Principal DNS/DDI Consultant

Ness is a full lifecycle digital engineering firm offering digital advisory through scaled engineering services. Combining our core competence in engineering with the latest in digital strategy and technology, we seamlessly manage Digital Transformation journeys from strategy through execution to help businesses thrive in the digital economy. As your tech partner, we help engineer your company’s future with cloud and data. For more information, visit Principal DNS/DDI Consultant Mexico, Remote Overview: We are seeking a Principal-level DNS/DDI Consultant to lead the assessment, documentation, redesign, and implementation of our enterprise DNS infrastructure. This role is critical to our cloud migration strategy and will directly support the development of a funding proposal for modernizing our DNS services. Our current DNS environment comprises both public and private DNS infrastructures, featuring a mix of on-premises and cloud-based services. The ideal candidate will possess in-depth expertise in Infoblox DDI, AWS Route 53, public DNS services (such as NS1 and Akamai), and enterprise-scale DNS architecture. Key Responsibilities: Review and update the documentation of the current DNS architecture, including: Public DNS hosted via NS1, Akamai, and internal systems Internal DNS infrastructure (Infoblox DDI, BIND, Route 53 integrations) Recursive and caching layers Design and implement a modern, scalable DNS architecture that: Minimizes reliance on on-prem hardware Leverages IaaS and cloud-native services, including Infoblox’s cloud-hosted DNS and AWS Route 53 Supports delegated DNS management for business units in AWS Aligns with our broader data center-to-cloud migration strategy Deliverables include: Current state documentation Future state architecture and migration plan Risk assessment and mitigation strategies Cost and resource estimates to support funding requests Full implementation of the modernized DNS design prior to Infoblox renewal in February 2026 Collaborate with network engineering, cloud, and security teams Advise on best practices for DNS security, performance, and availability Required Qualifications: 10 years of experience in enterprise DNS and DDI architecture Deep hands-on experience with Infoblox DDI appliances and cloud services Strong knowledge of AWS Route 53 (public and private hosted zones) Experience with public DNS providers (e.g., NS1, Akamai) Familiarity with BIND and recursive DNS infrastructure Proven ability to document, redesign, and implement complex DNS environments Experience supporting large-scale DNS environments (e.g., >1B queries/month) Hands-on experience designing and operating Anycast DNS infrastructure Strong communication and stakeholder engagement skills Preferred Qualifications: Experience with DNSSEC, DNS-based load balancing, and DNS telemetry Familiarity with hybrid cloud and multi-account AWS environments Prior involvement in data center exit or cloud migration projects Infoblox certifications (e.g., NIOS, Core DDI) a plus Ness is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to sex, gender identity, sexual orientation, race, color, religion, national origin, disability, protected Veteran status, age, or any other characteristic protected by law