{"id":2262724,"url":"https://alion.io/job/leidos-senior-infoblox-ddi-engineer","title":"Senior Infoblox DDI Engineer","company":{"id":7791,"name":"Leidos","domain":"leidos.com","url":"https://alion.io/company/leidos","size_band":"5000+","is_staffing_agency":false,"employer_type":"services","is_intermediary":false,"listed_via":null,"ats_vendor":"Workday","truth_index":{"grade":"B","score":78,"open_postings":254,"ghost_share":0.004,"stale_share":0.862,"repost_share":0.008,"time_to_fill_p50_days":27,"computed_at":"2026-10-23T05:54:15Z"}},"role":"Industrial Engineering","role_family":"Industrial Engineering","seniority":"senior","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Odenton, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":92300,"max":166850,"currency":"USD","period":"year","gross":null,"usd_annual":166850},"salary_estimate":null,"experience_years_min":8,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Active Directory","optional":false},{"name":"BGP","optional":false},{"name":"DHCP","optional":false},{"name":"DNS","optional":false},{"name":"OSPF","optional":false},{"name":"Platform Engineering","optional":false},{"name":"TCP/IP","optional":false},{"name":"VLAN","optional":false},{"name":"Ansible","optional":true},{"name":"Confluence","optional":true},{"name":"Jira","optional":true},{"name":"PKI","optional":true},{"name":"Python","optional":true},{"name":"Rest API","optional":true}],"status":"live","first_seen_at":"2026-10-09T00:00:00Z","employer_posted_date":"2026-10-09","last_verified_at":"2026-10-22T02:56:46Z","board_verified":true,"closed_at":null,"days_open":14,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":14},"description":"Leidos is seeking a Senior Infoblox DDI Engineer to engineer, implement, migrate, and sustain enterprise DNS, DHCP, and IP address management (DDI) services in support of large-scale network operations. The engineer will provide hands-on technical leadership for Infoblox grid infrastructure, DNS, DHCP, IPAM, and associated network services, including design, migration, troubleshooting, testing, security hardening, and production implementation. The position also requires strong routing and switching expertise because DDI services depend on the underlying network for reachability, DHCP relay, segmentation, routing, and high availability. The engineer must be able to troubleshoot issues across both the Infoblox platform and the network infrastructure supporting it.\nScope and Impact\nImpact: Contributes to the completion of significant project milestones and recommends technical solutions and improvements that affect program results. Work is performed under general direction, with latitude for independent judgment on technical approach.\nComplexity: Resolves complex technical problems requiring in-depth analysis, evaluation of multiple factors, and application of established engineering principles and best practices.\nCommunication: Communicates technical information, design recommendations, risks, and status to engineering leadership, peer teams, and stakeholders. Explains complex technical concepts clearly to both technical and non-technical audiences.\nKnowledge: Strong working knowledge of DNS, DHCP, and IPAM principles and of routing and switching concepts, with demonstrated depth in enterprise DDI platform engineering.\nPrimary Responsibilities\nInfoblox and DDI Engineering\nEngineer, deploy, configure, and sustain Infoblox grid infrastructure, including grid masters, grid master candidates, members, high-availability pairs, and distributed appliances across sites and enclaves. \nDesign and maintain enterprise DNS architecture, including authoritative and recursive services, forward and reverse zones, delegation, conditional forwarding, split-horizon views, zone transfers, and DNSSEC. \nEngineer and maintain enterprise DHCP services, including scope and range design, failover and redundancy, reservations, option configuration, relay behavior, and lease management. \nDesign and maintain IPAM structure, including network containers, address space allocation, utilization reporting, extensible attributes, and data hygiene across the enterprise. \nPerform Infoblox grid upgrades, patching, backup and restore, capacity planning, licensing, and lifecycle management. \nIntegrate Infoblox with Active Directory, network access control, automation platforms, and provisioning workflows via APIs and supported integrations. \nImplement DNS security capabilities such as response policy zones, query filtering and logging, and threat-intelligence-driven blocking where approved. \nRouting and Switching Engineering\nEngineer, configure, and implement enterprise routing and switching infrastructure supporting DDI services, including routing policy, VLAN architecture, DHCP relay paths, anycast service delivery, and high-availability designs. \nSupport routing protocol configuration and troubleshooting across BGP, OSPF, and EIGRP, including redistribution, filtering, and convergence behavior affecting DDI reachability. \nPerform installation, modification, configuration, testing, and servicing of network equipment, including hardware refresh and software upgrades. \nProvide senior-level troubleshooting for complex