Senior Infoblox DDI Engineer

Automatic Data Processing, Inc.; Fort Meade (MD); Hybrid; USD 102,000 - 108,000; Full time

Job summary

PW Communications seeks a Senior Infoblox DDI Engineer to support the Defense Enclave Services program for DISA at Fort Meade, MD. You will engineer, deploy, and sustain DNS, DHCP, and IPAM services using Infoblox grid infrastructure, with emphasis on high availability, security hardening, and production support across multiple sites.

This is a full-time, hybrid role requiring U.S. citizenship and a Secret Security Clearance.

Qualifications

• Bachelor's degree with 8+ years of relevant experience, or a Master's with 6+ years.
• Experience engineering, implementing, and troubleshooting enterprise DNS/DHCP/IPAM.
• Knowledge of routing protocols (BGP, OSPF; EIGRP desirable).
• Experience migrating DNS/DHCP services to Infoblox or similar DDI platforms.
• Hands-on experience with Infoblox Grid architecture and high-availability.
• Experience integrating Infoblox with AD, NAC, and automation tools.

Responsibilities

• Engineer, deploy, configure, and sustain Infoblox grid infrastructure across sites.
• Design and maintain enterprise DNS architecture, zones, and DNSSEC.
• Engineer and maintain DHCP services, including scope design and failover.
• Design and maintain IPAM structure and address plans.
• Perform Infoblox upgrades, patching, backup, and lifecycle management.
• Integrate Infoblox with AD, NAC, and automation platforms via APIs.
• Implement DNS security features and policy-based controls.
• Lead routing and switching infrastructure supporting DDI services.

Skills

Network engineering

DNS/DHCP/IPAM

Routing & switching

Security clearance

Education

Bachelor's degree in a related field

Master's degree in a related field

Tools

Infoblox Grid

WAPI/REST automation

Active Directory integration

Job description

If you are unable to complete this application due to a disability, contact this employer to ask for an accommodation or an alternative application process.

Fort Meade, Fort Meade, MD, US

2 days ago Requisition ID: 1024

Salary Range: $102,000.00 To $108,000.00 Annually

Location: Fort Meade, MD

Schedule: (FT/PT): Full Time

Travel Required:

Shift:

Potential for Telework: Yes, Hybrid (4 days in office; remote 1 day p/week)

Required: Secret Security Clearance and U.S. Citizenship

Job Description

Our customer, Defense Information Systems Agency (DISA), requires personnel to support the Defense Enclave Services (DES) contract. The DES team is responsible for developing and deploying operational capabilities into an integrated and modernized enterprise environment. Become a member of the team supporting an extensive modernization program critical to DISA and Fourth Estate Agencies. Fourth Estate entities include organizations within the DoD that are not in the military departments, IC agencies, or combatant commands. The DES contract unifies the DOD Fourth Estate Defense Agencies and Field Activities (DAFA) common-use information technology systems, personnel, functions, and program elements under the direction of DISA’s Fourth Estate Network Optimization program office.

Our client is seeking a Senior Infoblox DDI Engineer to engineer, implement, migrate, and sustain enterprise DNS, DHCP, and IP address management (DDI) services in support of large-scale network operations. The engineer will provide hands-on technical leadership for Infoblox grid infrastructure, DNS, DHCP, IPAM, and associated network services, including design, migration, troubleshooting, testing, security hardening, and production implementation. The position also requires strong routing and switching expertise because DDI services depend on the underlying network for reachability, DHCP relay, segmentation, routing, and high availability. The engineer must be able to troubleshoot issues across both the Infoblox platform and the network infrastructure supporting it.

Scope and Impact

• Impact: Contributes to the completion of significant project milestones and recommends technical solutions and improvements that affect program results. Work is performed under general direction, with latitude for independent judgment on technical approach.
• Complexity: Resolves complex technical problems requiring in-depth analysis, evaluation of multiple factors, and application of established engineering principles and best practices.
• Communication: Communicates technical information, design recommendations, risks, and status to engineering leadership, peer teams, and stakeholders. Explains complex technical concepts clearly to both technical and non-technical audiences.
• Knowledge: Strong working knowledge of DNS, DHCP, and IPAM principles and of routing and switching concepts, with demonstrated depth in enterprise DDI platform engineering.

