Senior Infoblox DDI Engineer

Global Enterprise Services•Fort Meade, MD

8d•Hybrid

About The Position

GES is seeking a Senior Infoblox DDI Engineer to engineer, implement, migrate, and sustain enterprise DNS, DHCP, and IP address management (DDI) services supporting large-scale network operations. The role provides hands-on technical leadership for Infoblox grid infrastructure and related network services, spanning design, migration, troubleshooting, testing, security hardening, and production implementation. Strong routing and switching expertise is required to address the network dependencies of DDI services, including reachability, DHCP relay, segmentation, routing, and high availability. The engineer troubleshoots issues across both the Infoblox platform and its supporting network infrastructure. The position contributes to significant project milestones and recommends technical solutions and improvements that affect program results. Work is performed under general direction, with latitude for independent technical judgment. The engineer resolves complex problems through in-depth analysis and communicates technical information, design recommendations, risks, and status to engineering leadership, peer teams, and stakeholders. The role requires five days in the office until acclimated, with the possibility of one remote day afterward. An active Secret clearance is required.

Requirements

Bachelor’s degree and at least 8 years of relevant experience, or a master’s degree and at least 6 years of relevant experience; additional relevant experience, education, and training may be considered in lieu of a degree.
Significant hands-on experience engineering, implementing, and troubleshooting enterprise network infrastructure supporting DDI services, including TCP/IP, VLANs, routing, DHCP relay, high availability, and service reachability.
Working knowledge of enterprise routing protocols, including BGP and OSPF; EIGRP experience is desirable.
Strong working knowledge of DNS and DHCP, including DNS resolution, zone management, scope and range design, DHCP options, relay, failover, lease management, and troubleshooting.
Strong understanding of IPAM principles, including address-space planning, allocation standards, utilization management, and data integrity.
Demonstrated experience performing enterprise-scale DNS and DHCP migrations, including discovery, data analysis, source validation, planning, cutover, rollback, and post-migration verification.
Experience migrating DNS and DHCP from legacy platforms, including Microsoft DNS/DHCP, to Infoblox or equivalent enterprise DDI platforms.
Hands-on experience with Infoblox Grid architecture, including Grid Masters, Grid Master Candidates, Grid Members, high-availability pairs, delegated administration, and distributed DDI delivery.
Experience troubleshooting DNS resolution and DHCP address-assignment issues using packet captures, DNS query analysis, DHCP transaction analysis, logs, and network telemetry.
Experience with DNS architecture and operations, including forward and reverse zones, AXFR/IXFR transfers, primary/secondary relationships, delegation, forwarding, recursion, conditional forwarding, and DNSSEC.
Experience configuring and troubleshooting DHCP relay across routed, segmented, and multi-VRF environments.
Experience validating DNS and DHCP data before migration, including records, scopes, reservations, exclusions, leases, options, stale records, and duplicate or conflicting data.
Experience developing migration runbooks, implementation plans, test procedures, validation criteria, and rollback procedures, and executing production cutovers during approved maintenance windows.
Experience validating migrated DDI services, including forward and reverse DNS resolution, DHCP allocation, relay operation, failover, client connectivity, and service availability.
Experience supporting DDI across multiple network enclaves, security zones, geographically distributed sites, or other complex enterprise environments.
Experience with DNS/DHCP monitoring, alerting, capacity management, availability management, and operational health reporting.
Experience maintaining configuration baselines and as-built documentation for DNS, DHCP, IPAM, and Infoblox infrastructure.
Ability to identify and resolve dependencies among DDI, Active Directory, routing and switching, applications, identity services, and security controls.
Ability to analyze, reconcile, and remediate inconsistent DDI data and establish data-quality standards.
Experience developing and executing technical test plans with documented success criteria, validation evidence, defect tracking, remediation, and operational acceptance.
Experience supporting formal change management, including change requests, implementation plans, maintenance windows, validation evidence, backout procedures, and post-change documentation.
Demonstrated packet-capture and protocol-analysis troubleshooting experience across multi-vendor enterprise environments.
Hands-on Infoblox experience and experience with one or more enterprise networking platforms or technologies, such as Cisco, Aruba, Palo Alto, Dell, or Brocade.
Experience applying cybersecurity hardening, vulnerability remediation, configuration baselines, and applicable DoD security requirements to DDI and supporting network infrastructure.
Strong written and verbal communication skills, including experience developing technical designs, implementation procedures, network diagrams, migration documentation, and operational procedures using Visio, PowerPoint, or similar tools.
Current DoD IAT Level II certification or higher, such as Security+ CE.
Active DoD Secret clearance.

