DDI Architect: Secure DNS/DHCP/IPAM for Federal Missions

Leidos; Orlando (FL); On-site; USD 92,000 - 167,000; Full time

Job summary

Leidos seeks a seasoned DDI Architect to lead design and lifecycle management of enterprise DNS/DHCP/IPAM for NASA networks. You will drive secure, resilient name resolution and support Root Server operations in a federal context.

You will partner with Engineering, System Administration, and Operations to implement NIST SP 800‑53 controls, DNSSEC, and IPv6 adoption while reducing risk through automation and protective DNS practices.

Qualifications

• Bachelor's degree and 10+ years of experience designing and operating enterprise DNS/DHCP/IPAM (DDI) services with secure DNS architectures (DNSSEC, signing, DS management).
• Hands-on implementation of NIST SP 800-81r3 practices: protective DNS, encrypted DNS (DoT/DoH/DoQ), secure recursive resolvers, and DNS logging/forensics.
• Familiarity with federal guidance (CISA, BODs) and KEV patching with Zero Trust for management interfaces.

Responsibilities

• Design and maintain authoritative and recursive DNS architectures with DNSSEC and DS management.
• Implement protective DNS, encrypted DNS protocols, and logging per NIST SP 800‑81r3.
• Align with BODs and KEV remediation timelines for secure DNS deployments.
• Manage IPv6/DNS, DHCPv6, IPAM with IPv6-first strategies and dual‑stack hygiene.
• Coordinate with root server operators and federal domain compliance efforts.

Skills

DDI architecture

DNSSEC

Zero Trust

NIST SP 800-53

Education

Bachelor's degree

Associate's degree

Job description

Leidos seeks a seasoned DDI Architect to lead design and lifecycle management of enterprise DNS/DHCP/IPAM for NASA networks. You will drive secure, resilient name resolution and support Root Server operations in a federal context.

You will partner with Engineering, System Administration, and Operations to implement NIST SP 800‑53 controls, DNSSEC, and IPv6 adoption while reducing risk through automation and protective DNS practices.