Primary Responsibilities

• Engineer, deploy, configure, and sustain Infoblox grid infrastructure, including grid masters, grid master candidates, members, high-availability pairs, and distributed appliances across sites and enclaves.
• Design and maintain enterprise DNS architecture, including authoritative and recursive services, forward and reverse zones, delegation, conditional forwarding, split-horizon views, zone transfers, and DNSSEC.
• Engineer and maintain enterprise DHCP services, including scope and range design, failover and redundancy, reservations, option configuration, relay behavior, and lease management.
• Design and maintain IPAM structure, including network containers, address space allocation, utilization reporting, extensible attributes, and data hygiene across the enterprise.
• Perform Infoblox grid upgrades, patching, backup and restore, capacity planning, licensing, and lifecycle management.
• Integrate Infoblox with Active Directory, network access control, automation platforms, and provisioning workflows via APIs and supported integrations.
• Implement DNS security capabilities such as response policy zones, query filtering and logging, and threat-intelligence-driven blocking where approved.

Routing and Switching Engineering

• Engineer, configure, and implement enterprise routing and switching infrastructure supporting DDI services, including routing policy, VLAN architecture, DHCP relay paths, anycast service delivery, and high-availability designs.
• Support routing protocol configuration and troubleshooting across BGP, OSPF, and EIGRP, including redistribution, filtering, and convergence behavior affecting DDI reachability.
• Perform installation, modification, configuration, testing, and servicing of network equipment, including hardware refresh and software upgrades.
• Provide senior-level troubleshooting for complex connectivity, name resolution, and address assignment issues spanning client, network, and service layers.

Implementation and Documentation

• Develop implementation plans, test and validation steps, rollback procedures, and change documentation for DDI and network changes, and execute them during approved change windows.
• Support DNS and DHCP migrations, consolidations, and namespace cleanup efforts, including data validation and cutover sequencing.
• Apply configuration hardening, STIG requirements, and vulnerability remediation to DDI appliances and network devices.
• Maintain DDI architecture diagrams, namespace and address plans, zone and scope documentation, integration designs, backup and recovery procedures, troubleshooting guides, standard operating procedures, and as-built documentation.

