DDI Architect: DNS/DHCP/IPAM, Zero Trust Lead

Via Logic LLC; Greenbelt (MD); On-site; USD 92,000 - 167,000; Full time

Job summary

Leidos, a global technology and mission-focused company, seeks a seasoned DDI Architect to lead the design and lifecycle management of DNS, DHCP, and IPAM services for NASA networks. You will drive secure name resolution aligned with NIST SP 800-53 controls and collaborate with engineering, system administration, and operations teams.

The role emphasizes IPv6-first strategies, DNSSEC signing/validation, protective DNS deployment, and Zero Trust controls across authoritative servers, resolvers,

Qualifications

• Bachelor's degree with 10+ years designing/operating enterprise DNS/DHCP/IPAM (DDI).
• Hands-on implementation of NIST SP 800-81r3 for encrypted DNS & logging.
• Experience with CISA Encrypted DNS Guidance & PDNS integration.
• Familiarity with .gov DNSSEC requirements and ARIN IPv6 deployments.

Responsibilities

• Lead enterprise DDI architecture and compliance across NASA networks.
• Implement protective DNS and encrypted DNS protocols with logging/forensics.
• Coordinate with Root Server Operators and enforce Zero Trust for management interfaces.
• Oversee DNS email security (DMARC/SPF/DKIM) and DNSSEC-related operations.

Skills

DNS/DHCP/IPAM architecture

NIST SP 800-53 SC-20/SC-21

Zero Trust

DNSSEC

Root Server Operator coordination

Education

Bachelor's degree in a related field

Associate's degree with 15+ years

Tools

DNSSEC tooling

PDNS

SIEM/SOAR integration

BOD remediation tooling

Job description

Leidos, a global technology and mission-focused company, seeks a seasoned DDI Architect to lead the design and lifecycle management of DNS, DHCP, and IPAM services for NASA networks. You will drive secure name resolution aligned with NIST SP 800-53 controls and collaborate with engineering, system administration, and operations teams.

The role emphasizes IPv6-first strategies, DNSSEC signing/validation, protective DNS deployment, and Zero Trust controls across authoritative servers, resolvers,