Job Description

Senior Network Automation Engineer

We are looking for a Senior Network Automation Engineer to join our partner's team in a B2B, FULL REMOTE engagement.

In this role, you will design and operate a modern, API-driven infrastructure, automating network and DNS policies as code. A key focus will be on building scalable automation workflows and engineering secure DNS solutions, including DNS over HTTPS (DoH) and DNS over TLS (DoT), with strong emphasis on reliability and observability.

Requirements:

• 
  5+ years of experience in Linux systems engineering with strong networking focus (TCP/IP, routing, iptables, ipsets)
• 
  3+ years of hands-on experience with Ansible at scale (roles, collections, Jinja2, dynamic inventory, Vault)
• 
  Strong experience with Ansible testing and quality tools (Molecule, ansible-lint, yamllint) and AWX/Tower workflows
• 
  Proven experience working with APIs (REST/JSON), automating third-party services using Python and Ansible
• 
  Solid GitOps experience, including GitHub or GitLab CI pipelines, merge requests, quality gates, and staged deployments
• 
  Strong understanding of DNS architecture (forwarding, split-horizon, RPZ)
• 
  Hands-on experience with DNS over HTTPS (DoH) and DNS over TLS (DoT), including client/resolver configuration, PKI, certificate management, and fallback strategies
• 
  Experience with network security policies and DNS traffic control mechanisms
• 
  Strong troubleshooting, monitoring, and incident response skills
• 
  Good documentation skills and ability to create clear technical runbooks

Nice to Have:

• 
  Experience with Cisco ecosystem (Umbrella, Secure Access SSE, Meraki, Secure Firewall, ISE, SD-WAN)
• 
  Familiarity with cloud networking and DNS services (AWS Route53, Azure DNS, GCP Cloud DNS)
• 
  Experience with Terraform for infrastructure and DNS automation
• 
  Knowledge of containerization technologies (Docker, Kubernetes)
• 
  Experience with observability tools (Prometheus, Grafana, ELK, Splunk) and network telemetry (SNMP, NetFlow/IPFIX).