Basic Qualifications

• Bachelor's degree with 8+ years of relevant experience, or a Master's degree with 6+ years of relevant experience. Additional relevant experience, education, and training may be considered in lieu of a degree.
• Significant hands-on experience engineering, implementing, and troubleshooting enterprise network infrastructure supporting DNS, DHCP, and IP Address Management (DDI) services, including TCP/IP, VLANs, routing, DHCP relay, high availability, and service reachability.
• Working knowledge of enterprise routing protocols, including BGP and OSPF; experience with EIGRP is desirable.
• Strong working knowledge of DNS and DHCP, including DNS resolution, zone management, scope and range design, DHCP options, relay, failover, lease management, and troubleshooting.
• Strong understanding of IPAM principles and practices, including address-space planning, allocation standards, utilization management, and data integrity.
• Demonstrated experience performing enterprise-scale DNS and DHCP migrations, including discovery, data analysis, source validation, migration planning, cutover execution, rollback planning, and post-migration verification.
• Experience migrating DNS and DHCP services from legacy platforms, including Microsoft DNS/DHCP, to Infoblox or equivalent enterprise DDI platforms.
• Hands-on experience with Infoblox Grid architecture, including Grid Masters, Grid Master Candidates, Grid Members, high-availability pairs, delegated administration, and distributed DDI service delivery.
• Experience troubleshooting complex DNS resolution and DHCP address-assignment issues using packet captures, DNS query analysis, DHCP transaction analysis, logs, and network telemetry.
• Experience with DNS architecture and operations, including forward and reverse zones, AXFR/IXFR zone transfers, primary/secondary relationships, delegation, forwarding, recursion, conditional forwarding, and DNSSEC.
• Experience configuring and troubleshooting DHCP relay across routed, segmented, and multi-VRF network environments.
• Experience validating DNS and DHCP data before migration, including DNS records, scopes, reservations, exclusions, leases, options, stale records, and duplicate or conflicting data.
• Experience developing detailed migration runbooks, implementation plans, test procedures, validation criteria, and rollback procedures, and executing DNS/DHCP cutovers during approved production maintenance windows.
• Experience performing post-migration validation of DDI services, including forward and reverse DNS resolution, DHCP address allocation, relay operation, failover, client connectivity, and service availability.
• Experience supporting DDI services across multiple network enclaves, security zones, geographically distributed sites, or other complex enterprise network environments.
• Experience with DNS/DHCP monitoring, alerting, capacity management, availability management, and operational health reporting.
• Experience maintaining configuration baselines and as-built documentation for DNS, DHCP, IPAM, and Infoblox infrastructure.
• Demonstrated ability to identify and resolve dependencies among DNS, DHCP, IPAM, Active Directory, routing and switching infrastructure, applications, identity services, and security controls.
• Ability to analyze, reconcile, and remediate inaccurate or inconsistent DDI data and establish standards for maintaining DNS, DHCP, and IPAM data quality.
• Experience developing and executing technical test plans with documented success criteria, validation evidence, defect tracking, remediation, and operational acceptance.
• Experience supporting formal change-management processes, including change requests, implementation plans, maintenance windows, validation evidence, backout procedures, and post-change documentation.
• Demonstrated troubleshooting experience using packet capture and protocol-analysis tools across multi-vendor enterprise environments.
• Hands-on experience with Infoblox and one or more enterprise networking technologies or platforms, such as Cisco, Aruba, Palo Alto, Dell, or Brocade.
• Experience with IPv6 addressing, DNS, and DHCPv6 in enterprise dual-stack or IPv6 migration environments is desirable.
• Experience automating Infoblox provisioning and DDI data management using WAPI, REST APIs, Python, Ansible, or equivalent automation technologies.
• Experience integrating Infoblox with enterprise services such as Active Directory, PKI, NAC, identity services, configuration-management platforms, monitoring systems, and automation workflows.
• Experience applying cybersecurity hardening, vulnerability remediation, configuration baselines, and applicable DoD security requirements to DDI and supporting network infrastructure.
• Strong written and verbal communication skills, with demonstrated experience developing technical designs, implementation procedures, network diagrams, migration documentation, and operational procedures using Visio, PowerPoint, or similar tools.
• Current DoD IAT Level II certification or higher, such as Security+ CE.

Preferred Qualifications

• Infoblox certification (such as Infoblox Core DDI or equivalent) and Cisco Certified Network Professional (CCNP) Enterprise or equivalent.
• Experience with large-scale DNS/DHCP migrations, consolidations, or transitions from Microsoft DNS/DHCP to Infoblox.
• Experience with Infoblox API, WAPI automation, or scripting with Python or Ansible to automate DDI provisioning and data hygiene.
• Experience with anycast DNS delivery and distributed service architectures.
• Experience integrating DDI with network access control, identity-based networking, and segmentation efforts.
• Experience with IPv6 addressing, DNS, and DHCPv6 in enterprise environments.
• Experience integrating enterprise networking and DDI with cloud infrastructure and hybrid connectivity.
• Experience applying DISA STIGs, vulnerability remediation, and configuration hardening.
• Experience with Jira, Confluence, or similar project and knowledge-management tools.

Additional Qualifications

• Certification in one or more of the following: IAT Level II - CASP+ CE, IAT Level II - CCNA-Security, IAT Level II - CCNP Security, IAT Level II - CCSP, IAT Level II - CISA, IAT Level II - CISSP (or Associate), IAT Level II - CND, IAT Level II - CySA+, IAT Level II - GCED, IAT Level II - GCIH, IAT Level II - GICSP, IAT Level II - GSEC, IAT Level II - Security+ CE, IAT Level II - SSCP

PW Communications is a woman-owned, military-friendly firm that specializes in DoD contract support and proposal/document preparation for Federal contractors. For over 20 years, we have served as the premiere source in providing solutions to complex problems that face our clients daily. PW Communications' staff is renowned as leaders in consultancy, and that is exactly why our clients trust us as THE source in handling mission essential needs.

All qualified applicants will receive consideration for employment without regard to sex, race, ethnicity, age, national origin, citizenship, religion, physical or mental disability, medical condition, genetic information, pregnancy, family structure, marital status, ancestry, domestic partner status, sexual orientation, gender identity or expression, veteran or military status, or any other basis prohibited by law.