connectivity, name resolution, and address assignment issues spanning client, network, and service layers. \nImplementation and Documentation\nDevelop implementation plans, test and validation steps, rollback procedures, and change documentation for DDI and network changes, and execute them during approved change windows. \nSupport DNS and DHCP migrations, consolidations, and namespace cleanup efforts, including data validation and cutover sequencing. \nApply configuration hardening, STIG requirements, and vulnerability remediation to DDI appliances and network devices. \nMaintain DDI architecture diagrams, namespace and address plans, zone and scope documentation, integration designs, backup and recovery procedures, troubleshooting guides, standard operating procedures, and as-built documentation. \nRequired Qualifications\nBachelor’s degree with 8+ years of relevant experience, or a Master’s degree with 6+ years of relevant experience. Additional relevant experience, education, and training may be considered in lieu of a degree. \nSignificant hands-on experience engineering, implementing, and troubleshooting enterprise network infrastructure supporting DNS, DHCP, and IP Address Management (DDI) services, including TCP/IP, VLANs, routing, DHCP relay, high availability, and service reachability. \nWorking knowledge of enterprise routing protocols, including BGP and OSPF; experience with EIGRP is desirable. \nStrong working knowledge of DNS and DHCP, including DNS resolution, zone management, scope and range design, DHCP options, relay, failover, lease management, and troubleshooting. \nStrong understanding of IPAM principles and practices, including address-space planning, allocation standards, utilization management, and data integrity. \nDemonstrated experience performing enterprise-scale DNS and DHCP migrations, including discovery, data analysis, source validation, migration planning, cutover execution, rollback planning, and post-migration verification. \nExperience migrating DNS and DHCP services from legacy platforms, including Microsoft DNS/DHCP, to Infoblox or equivalent enterprise DDI platforms. \nHands-on experience with Infoblox Grid architecture, including Grid Masters, Grid Master Candidates, Grid Members, high-availability pairs, delegated administration, and distributed DDI service delivery. \nExperience troubleshooting complex DNS resolution and DHCP address-assignment issues using packet captures, DNS query analysis, DHCP transaction analysis, logs, and network telemetry. \nExperience with DNS architecture and operations, including forward and reverse zones, AXFR/IXFR zone transfers, primary/secondary relationships, delegation, forwarding, recursion, conditional forwarding, and DNSSEC. \nExperience configuring and troubleshooting DHCP relay across routed, segmented, and multi-VRF network environments. \nExperience validating DNS and DHCP data before migration, including DNS records, scopes, reservations, exclusions, leases, options, stale records, and duplicate or conflicting data. \nExperience developing detailed migration runbooks, implementation plans, test procedures, validation criteria, and rollback procedures, and executing DNS/DHCP cutovers during approved production maintenance windows. \nExperience performing post-migration validation of DDI services, including forward and reverse DNS resolution, DHCP address allocation, relay operation, failover, client connectivity, and service availability. \nExperience supporting DDI services across multiple network enclaves, security zones, geographically distributed sites, or other complex enterprise network environments. \nExperience with DNS/DHCP monitoring, alerting, capacity management, availability management, and operational health reporting. \nExperience maintaining configuration baselines and as-built documentation for DNS, DHCP, IPAM, and Infoblox infrastructure. \nDemonstrated ability to identify and resolve dependencies among DNS, DHCP, IPAM, Active Directory, routing and switching infrastructure, applications, identity services, and security controls. \nAbility to analyze, reconcile, and remediate inaccurate or inconsistent DDI data and establish standards for maintaining DNS, DHCP, and IPAM data quality. \nExperience developing and executing technical test plans with documented success criteria, validation evidence, defect tracking, remediation, and operational acceptance. \nExperience supporting formal change-management processes, including change requests, implementation plans, maintenance windows, validation evidence, backout procedures, and post-change documentation. \nDemonstrated troubleshooting experience using packet capture and protocol-analysis tools across multi-vendor enterprise environments. \nHands-on experience with Infoblox and one or more enterprise networking technologies or platforms, such as Cisco, Aruba, Palo Alto, Dell, or Brocade. \nExperience with IPv6 addressing, DNS, and DHCPv6 in enterprise dual-stack or IPv6 migration environments is desirable. \nExperience automating Infoblox provisioning and DDI data management using WAPI, REST APIs, Python, Ansible, or equivalent automation technologies. \nExperience integrating Infoblox with enterprise