DNS Architect

Organisation Overview Our Client is an established organisation operating across complex, multi‑environment infrastructure‑spanning on‑premises systems, cloud platforms, and third‑party services. They help ensure dependable connectivity and robust digital operations, with a strong focus on resilience, security, and operational excellence. This is a place where architecture thinking matters: you will collaborate with specialists, contribute to evidence‑led recommendations, and deliver practical, client‑facing advisory outputs that strengthen long‑term capability. Role Summary Our Client is seeking a DNS Architect to support a key advisory and assessment engagement. The purpose of this role is to review and improve DNS architecture across hybrid environments, identifying risks, gaps, and technical debt—without implementing changes. You will play a strategic part in shaping the direction of future‑state DNS resilience and security posture, influencing how the organisation reduces failure risk, strengthens trust boundaries, and improves operational consistency across multiple DNS providers and platforms. Responsibilities Review end‑to‑end DNS architecture across on‑prem, cloud, and SaaS platforms Assess configuration alignment and consistency across multiple DNS providers Identify architectural gaps, risks, and areas of technical debt Analyse resiliency and redundancy within the current DNS model Evaluate single‑provider dependency risks Propose multi‑vendor DNS architecture approaches to eliminate single points of failure Consider active/active and active/passive patterns Map failure domains across platform, provider, region, and control‑plane boundaries Assess alignment with industry standards Review the architecture against recognised best practices Evaluate scalability, separation of concerns, and operational consistency Create current‑state and future‑state architecture views Produce conceptual future‑state architecture guidance Define prioritised improvement areas Develop a phased roadmap (advisory only—no implementation) Lead DNS security architecture and risk analysis (with support from security engineers) Perform DNS threat modelling using a STRIDE‑style approach Assess control‑plane access and trust boundaries Analyse provider dependencies across control‑plane and data‑plane Identify misconfiguration risks in SaaS DNS platforms Document failure modes and abuse cases (non‑adversarial; no active testing) Use telemetry to strengthen findings (no new tooling) Review existing DNS telemetry and logs Correlate latency, error rates, and query trends Identify resilience patterns, cascading failures, and hidden dependencies Support recommendations with empirical evidence Essential Skills & Experience Strong DNS architecture experience across hybrid environments (on‑prem, cloud, and SaaS) Demonstrable ability to assess resiliency models , including multi‑vendor design principles and failure‑domain mapping Proven capability to perform security‑focused architecture analysis , including threat‑modelling (STRIDE‑style desirable) and trust‑boundary thinking Experience analysing DNS performance and operational telemetry (latency/error/query trends) using existing logs and metrics Ability to produce formal, client‑facing advisory documentation with clear findings, structured risk commentary, and actionable recommendations Familiarity with common enterprise DNS components and concepts such as control plane vs data plane, dependency mapping, and misconfiguration risk patterns Desirable Skills & Experience Experience with one or more major DNS/platform technologies such as: BlueCat Akamai F5 (including GTM/LTM) AWS Route 53 Azure DNS Prior experience delivering architecture assessments that result in future‑state roadmaps (conceptual, non‑implementation) Experience creating structured outputs such as threat and failure matrices, dependency registers, and risk reduction summaries Call to Action If you’re an experienced DNS Architect and enjoy advisory work that blends architecture, resiliency, security, and evidence‑based analysis, we’d love to hear from you. Please submit your CV for consideration. #J-18808-Ljbffr iO Associates