Senior Infoblox DDI Engineer

JCS Solutions LLC•Fort Meade, MD

2d•$100,000 - $143,000•Onsite

About The Position

JCS Solutions is seeking a Senior Infoblox DDI Engineer to engineer, implement, migrate, and sustain enterprise DNS, DHCP, and IP Address Management (DDI) services supporting a large-scale Department of Defense network environment. This position provides hands-on engineering leadership for Infoblox Grid infrastructure, DNS, DHCP, IPAM, migration activities, troubleshooting, testing, and operational sustainment. The successful candidate will possess deep expertise in enterprise DDI services and strong routing and switching knowledge to support service reachability, high availability, DHCP relay, segmentation, and enterprise connectivity. The role requires the ability to troubleshoot and resolve issues spanning DDI platforms, routing infrastructure, identity services, security controls, and enterprise applications. This position supports migration initiatives, operational sustainment, automation opportunities, and modernization efforts across geographically distributed classified environments.

Requirements

Bachelor's degree with 8+ years of relevant experience, or Master's degree with 6+ years of relevant experience. Additional relevant experience, education, and training may be considered in lieu of a degree.
Active DoD Secret security clearance.
Current DoD 8140/8570 IAT Level II certification or higher.
Significant hands-on experience engineering, implementing, and troubleshooting enterprise infrastructure supporting DNS, DHCP, and IPAM services.
Strong understanding of TCP/IP, VLANs, routing, DHCP relay, service reachability, and high-availability architectures.
Working knowledge of BGP and OSPF; EIGRP experience is desirable.
Strong knowledge of DNS, DHCP, and IPAM principles and operations.
Experience performing enterprise-scale DNS and DHCP migrations.
Experience migrating Microsoft DNS/DHCP environments to Infoblox or equivalent DDI platforms.
Hands-on experience with Infoblox Grid architecture, including Grid Masters, Grid Members, HA pairs, and delegated administration.
Experience troubleshooting DNS resolution and DHCP address-assignment issues using packet captures and protocol analysis tools.
Experience with DNS architecture including DNSSEC, delegation, recursion, forwarding, conditional forwarding, and zone transfers.
Experience configuring DHCP relay across routed and multi-VRF environments.
Experience validating and remediating DNS, DHCP, and IPAM data during migration efforts.
Experience developing migration runbooks, implementation plans, rollback procedures, and validation documentation.
Experience supporting DDI services across geographically distributed enterprise environments.
Experience managing DDI monitoring, alerting, operational health, capacity management, and reporting.
Experience maintaining configuration baselines and technical documentation.
Experience integrating DNS, DHCP, IPAM, Active Directory, routing infrastructure, identity services, applications, and security controls.
Experience performing technical testing, validation, remediation, and operational acceptance activities.
Experience supporting formal change-management processes and production maintenance windows.
Experience troubleshooting across multi-vendor environments using packet capture and protocol-analysis tools.
Hands-on experience with Infoblox and one or more of the following: Cisco, Aruba, Palo Alto, Dell, Brocade
Experience integrating Infoblox with enterprise services including Active Directory, PKI, NAC, monitoring, and automation platforms.
Experience applying cybersecurity hardening, vulnerability remediation, configuration management, and DoD security requirements.
Strong written and verbal communication skills.

Nice To Haves

Infoblox Core DDI certification or equivalent Infoblox certification.
Cisco Certified Network Professional (CCNP) Enterprise or equivalent certification.
Experience with large-scale DNS and DHCP migrations, consolidations, and transitions from Microsoft DNS/DHCP to Infoblox.
Experience utilizing Infoblox APIs, WAPI automation, Python, Ansible, or similar automation technologies.
Experience with anycast DNS delivery and distributed service architectures.
Experience integrating DDI solutions with NAC, identity-based networking, and segmentation initiatives.
Experience with IPv6 addressing, DNS, and DHCPv6 in enterprise environments.
Experience integrating DDI solutions with cloud infrastructure and hybrid connectivity architectures.
Experience applying DISA STIGs, vulnerability remediation, and configuration hardening standards.
Experience utilizing Jira, Confluence, or similar project management and knowledge-sharing platforms.

Responsibilities

Engineer, deploy, configure, and sustain Infoblox Grid infrastructure including Grid Masters, Grid Master Candidates, Grid Members, high-availability pairs, and distributed appliances.
Design and maintain enterprise DNS architecture including authoritative and recursive services, forward and reverse zones, delegation, conditional forwarding, DNSSEC, split-horizon views, and zone transfers.
Engineer and maintain enterprise DHCP services including scope design, reservations, options, relay configuration, failover, redundancy, and lease management.
Design and maintain IPAM architecture including network containers, address allocation, utilization reporting, extensible attributes, and enterprise-wide data quality standards.
Perform Infoblox upgrades, patching, capacity planning, backup and recovery, licensing, and lifecycle management.
Integrate Infoblox with Active Directory, network access control platforms, identity services, automation tools, and provisioning workflows.
Implement approved DNS security capabilities including query filtering, DNS logging, RPZs, and threat-based protections.
Engineer, configure, and support enterprise routing and switching infrastructure supporting DDI services.
Support routing policies, VLAN architecture, DHCP relay, anycast service delivery, high availability, and service reachability.
Troubleshoot BGP, OSPF, EIGRP, route redistribution, filtering, and routing convergence issues impacting DDI services.
Perform installation, testing, configuration, modification, and servicing of network infrastructure equipment.
Provide senior-level troubleshooting for DNS resolution, DHCP assignment, and connectivity issues spanning multiple technology layers.
Develop implementation plans, rollback procedures, validation criteria, test procedures, and change documentation.
Execute DNS and DHCP migration activities, consolidations, namespace cleanup, and cutover operations.
Apply configuration hardening, vulnerability remediation, and STIG compliance requirements.
Maintain architecture diagrams, migration documentation, address plans, scope documentation, SOPs, troubleshooting guides, and as-built documentation.