services such as Active Directory, PKI, NAC, identity services, configuration-management platforms, monitoring systems, and automation workflows. \nExperience applying cybersecurity hardening, vulnerability remediation, configuration baselines, and applicable DoD security requirements to DDI and supporting network infrastructure. \nStrong written and verbal communication skills, with demonstrated experience developing technical designs, implementation procedures, network diagrams, migration documentation, and operational procedures using Visio, PowerPoint, or similar tools. \nCurrent DoD IAT Level II certification or higher, such as Security+ CE. \nActive DoD Secret clearance. \nPreferred Qualifications\nInfoblox certification (such as Infoblox Core DDI or equivalent) and Cisco Certified Network Professional (CCNP) Enterprise or equivalent. \nExperience with large-scale DNS/DHCP migrations, consolidations, or transitions from Microsoft DNS/DHCP to Infoblox. \nExperience with Infoblox API, WAPI automation, or scripting with Python or Ansible to automate DDI provisioning and data hygiene. \nExperience with anycast DNS delivery and distributed service architectures. \nExperience integrating DDI with network access control, identity-based networking, and segmentation efforts. \nExperience with IPv6 addressing, DNS, and DHCPv6 in enterprise environments. \nExperience integrating enterprise networking and DDI with cloud infrastructure and hybrid connectivity. \nExperience applying DISA STIGs, vulnerability remediation, and configuration hardening. \nExperience with Jira, Confluence, or similar project and knowledge-management tools. \nKey Success Factors\nSuccessfully execute DNS and DHCP migrations with minimal operational impact. \nMaintain DNS, DHCP, and IPAM data integrity before, during, and after migration. \nDetect and resolve dependencies between DDI services and routing, switching, security, identity, and applications. \nProduce repeatable migration procedures that can be executed consistently across multiple SIPR sites and environments. \nRestore or roll back DDI services quickly when migration validation criteria are not met. \nIf you're looking for comfort, keep scrolling. At Leidos, we outthink, outbuild, and outpace the status quo - because the mission demands it. We're not hiring followers. We're recruiting the ones who disrupt, provoke, and refuse to fail. Step 10 is ancient history. We're already at step 30 - and moving faster than anyone else dares.\nOriginal Posting:\nOctober 9, 2026For U.S. Positions: While subject to change based on business needs, Leidos reasonably anticipates that this job requisition will remain open for at least 3 days with an anticipated close date of no earlier than 3 days after the original posting date as listed above.\nPay Range:\nPay Range $92,300.00 - $166,850.00The Leidos pay range for this job level is a general guideline only and not a guarantee of compensation or salary. Additional factors considered in extending an offer include (but are not limited to) responsibilities of the job, education, experience, knowledge, skills, and abilities, as well as internal equity, alignment with market data, applicable bargaining agreement (if any), or other law.","description_format":"text","description_chars":11983,"description_truncated":false,"requirements":{"experience_years_min":8,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":true,"languages":[]},"benefits":["Equity"],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["National Security","C4ISR","Defense Manufacturing","Engineering Services"],"lifecycle":[{"event":"open","at":"2026-10-11T05:28:41Z"}],"visa":[{"country":"US","licensed_sponsor":true,"evidence":"H-1B filings in 12 months: 50 · green card filings: 24","filings_12m":50,"filings_prev_12m":58,"green_card_filings_12m":24,"median_offered_wage_usd":124257,"route":null,"cap_exempt":false,"checked_at":"2026-10-15T11:24:14+00:00","sources":["US Department of Labor: LCA disclosure data (H-1B, H-1B1, E-3)","US Department of Labor: PERM disclosure data (green cards)"],"filings_for_role_12m":0}],"liveness":{"score":55,"band":"ok","label":"Likely open","p_open":1,"p_active":0.611,"p_room":0.9,"age_days":14,"expected_fill_days":27,"reasons":["conf:26","stale_co","velocity","win:mid","comp:brand"],"computed_at":"2026-10-23T05:54:15Z"},"pay":{"stated_usd_annual":166850,"is_top_pay":true},"html_url":"https://alion.io/job/leidos-senior-infoblox-ddi-engineer","json_url":"https://alion.io/job/leidos-senior-infoblox-ddi-engineer.json","meta":{"generated_at":"2026-10-23T06:19:41Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":10278,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-24T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":7791},"rest":"https://alion.io/mcp/rest/get_company?id=7791"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fleidos-senior-infoblox-ddi-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fleidos-senior-infoblox-ddi-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fleidos-senior-infoblox-ddi-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/leidos-senior-infoblox-ddi-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fleidos-senior-infoblox-ddi-engineer"}]}