Senior DNS & Secure Mail Gateway Engineer-Romania

We are seeking an experienced Senior DNS & Secure Mail Gateway Engineer to join a highly secure enterprise infrastructure team responsible for supporting mission-critical IT services within a large-scale international environment.

In this role, you will be responsible for the design, operation, maintenance, and continuous improvement of secure DNS and Mail Gateway infrastructures. You will work within a high-security data center, ensuring the availability, integrity, and security of business-critical communication services while contributing to automation initiatives and infrastructure optimization.

The ideal candidate combines deep expertise in DNS technologies, secure email gateways, network security, and enterprise infrastructure operations with strong troubleshooting and automation capabilities.

Key ResponsibilitiesInfrastructure Operations

• Operate, administer, maintain, and continuously improve enterprise DNS and Secure Mail Gateway environments.
• Design and implement secure, scalable, and highly available DNS and mail gateway solutions.
• Install, configure, patch, and maintain system-related software and infrastructure components.
• Perform system configuration changes, software upgrades, and security-related updates.
• Ensure business continuity, availability, and resilience of critical infrastructure services.
• Manage user administration, permissions, and access controls.
• Perform capacity planning, performance tuning, and resource optimization.
• Maintain system documentation, operational procedures, and technical specifications.

Security & Compliance

• Implement security patches and remediation activities based on security advisories.
• Manage certificate lifecycle and encryption technologies.
• Support secure email communication through signing, encryption, and decryption mechanisms.
• Ensure compliance with enterprise security policies and best practices.
• Participate in security management activities, including malware protection, CERT recommendations, and vulnerability remediation.
• Configure and maintain firewall-related components supporting DNS and mail infrastructures.

Incident & Problem Management

• Investigate, diagnose, and resolve complex incidents affecting DNS and Secure Mail Gateway services.
• Provide 2nd and 3rd level technical support for critical infrastructure components.
• Perform root cause analysis for production issues and coordinate with software vendors when required.
• Manage incidents, problems, service requests, and change activities according to ITIL processes.
• Participate in on-call support and operational troubleshooting when necessary.

Automation & Continuous Improvement

• Design and develop automation solutions for recurring operational tasks.
• Improve and maintain existing scripts supporting DNS and mail infrastructure.
• Analyze the current environment and recommend technical improvements to increase reliability, security, and operational efficiency.
• Contribute to infrastructure modernization and process optimization initiatives.

Collaboration

• Work closely with infrastructure, network, security, and operations teams.
• Participate in technical planning, architecture discussions, and implementation projects.
• Provide technical documentation and knowledge transfer.
• Support continuous service improvement initiatives across the organization.

Required Qualifications

• Bachelor's degree in Computer Science, Information Technology, or a related field, or equivalent professional experience.
• Several years of experience administering enterprise DNS and Secure Mail Gateway environments.
• Strong knowledge of enterprise mail infrastructure and SMTP protocols.
• Extensive experience with:
• DNS administration
• DNSSEC
• Mail encryption technologies
• Digital certificates and PKI
• LDAP
• Email signing, encryption, and decryption
• Strong knowledge of enterprise firewall concepts.
• Experience with infrastructure automation and scripting.
• Solid understanding of Linux/Unix server administration.
• Experience with enterprise monitoring, logging, and event management solutions.
• Strong analytical and troubleshooting skills.
• Excellent communication and teamwork abilities.
• Fluent English, both written and spoken.

Required Technical Skills

• BIND DNS
• DNSSEC
• Compumatica Secure Mail Gateway
• Postfix
• Certificate Management (PKI)
• Mail Encryption
• SMTP
• LDAP
• Scripting (Shell, Python, or similar)
• Firewall Administration (Check Point / Palo Alto)
• ITIL v3
• ServiceNow (Incident & Problem Management)
• Change Management
• Request Fulfillment
• Nagios
• Splunk
• SharePoint
• Citrix
• Microsoft Office

Nice to Have

• Experience working in high-security or enterprise data center environments.
• Knowledge of secure communication infrastructures.
• Experience with enterprise identity and access management solutions.
• Familiarity with automation frameworks and configuration management tools.
• Experience supporting mission-critical infrastructure with high availability requirements.
• ITIL Certification.
• Security-related certifications are considered an advantage.