DDI Architect: DNS/DHCP/IPAM Strategy Leader

Leidos Inc; Greenbelt (MD); On-site; USD 92,000 - 167,000; Full time

Job summary

Leidos is seeking a seasoned DDI Architect to lead enterprise DNS, DHCP, and IPAM services across NASA networks. The role focuses on secure, scalable DNS architectures, DNSSEC signing, and compliant operations in alignment with NIST SP 80053 and CISA directives.

You will partner with Engineering, System Administration, and Operations teams to deliver zero-trust DNS modernization and IPv6-first strategy, ensuring secure, resilient name resolution for critical mission systems.

Qualifications

• Bachelor's degree with 10+ years designing and operating enterprise DNS/DHCP/IPAM (DDI) services.
• Hands-on implementation of NIST SP 80081r3 practices: protective DNS and encrypted DNS protocols.
• Experience meeting CISA encrypted DNS guidance and PDNS integration; ability to prevent unauthorized DNS traffic.

Responsibilities

• Design and maintain authoritative and recursive DNS architectures, including DNSSEC signing and chain-of-trust.
• Operationalize NIST SP 80081r3 guidance for secure DNS deployment (DoT/DoH/DoQ) across enterprise DNS roles.
• Enforce Zero Trust policies for DNS management interfaces and support protective DNS deployments.
• Govern DNS email configurations (SPF/DKIM/DMARC) to meet BOD requirements and NASA Email Architecture.
• Participate in Root Server Operator operations and .gov DNSSEC compliance.

Skills

DDI Architecture

DNS/DHCP/IPAM

DNSSEC

NIST SP 80053 SC20/SC21

DoT/DoH/DoQ

Zero Trust

IPv6

Education

Bachelor's degree

Job description

Leidos is seeking a seasoned DDI Architect to lead enterprise DNS, DHCP, and IPAM services across NASA networks. The role focuses on secure, scalable DNS architectures, DNSSEC signing, and compliant operations in alignment with NIST SP 80053 and CISA directives.

You will partner with Engineering, System Administration, and Operations teams to deliver zero-trust DNS modernization and IPv6-first strategy, ensuring secure, resilient name resolution for critical mission systems.