{"id":1232960,"url":"https://alion.io/job/singtel-lead-dns-engineer","title":"Lead DNS Engineer","company":{"id":49912,"name":"Singtel","domain":"singtel.com","url":"https://alion.io/company/singtel","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"SuccessFactors","truth_index":null},"role":"Industrial Engineering","role_family":"Industrial Engineering","seniority":"lead","employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Macquarie Park, Australia"],"countries":["AU"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":104000,"max_usd":243000,"period":"year","method":"global_role_cell_scaled_by_country","sample_n":1258},"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"DNS","optional":false},{"name":"Platform Engineering","optional":false},{"name":"BGP","optional":true},{"name":"CI/CD","optional":true},{"name":"Linux","optional":true}],"status":"live","first_seen_at":"2026-09-13T16:00:00Z","employer_posted_date":"2026-09-13","last_verified_at":"2026-09-26T05:56:13Z","board_verified":false,"closed_at":null,"days_open":15,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":15},"description":"It starts with YES!\nOptus is an Australian telecommunications company, delivering more than 11 million services to our customers every day across mobile, broadband, and digital solutions.\nAbout the role\nOptus is seeking a Lead DNS Engineer to provide hands-on technical leadership across our carrier-grade DNS environment.\nThis is a DNS-first senior individual contributor role responsible for the technical integrity, design, and implementation of DNS services across authoritative DNS, resolver DNS, cache DNS, DNS security controls, observability, and lifecycle uplift.\nThe successful candidate will operate as the senior engineering lead for DNS, combining architecture and standards with practical implementation. This role is expected to design solutions, build and improve configurations and automation, lead complex technical change, and materially reduce service risk across current and future DNS platforms.\nThe position is for an engineer who can move between strategy and execution - someone who can define the right design and then help implement it in production.\nWhat You’ll Do\nDNS architecture, design, and implementation\nDesign and implement solutions across authoritative DNS, recursive DNS, cache DNS, DNS policy services, and DNS control plane functions.\nDefine and maintain target-state architecture and engineering patterns for Consumer, Enterprise, and Internal DNS services.\nProduce practical designs that can be implemented safely in production, including migration patterns, coexistence models, failover design, and rollback strategy.\nBuild and improve DNS configurations, service patterns, and deployment approaches across current and future DNS platforms.\nDNS platform engineering and change delivery\nLead hands-on implementation of complex DNS changes, upgrades, migrations, and resilience improvements.\nImprove DNS automation, validation, and deployment workflows to reduce manual risk and increase repeatability.\nWork through deep technical details of zone management, zone publication, policy distribution, hidden master operation, and service cutover.\nSupport and technically lead platform transition programs, ensuring design intent is carried through into implementation.\nLifecycle uplift and technical risk reduction\nIdentify DNS lifecycle exposure across software, supporting components, and service dependencies, and drive practical remediation plans.\nReduce technical debt and simplify brittle service patterns through engineering change, not just documentation.\nImprove service resilience, recovery readiness, and observability through targeted implementation work and design correction.\nSupport technology refresh and service modernisation by taking designs through to deployable outcomes.\nDNS security, service correctness, and resilience\nDesign and implement improvements to DNS security controls including DNSSEC, TSIG, access control, RPZ policy handling, secure administration, and auditability.\nImprove service correctness across authoritative, resolver, and cache paths, including failover behaviour, propagation behaviour, and dependency management.\nDefine and implement guardrails for safe DNS change, including validation, rollback expectations, and production-readiness checks.\nSupport major incidents, root cause analysis, and recurring issue elimination with a strong engineering focus on prevention.\nEngineering leadership and cross-functional execution\nWork closely with platform engineering, network engineering, security, operations, and vendor teams to turn DNS service requirements into deployable and supportable solutions.\nProvide senior technical leadership during design, implementation, and stabilisation of DNS changes.\nImprove engineering documentation, build standards, implementation patterns, runbooks, and migration artefacts.\nMentor engineers and contribute to lifting practical DNS engineering capability across the organisation.\nWhat makes you the right fit for the role?\nDeep hands-on expertise in DNS engineering across authoritative DNS, recursive DNS, cache DNS, and DNS service operations.\nStrong understanding of DNS protocols, record types, zone design, split-horizon or split-view DNS, recursion behaviour, forwarding, and cache behaviour.\nProven experience designing and implementing production DNS services in large-scale enterprise, ISP, carrier, or service provider environments.\nStrong knowledge of DNS security concepts including DNSSEC, TSIG, response policy mechanisms, access control, and service hardening.\nExperience implementing resilient DNS designs including hidden masters, secondaries, anycast-based service delivery, failover patterns, and control/data plane separation.\nStrong problem-solving capability across complex service incidents, technical debt, lifecycle uplift, and architectural remediation.\nExperience building or improving DNS automation, validation, deployment, or migration workflows.