Senior DDI Architect – DNS, DHCP, IPAM & Zero Trust

Koitecc Solutions; Huntsville (AL); On-site; USD 92,000 - 167,000; Full time

Job summary

Leidos in Huntsville, AL seeks a seasoned DDI Architect to lead enterprise DNS/DHCP/IPAM design, deployment and lifecycle management across federal networks. You will implement NIST SP 800-53 controls, DNSSEC, and protective DNS solutions, while coordinating with engineering and operations teams on secure, scalable services.

The role focuses on IPv6-first strategies, zero trust integration, and root server responsibilities, ensuring compliant governance of .gov domains and robust logging,

Qualifications

• Bachelor's degree or equivalent with 10+ years designing and operating enterprise DNS/DHCP/IPAM (DDI) services.
• Hands-on implementation of NIST SP 800-81r3 practices: protective DNS, encrypted DNS (DoT/DoH/DoQ), secure resolvers, logging/forensics.

Responsibilities

• Design and maintain authoritative and recursive DNS architectures with DNSSEC signing and DS management.
• Operationalize NIST SP 800-81r3 guidance for secure DNS deployment across enterprise roles.
• Ensure compliance with Encrypted DNS Guidance and PDNS integration; prevent unauthorized DNS traffic.
• Govern DNS email configurations (DMARC/DKIM/SPF) and enforce Zero Trust for management interfaces.
• Participate in root server operations and .gov DNSSEC secure delegation.
• Administer IPv4/IPv6 allocations per ARIN policies and achieve DNS/IPAM governance.

Skills

DNS architecture

DDI expertise

Security compliance

NIST SP 800-53

IPv6 expertise

Education

Bachelor's degree

Associate's degree

Tools

DNSSEC tooling

PDNS integration

SIEM/SOAR

Job description

Leidos in Huntsville, AL seeks a seasoned DDI Architect to lead enterprise DNS/DHCP/IPAM design, deployment and lifecycle management across federal networks. You will implement NIST SP 800-53 controls, DNSSEC, and protective DNS solutions, while coordinating with engineering and operations teams on secure, scalable services.

The role focuses on IPv6-first strategies, zero trust integration, and root server responsibilities, ensuring compliant governance of .gov domains and robust logging,