Nice To Haves

Infoblox certification, such as Infoblox Core DDI or equivalent, and CCNP Enterprise or equivalent.
Experience with EIGRP.
Experience with IPv6 addressing, DNS, and DHCPv6 in enterprise dual-stack or IPv6 migration environments.
Experience automating Infoblox provisioning and DDI data management using WAPI, REST APIs, Python, Ansible, or equivalent technologies.
Experience integrating Infoblox with Active Directory, PKI, NAC, identity services, configuration-management platforms, monitoring systems, and automation workflows.
Experience with large-scale DNS/DHCP migrations, consolidations, or transitions from Microsoft DNS/DHCP to Infoblox.
Experience with Infoblox API, WAPI automation, or Python or Ansible scripting for DDI provisioning and data hygiene.
Experience with anycast DNS delivery and distributed service architectures.
Experience integrating DDI with network access control, identity-based networking, and segmentation efforts.
Experience integrating enterprise networking and DDI with cloud infrastructure and hybrid connectivity.
Experience applying DISA STIGs, vulnerability remediation, and configuration hardening.
Experience with Jira, Confluence, or similar project and knowledge-management tools.

Responsibilities

Engineer, deploy, configure, and sustain Infoblox grid infrastructure, including grid masters, grid master candidates, members, high-availability pairs, and distributed appliances across sites and enclaves.
Design and maintain enterprise DNS architecture, including authoritative and recursive services, forward and reverse zones, delegation, conditional forwarding, split-horizon views, zone transfers, and DNSSEC.
Engineer and maintain DHCP services, including scope and range design, failover and redundancy, reservations, options, relay behavior, and lease management.
Design and maintain IPAM structures, including network containers, address allocation, utilization reporting, extensible attributes, and data hygiene.
Perform Infoblox upgrades, patching, backup and restore, capacity planning, licensing, and lifecycle management.
Integrate Infoblox with Active Directory, network access control, automation platforms, and provisioning workflows through APIs and supported integrations.
Implement approved DNS security capabilities, including response policy zones, query filtering and logging, and threat-intelligence-driven blocking.
Engineer, configure, and implement routing and switching infrastructure supporting DDI services, including routing policy, VLAN architecture, DHCP relay paths, anycast service delivery, and high-availability designs.
Configure and troubleshoot BGP, OSPF, and EIGRP routing, including redistribution, filtering, and convergence behavior affecting DDI reachability.
Install, modify, configure, test, and service network equipment, including hardware refreshes and software upgrades.
Troubleshoot complex connectivity, name-resolution, and address-assignment issues across client, network, and service layers.
Develop implementation plans, test and validation steps, rollback procedures, and change documentation for DDI and network changes, and execute approved changes during change windows.
Support DNS and DHCP migrations, consolidations, and namespace cleanup, including data validation and cutover sequencing.
Apply configuration hardening, STIG requirements, and vulnerability remediation to DDI appliances and network devices.
Maintain architecture diagrams, namespace and address plans, zone and scope documentation, integration designs, backup and recovery procedures, troubleshooting guides, standard operating procedures, and as-built documentation.
Execute DNS and DHCP migrations with minimal operational impact while maintaining data integrity and identifying dependencies across DDI, network, security, identity, and application services.
Develop repeatable migration procedures for multiple SIPR sites and environments, and restore or roll back services promptly when validation criteria are not met.