Senior Infoblox (DDI) Engineer

Defense Engineering Inc.; Fort Belvoir (VA); On-site; USD 120,000 - 150,000; Full time

Job summary

Defense Engineering, Inc. is seeking a Senior Infoblox Engineer to lead architecture, deployment, and optimization of enterprise DNS/DHCP/IPAM across secure DoD networks. You will drive Grid management, high-availability, and automation using REST/WAPI, Python, and Ansible.

The role requires DoD Secret clearance, DoD 8570/8140 baseline certification, and substantial experience with Infoblox and network security. Location is Fort Belvoir, VA.

Qualifications

• Must hold an active DoD Secret clearance and be able to obtain TS/SCI.
• DoD 8570/8140 baseline certification (IAT Level II).
• Bachelor’s degree plus 10+ years IT experience, or 15 years experience in lieu of a degree.

Responsibilities

• Design, deploy, and manage enterprise Infoblox DDI infrastructure across security enclaves.
• Implement STIGs, vulnerability remediation, and secure DNS/DHCP/IPAM services.
• Lead migration and cutover from legacy DNS/DHCP to Infoblox with minimal disruption.
• Integrate Infoblox with AD, Cisco/Aruba networks, NAC and security platforms via REST/WAPI and automation tools.
• Provide Tier 3/4 escalation support and thorough documentation.

Skills

Infoblox Grid Architecture

DNS Administration

DHCP Operations

IP Address Management (IPAM)

Education

Bachelor’s Degree in Computer Science, Information Technology, Cybersecurity, or Engineering

15 years of progressive IT experience in lieu of a degree

Tools

Infoblox WAPI/REST

Python

Ansible

PowerShell

Job description

Position Overview

Defense Engineering, Inc. (Dei) is seeking an experienced Senior Infoblox Engineer to lead the architecture, deployment, management, and optimization of enterprise-wide DNS, DHCP, and IP Address Management (DDI) infrastructure across secure networks. The ideal candidate will possess extensive expertise in Infoblox Grid management, network infrastructure, high-availability deployments, and DoD compliance practices. You will be responsible for ensuring network reliability, automating network services, executing complex migration strategies, and hardening DDI architectures to comply with strict Department of Defense standards.

Key Responsibilities

• Grid & Appliance Architecture: Design, deploy, configure, and maintain enterprise Infoblox Grid infrastructure, including Grid Masters, Grid Master Candidates, HA pairs, and virtual/physical appliances across disparate sites and security enclaves.
• DDI Services Management: Manage authoritative and recursive DNS (including DNSSEC, split-horizon, conditional forwarding), scope/range DHCP allocations, failover pairs, and structured IPAM netmasks/containers.
• Cybersecurity & STIG Compliance: Apply DISA Security Technical Implementation Guides (STIGs), perform vulnerability remediation, and implement security controls like Response Policy Zones (RPZ) and query filtering.
• System Operations & Lifecycle: Oversee Infoblox Grid upgrades, patch management, licensing, capacity management, disaster recovery, and high-availability operations.
• Network & API Integration: Integrate Infoblox services with Active Directory, Cisco/Aruba routing and switching networks, NAC solutions, and security platforms via Infoblox REST/WAPI APIs and automation toolsets (Python, Ansible).
• Migrations & Cutover Execution: Develop detailed runbooks and lead major DNS/DHCP migrations from legacy platforms (e.g., Microsoft DNS/DHCP, BIND) to Infoblox with zero or minimal service disruption.
• Tier 3/4 Escalation Support: Serve as the senior subject matter expert to diagnose and resolve complex network connectivity, DNS resolution failures, and DHCP lease allocation issues using protocol analyzers (Wireshark, tcpdump).
• Documentation & Governance: Maintain accurate network topology diagrams, namespace documentation, standard operating procedures (SOPs), as-built documentation, and change-management plans.

Technical Qualifications & Hiring Requirements

Mandatory Requirements & Prerequisites

• Clearance: Must hold an Active Department of Defense (DoD) Secret Security Clearance must be able to obtain TS/SCI
• DoD 8570/8140 Baseline Certification: Must possess an active DoD IAT Level II certification (e.g., CompTIA Security+ CE, CySA+, CCNA-Security, GICSP, GSEC, or SSCP).
• Experience & Education:
  • Bachelor’s Degree in Computer Science, Information Technology, Cybersecurity, or Engineering AND a minimum of 10 years of progressive IT experience.
  • OR
  • A minimum of 15 years of progressive IT experience in lieu of a degree.

Technical Skills & Competencies

1. Core DDI & Infoblox Expertise (Required)

• Infoblox Grid Architecture: Hands-on experience with Grid Master configuration, Grid disaster recovery, appliance lifecycle management, and NIOS operating system upgrades.
• DNS Administration: In-depth technical mastery of DNS query/response behaviors, resource records (A, AAAA, CNAME, PTR, MX, SRV, TXT), DNSSEC implementation, forwarding/conditional forwarding, delegation, and Zone Transfer (AXFR/IXFR) mechanisms.
• DHCP Operations: Deep understanding of DHCP lease processes, DHCP options (66, 67, 150, etc.), failover protocols, reservations, relay agents, and scope hygiene.
• IP Address Management (IPAM): Advanced skill structuring IP space, network containers, extensible attributes (EA), static assignment policies, and dual-stack IPv4/IPv6 address architecture.

1. Networking & Security Infrastructure (Required)

• Network Protocols & Routing: Deep knowledge of TCP/IP, UDP, VLAN segmentation, DHCP Relay across routed environments, and core routing protocols (BGP, OSPF, EIGRP).
• Network Hardening: Hands-on experience executing DISA STIGs, vulnerability assessments (ACAS/Nessus), and patching infrastructure to adhere to DoD Cyber Exchange standards.
• Packet & Log Analysis: Expertise with packet capture utilities (tcpdump, Wireshark) and syslog analysis to resolve network transport and application resolution issues.

1. Desired / Preferred Qualifications

• Infoblox Certifications: Infoblox Core DDI Admin (CDDA) or Infoblox Core DDI Advanced Troubleshooting (CDAT).
• Vendor Certifications: Cisco Certified Network Professional (CCNP Enterprise) or equivalent enterprise networking certification.
• Automation & Scripting: Proficiency in API integrations using Infoblox WAPI/REST, Python, Ansible, or PowerShell for automating IP allocation and record provisioning workflows.
• Migration Experience: Proven track record of planning, staging, validating data, and executing large-scale migrations from Microsoft DNS/DHCP to Infoblox.