bash, etc.) for automation and tooling.


• Familiarity with containerization (Docker) and CI/CD pipelines is a plus.


• Clear written and verbal communication, with a focus on documentation and collaboration.


• Prior experience in a high-availability, multi-datacenter or CDN-style environment preferred.

Education

• Bachelors or equivalent required, Masters or equivalent strongly preferred.