Senior DDI Architect — Secure DNS/DHCP/IPAM

Via Logic LLC; Huntsville (AL); On-site; USD 92,000 - 167,000; Full time

Job summary

Leidos in Huntsville, AL seeks a seasoned DDI Architect to lead enterprise DNS, DHCP, and IPAM design, deployment, and lifecycle management across NASA-related networks. You will drive secure, scalable, IPv6-first architectures, DNSSEC, and zero-trust controls in line with NIST and CISA guidance.

Collaborating with Engineering, System Administration, and Operations, you will implement protective DNS, DoT/DoH, PDNS integration, and robust logging.

Qualifications

• Bachelor's degree or higher with 10+ years designing and operating enterprise DNS/DHCP/IPAM (DDI).
• Hands-on experience implementing NIST SP 800-81r3 protective DNS, encrypted DNS (DoT/DoH/DoQ), secure recursive resolvers, logging/forensics.

Responsibilities

• Lead architecture and lifecycle management of enterprise DNS, DHCP, and IPAM services.
• Implement protective controls and monitoring; integrate with SIEM/SOAR for forensics and incident response.
• Ensure .gov DNSSEC signing and secure delegation; govern DNS email configurations (DMARC/SPF/DKIM) per BODs.
• Collaborate with Engineering, System Administration and Operations to align with Zero Trust and CDM initiatives.

Skills

DDI architecture

DNS/DHCP/IPAM

DNSSEC

NIST SP 800-53

Zero Trust

IPv6

Education

Bachelor's degree

Associate's degree

Job description

Leidos in Huntsville, AL seeks a seasoned DDI Architect to lead enterprise DNS, DHCP, and IPAM design, deployment, and lifecycle management across NASA-related networks. You will drive secure, scalable, IPv6-first architectures, DNSSEC, and zero-trust controls in line with NIST and CISA guidance.

Collaborating with Engineering, System Administration, and Operations, you will implement protective DNS, DoT/DoH, PDNS integration, and robust logging.