DNS SME / Sr. Network Engineer

Job Title: Senior Network Engineer / DNS SME
Location:Mainly REMOTE (some onsite required for classified and high-side activities – but you can report to multiple locations)
Employment Type:Contract-to-Hire
Clearance:Must be eligible to obtain the required U.S. government security clearance; active clearance preferred but not required up-front.


About the Role
We are seeking a Senior Network Engineer with deep DNS expertise to help lead architecture, technical direction, and engineering standards for a mission-critical federal network infrastructure and cybersecurity environment.

The ideal candidate is a strong network engineer first, with DNS as a technical specialty. You will
partner with an established DNS Subject Matter Expert (SME) to lead technical initiatives, troubleshoot complex network and DNS issues, and guide the evolution of secure, resilient enterprise DNS services.
This role emphasizes protocol-level expertise, engineering judgment, and technical leadership over experience with any single DNS product. You will work closely with RHEL and BIND engineers to translate DNS standards, RFCs, and DoD policies into practical engineering solutions.

Key Responsibilities

• Lead DNS architecture, technical direction, configuration standards, and engineering policy.
• Partner with the existing DNS SME to own and deliver independent technical workstreams.
• Troubleshoot complex DNS and network issues using packet captures, query logs, routing tables, and other diagnostic tools.
• Apply deep networking knowledge across TCP/IP, BGP, OSPF, anycast, routing, and perimeter architectures.
• Guide DNS security and modernization initiatives, including DNSSEC, encrypted DNS, resolver privacy, and hardening.
• Translate RFCs and DoD requirements into actionable engineering standards and recommendations.
• Collaborate with RHEL/BIND engineers, mentor technical teams, and communicate design decisions to engineering and government stakeholders.
• Support technical documentation, security hardening, and accreditation/compliance activities as needed.

Required Qualifications

• 10+ years of network engineering experience, including hands-on troubleshooting and optimization of large enterprise or service-provider networks.
• Strong routing and switching expertise, including TCP/IP, BGP, OSPF, and anycast.
• Experience with Cisco IOS, IOS-XE, or NX-OS; equivalent depth with Juniper or Arista will be considered.
• Deep understanding of DNS protocols, resolution, caching, delegation, EDNS, and DNSSEC.
• Hands-on troubleshooting experience using tools such as Wireshark, tcpdump, and dig.
• Ability to work with Linux-based environments and collaborate with RHEL/BIND engineers.
• Experience leading technical initiatives, establishing engineering standards, or guiding technical decisions while remaining hands-on.
• Strong written and verbal communication skills.
• U.S. citizenship and eligibility to obtain the required government security clearance.

Preferred Qualifications

• Experience with BIND, Unbound, Knot DNS, PowerDNS, Infoblox, or comparable DNS technologies.
• DoD, DISA, federal, Intelligence Community, or other secure government network experience.
• Familiarity with DNSSEC modernization, encrypted DNS, resolver privacy, protective DNS, or DNS security hardening.
• Experience with DISA STIGs, RHEL hardening, accreditation, or security compliance.
• CCNP, CCIE, JNCIP, JNCIE, or equivalent experience.
• Scripting and automation experience using Python or shell.

System One, and its subsidiaries including Joulé and Mountain Ltd., are leaders in delivering outsourced services and workforce solutions across North America. We help clients get work done more efficiently and economically, without compromising quality. System One not only serves as a valued partner for our clients, but we offer eligible employees health and welfare benefits coverage options including medical, dental, vision, spending accounts, life insurance, voluntary plans, as well as participation in a 401(k) plan.

System One is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex (including pregnancy, childbirth, or related medical conditions), sexual orientation, gender identity, age, national origin, disability, family care or medical leave status, genetic information, veteran status, marital status, or any other characteristic protected by applicable federal, state, or local law.

#LI-CB5
Ref: #856-Baltimore-S1