\nExperience producing high-quality engineering documentation such as design documents, standards, runbooks, migration plans, and risk assessments.\nStrong communication skills with the ability to explain complex DNS concepts to engineering operations, architecture, and leadership audiences. \n\nLeadership attributes\nStrong engineering judgement\nStructured and pragmatic problem solving\nOwnership mindset for service quality and technical integrity\nAbility to balance immediate operational realities with long-term design direction\nCalm, credible presence during major incidents and critical changes\nCollaborative approach across service, platform, and operations teams\nEssential experience and capability\nDeep hands-on expertise in DNS engineering across authoritative DNS, recursive DNS, cache DNS, and DNS service operations.\nStrong understanding of DNS protocols, record types, zone design, split-horizon or split-view DNS, recursion behaviour, forwarding, and cache behaviour.\nProven experience designing and implementing production DNS services in large-scale enterprise, ISP, carrier, or service provider environments.\nStrong knowledge of DNS security concepts including DNSSEC, TSIG, response policy mechanisms, access control, and service hardening.\nExperience implementing resilient DNS designs including hidden masters, secondaries, anycast-based service delivery, failover patterns, and control/data plane separation.\nStrong problem-solving capability across complex service incidents, technical debt, lifecycle uplift, and architectural remediation.\nExperience building or improving DNS automation, validation, deployment, or migration workflows.\nExperience producing high-quality engineering documentation such as design documents, standards, runbooks, migration plans, and risk assessments.\nStrong communication skills with the ability to explain complex DNS concepts to engineering operations, architecture, and leadership audiences.\nDesirable experience and capability\nStrong systems and platform engineering capability across Linux-based infrastructure, service hardening, observability, and lifecycle management.\nWorking knowledge of server, OS, virtualisation, and platform operations relevant to carrier-grade DNS environments.\nFamiliarity with network and traffic engineering constructs such as BGP anycast, load balancing, routing daemons, HA clustering, and service advertisement models.\nExperience with DNS platforms and products such as BIND, Unbound, Power DNS, F5 BIG-IP DNS or similar.\nExposure to automation and infrastructure tooling used to manage DNS at scale, including APIs, scripting, CI/CD, infrastructure-as-code, configuration management, and service onboarding workflows.\nExperience with service observability platforms, telemetry pipelines, logging, SNMP-based monitoring, and performance analysis.\nExperience working in regulated or highly available production environments where uptime, auditability, and service correctness are critical.\nAbility to work effectively with platform, infrastructure, and operations teams to translate service requirements into deployable runtime patterns.\nThe good stuff….\nCompetitive remuneration and colleague discounts. Make life easier (and more affordable) with $80 monthly credit and 25% off Optus products and outstanding shopping discounts with our retail partners.\nFlexible working arrangements with opportunities to work three days in the office, two days remote or home.\nVibrant and collaborative office campus that includes cafes, a convenience store, chill-out zones, GP, post office, gym, and on-site childcare centre.\nCompetitive leave policies, including additional 'Connected’ days to focus on culture, family, health, community, or whatever’s important to you.\nWe support growing families with inclusive, carer-neutral paid Parental Leave of up to 16 weeks.\nBuild meaningful connections through colleague-led networks and diversity initiatives including Culture Connect, Elevate Women, Disability Network, and Express Yourself (LGBTQIA+).\nPut your wellbeing first with free access to counselling and support services, 24/7 - in-person, by phone, SMS, or video.\nFree Optus bus from Macquarie University Metro Station (every 6-8 minutes); morning and afternoon.\nAt Optus, we are strengthened by others and that means valuing diversity and saying ‘yes’ to embracing individual differences. We are committed to ensuring that our application process provides an equal employment opportunity to all job seekers, including individuals from diverse gender, cultural and linguistic backgrounds, individuals with a disability, individuals identifying as being part of the LGBTQIA+ community, individuals who may have served in the armed forces or who identify as Aboriginal and/or Torres Strait Islander. We also want to do our best to make our recruitment process inclusive. If you require any adjustments or accessibility support to participate fairly and equitably in the recruitment process, please email  or call 1800 309 170.\nFor more information on Diversity, Inclusion & Belonging at Optus, please visit https://www.optus.com.au/about/inclusion-diversity","description_format":"text","description_chars":10075,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"master","optional":false},"security_clearance":false,"languages":[]},"benefits":["Flexible schedule","Parental leave"],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Telecommunications","Broadband"],"lifecycle":[{"event":"open","at":"2026-09-25T15:25:06Z"}],"liveness":{"score":77,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.86,"p_room":0.9,"age_days":14,"expected_fill_days":32,"reasons":["conf:47","velocity","win:mid","comp:brand"],"computed_at":"2026-09-28T05:45:00Z"},"pay":null,"html_url":"https://alion.io/job/singtel-lead-dns-engineer","json_url":"https://alion.io/job/singtel-lead-dns-engineer.json","meta":{"generated_at":"2026-09-28T22:31:06Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","usage":{"tier":"crawler","counted_by":"address","units_charged":1,"used_today":286,"day_limit":5000,"remaining_today":4714,"minute_limit":60,"resets_at":"2026-09-29T00:00:00Z"}}}