Senior Infoblox DDI Engineer with Security Clearance

GES is seeking a Senior Infoblox DDI Engineer to engineer, implement, migrate, and sustain enterprise DNS, DHCP, and IP address management (DDI) services in support of large-scale network operations. The engineer will provide hands-on technical leadership for Infoblox grid infrastructure, DNS, DHCP, IPAM, and associated network services, including design, migration, troubleshooting, testing, security hardening, and production implementation. The position also requires strong routing and switching expertise because DDI services depend on the underlying network for reachability, DHCP relay, segmentation, routing, and high availability. The engineer must be able to troubleshoot issues across both the Infoblox platform and the network infrastructure supporting it. Days Required in Office:, Five Days in Office Until Acclimated and then possibly One Day Remote Clearance Required: Secret Scope and Impact: Impact: Contributes to the completion of significant project milestones and recommends technical solutions and improvements that affect program results. Work is performed under general direction, with latitude for independent judgment on technical approach. Complexity: Resolves complex technical problems requiring in-depth analysis, evaluation of multiple factors, and application of established engineering principles and best practices. Communication: Communicates technical information, design recommendations, risks, and status to engineering leadership, peer teams, and stakeholders. Explains complex technical concepts clearly to both technical and non-technical audiences. Knowledge: Strong working knowledge of DNS, DHCP, and IPAM principles and of routing and switching concepts, with demonstrated depth in enterprise DDI platform engineering. Primary

Responsibilities:
Infoblox and DDI Engineering
* Engineer, deploy, configure, and sustain Infoblox grid infrastructure, including grid masters, grid master candidates, members, high-availability pairs, and distributed appliances across sites and enclaves.
* Design and maintain enterprise DNS architecture, including authoritative and recursive services, forward and reverse zones, delegation, conditional forwarding, split-horizon views, zone transfers, and DNSSEC.
* Engineer and maintain enterprise DHCP services, including scope and range design, failover and redundancy, reservations, option configuration, relay behavior, and lease management.
* Design and maintain IPAM structure, including network containers, address space allocation, utilization reporting, extensible attributes, and data hygiene across the enterprise.
* Perform Infoblox grid upgrades, patching, backup and restore, capacity planning, licensing, and lifecycle management.
* Integrate Infoblox with Active Directory, network access control, automation platforms, and provisioning workflows via APIs and supported integrations.
* Implement DNS security capabilities such as response policy zones, query filtering and logging, and threat-intelligence-driven blocking where approved.
Routing and Switching Engineering
* Engineer, configure, and implement enterprise routing and switching infrastructure supporting DDI services, including routing policy, VLAN architecture, DHCP relay paths, anycast service delivery, and high-availability designs.
* Support routing protocol configuration and troubleshooting across BGP, OSPF, and EIGRP, including redistribution, filtering, and convergence behavior affecting DDI reachability.
* Perform installation, modification, configuration, testing, and servicing of network equipment, including hardware refresh and software upgrades.
* Provide senior-level troubleshooting for complex connectivity, name resolution, and address assignment issues spanning client, network, and service layers.
Implementation and Documentation
* Develop implementation plans, test and validation steps, rollback procedures, and change documentation for DDI and network changes, and execute them during approved change windows.
* Support DNS and DHCP migrations, consolidations, and namespace cleanup efforts, including data validation and cutover sequencing.
* Apply configuration hardening, STIG requirements, and vulnerability remediation to DDI appliances and network devices.
* Maintain DDI architecture diagrams, namespace and address plans, zone and scope documentation, integration designs, backup and recovery procedures, troubleshooting guides, standard operating procedures, and as-built documentation.
Key Success Factors:
* Successfully execute DNS and DHCP migrations with minimal operational impact.
* Maintain DNS, DHCP, and IPAM data integrity before, during, and after migration.
* Detect and resolve dependencies between DDI services and routing, switching, security, identity, and applications.
* Produce repeatable migration procedures that can be executed consistently across multiple SIPR sites and environments.
* Restore or roll back DDI services quickly when