Prin IT Technologist

At MiniMed, you can begin a lifelong career of exploration and innovation, while helping make a difference in the lives of people living with diabetes around the globe. You'll lead with purpose, breaking down barriers to innovation for a more connected, compassionate world.

• *About the Role**

==================

We are seeking a DNS \& PKI Engineer responsible for the design, implementation, automation, and operational support of enterprise DNS and certificate services. This role is critical to ensure secure, highly available name resolution and certificate lifecycle management across hybrid environments

• *\#BetterDayStartNow**

• *Key Responsibilities**
• ------------------------------------------------

### **DNS Engineering \& Operations**

• Design, implement, and maintain enterprise DNS infrastructure, including:

+ Authoritative and recursive DNS services

+ Internal and external DNS architectures

• Administer and optimize Infoblox DDI (DNS, DHCP, IPAM) platforms
• Manage DNS zones, records, delegation, and resolution performance
• Implement DNS security controls:

+ DNSSEC

+ Response policy zones (RPZ)

+ DDoS protection strategies

* Integrate DNS services with Cloudflare for

+ Public DNS hosting

+ CDN and traffic routing

+ Security (WAF, bot protection, rate limiting)

• Troubleshoot complex resolution issues across hybrid (on\-prem/cloud) environments

### **PKI \& Certificate Management**

* Design and manage enterprise PKI solutions, including

+ Internal Certificate Authorities (CAs)

+ Integration with public CAs

* Oversee full certificate lifecycle

+ Request, issuance, renewal, revocation, and retirement

• Implement and maintain automation for certificate lifecycle management (e.g., ACME, APIs)

+ Integrate catalog items within ITSM platforms

+ Understand certificate renewal process/auto renewal

* Deploy and manage

+ SSL/TLS certificates for web apps, APIs, and infrastructure

+ Mutual TLS (mTLS) where applicable

• Ensure compliance with organizational security policies and industry standards

### **Cloudflare Integration**

* Administer and optimize Cloudflare services, including

+ DNS hosting and record management

+ SSL/TLS configuration (Full/Strict modes, edge certificates)

+ CDN and performance tuning

* Configure and maintain

+ Web Application Firewall (WAF)

+ Zero Trust / access controls (where applicable)

• Support hybrid DNS architectures across on\-prem and Cloudflare edge

### **Automation \& Engineering**

* Develop automation for DNS and certificate management

+ Infrastructure as Code (IaC) (e.g., Terraform, ARM, etc.)

+ API\-based integrations (Infoblox, Cloudflare, DigiCert)

* Build monitoring and alerting for

+ DNS resolution health

+ Certificate expiration

+ Security anomalies

• Standardize deployment patterns and operational runbooks

### **Operations \& Support**

• Provide L3 support and escalation for DNS and certificate\-related incidents from MSP
• Help MSP conduct root cause analysis and implement corrective actions
• Maintain system availability and performance aligned with SLAs
• Participate in on\-call rotation as needed

• *Required Qualifications**
• --------------------------

* 5\+ years of hands\-on experience in

+ DNS engineering (enterprise\-scale)

+ PKI / certificate lifecycle management

* Strong experience with

+ Infoblox (DDI platform administration, NIOS\-X)

+ DigiCert (certificate issuance, automation, APIs)

+ Cloudflare (DNS, CDN, SSL/TLS, WAF)

+ Domain registrar management experience

* Deep understanding of

+ DNS protocols and architecture

+ TCP/IP networking fundamentals

+ SSL/TLS handshake and certificate chains

* Experience troubleshooting

+ DNS resolution failures

+ Certificate trust and validation issues

• Scripting/automation experience (PowerShell, Python, or similar)

• *Preferred Qualifications**
• ---------------------------

* Experience with

+ Hybrid cloud environments (Azure/AWS)

+ Microsoft Entra ID / Active Directory integration

* Familiarity with

+ Certificate automation tooling

+ Zero Trust architecture

• Experience implementing DNS security controls (DNSSEC, RPZ)
• Infrastructure\-as\-Code experience (Terraform preferred)

• *Physical Job Requirements**

=============================

The above statements are intended to describe the general nature and level of work being performed by employees assigned to this position, but they are not an exhaustive list of all the required responsibilities and skills of this position.

• *Benefits \& Compensation**

============================

• *MiniMed offers a competitive salary and flexible benefits package**

At MiniMed, we put people first. A commitment to our employees lives at the core of our values: We recognize their contributions. They share in the success they help create. We offer a wide range of benefits, resources, and competitive compensation plans designed to support you at every stage of your career and life.

• *About MiniMed**

=================

We want to make every day a better day for people living with diabetes. Our team of creative innovators around the globe share a passion for finding the simplest solutions to the problems that people with diabetes face on a daily basis. For more than 40 years, we've been redefining what's possible, from intelligent dosing systems designed for real life to predictive insights that stay a step ahead, and we're dedicated to continuing to support our customers through every step of their journey — meeting them where and how they need it.