Job Requirements
Fort Meade, MD
Secret Polygraph not specified
Mid Level Career (5+ yrs experience)
$110,000 - $155,000
Job Description
Senior Infoblox Engineer
Location: Ft. Meade, MD
Work Type: Full Time
Clearance: Secret
Position Summary: GridIron IT is seeking a Senior Infoblox DDI Engineer to engineer, implement, migrate, and sustain enterprise DNS, DHCP, and IP address management services in support of large-scale network operations. The engineer will provide hands-on technical leadership for Infoblox grid infrastructure, DNS, DHCP, IPAM, and associated network services, including design, migration, troubleshooting, testing, security hardening, and production implementation.
The position also requires strong routing and switching expertise because DDI services depend on the underlying network for reachability, DHCP relay, segmentation, routing, and high availability. The engineer must be able to troubleshoot issues across both the Infoblox platform and the supporting network infrastructure.
Primary Responsibilities
Infoblox and DDI Engineering
Engineer, deploy, configure, and sustain Infoblox grid infrastructure, including Grid Masters, Grid Master Candidates, members, high-availability pairs, and distributed appliances across sites and enclaves.
Design and maintain enterprise DNS architecture, including authoritative and recursive services, forward and reverse zones, delegation, conditional forwarding, split-horizon views, zone transfers, and DNSSEC.
Engineer and maintain enterprise DHCP services, including scope and range design, failover and redundancy, reservations, option configuration, relay behavior, and lease management.
Design and maintain IPAM structure, including network containers, address-space allocation, utilization reporting, extensible attributes, and enterprise data hygiene.
Perform Infoblox grid upgrades, patching, backup and restore, capacity planning, licensing, and lifecycle management.
Integrate Infoblox with Active Directory, network access control, automation platforms, and provisioning workflows through APIs and supported integrations.
Implement approved DNS security capabilities such as response policy zones, query filtering and logging, and threat-intelligence-driven blocking.
Routing and Switching Engineering
Engineer, configure, and implement enterprise routing and switching infrastructure supporting DDI services, including routing policy, VLAN architecture, DHCP relay paths, anycast service delivery, and high-availability designs.
Support routing protocol configuration and troubleshooting across BGP, OSPF, and EIGRP, including redistribution, filtering, and convergence behavior affecting DDI reachability.
Perform installation, modification, configuration, testing, and servicing of network equipment, including hardware refresh and software upgrades.
Provide senior-level troubleshooting for complex connectivity, name-resolution, and address-assignment issues spanning client, network, and service layers.
Implementation and Documentation
Develop implementation plans, test and validation steps, rollback procedures, and change documentation for DDI and network changes, and execute them during approved change windows.
Support DNS and DHCP migrations, consolidations, and namespace cleanup efforts, including data validation and cutover sequencing.
Apply configuration hardening, STIG requirements, and vulnerability remediation to DDI appliances and network devices.
Maintain DDI architecture diagrams, namespace and address plans, zone and scope documentation, integration designs, backup and recovery procedures, troubleshooting guides, standard operating procedures, and as-built documentation.
Key Success Factors
Successfully execute DNS and DHCP migrations with minimal operational impact.
Maintain DNS, DHCP, and IPAM data integrity before, during, and after migration.
Detect and resolve dependencies between DDI services and routing, switching, security, identity, and applications.
Produce repeatable migration procedures that can be executed consistently across multiple SIPR sites and environments.
Restore or roll back DDI services quickly when migration validation criteria are not met.
Required Qualifications
Bachelor’s degree with 8+ years of relevant experience, or a Master’s degree with 6+ years of relevant experience. Additional relevant experience, education, and training may be considered in lieu of a degree.
Significant hands-on experience engineering, implementing, and troubleshooting enterprise network infrastructure supporting DNS, DHCP, and IPAM services, including TCP/IP, VLANs, routing, DHCP relay, high availability, and service reachability.
Working knowledge of enterprise routing protocols, including BGP and OSPF; EIGRP experience is desirable.
Strong working knowledge of DNS, DHCP, and IPAM principles, including resolution, zone management, scope and range design, options, relay, failover, lease management, address-space planning, utilization management, and data integrity.
Demonstrated experience performing enterprise-scale DNS and DHCP migrations, including discovery, data analysis, source validation, planning, cutover execution, rollback planning, and post-migration verification.
Experience migrating legacy Microsoft DNS and DHCP services to Infoblox or an equivalent enterprise DDI platform.
Hands-on experience with Infoblox Grid architecture, including Grid Masters, Grid Master Candidates, Grid Members, high-availability pairs, delegated administration, and distributed DDI service delivery.
Experience troubleshooting complex DNS resolution and DHCP address-assignment issues using packet captures, DNS query analysis, DHCP transaction analysis, logs, and network telemetry.
Experience with forward and reverse zones, AXFR and IXFR zone transfers, primary and secondary relationships, delegation, forwarding, recursion, conditional forwarding, and DNSSEC.
Experience configuring and troubleshooting DHCP relay across routed, segmented, and multi-VRF network environments.
Experience validating DNS and DHCP data before migration, including records, scopes, reservations, exclusions, leases, options, stale records, and duplicate or conflicting data.
Experience developing detailed migration runbooks, implementation plans, test procedures, validation criteria, and rollback procedures and executing cutovers during approved production maintenance windows.
Experience performing post-migration validation of forward and reverse DNS resolution, DHCP address allocation, relay operation, failover, client connectivity, and service availability.
Experience supporting DDI services across multiple network enclaves, security zones, geographically distributed sites, or other complex enterprise environments.
Experience with DNS and DHCP monitoring, alerting, capacity management, availability management, operational health reporting, configuration baselines, and as-built documentation.
Ability to identify and resolve dependencies among DNS, DHCP, IPAM, Active Directory, routing and switching infrastructure, applications, identity services, and security controls.
Ability to analyze, reconcile, and remediate inaccurate or inconsistent DDI data and establish standards for maintaining data quality.
Experience developing and executing technical test plans with documented success criteria, validation evidence, defect tracking, remediation, and operational acceptance.
Experience supporting formal change-management processes, including change requests, implementation plans, maintenance windows, validation evidence, backout procedures, and post-change documentation.
Demonstrated troubleshooting experience using packet capture and protocol-analysis tools across multi-vendor enterprise environments.
Hands-on experience with Infoblox and one or more enterprise networking platforms such as Cisco, Aruba, Palo Alto, Dell, or Brocade.
Experience automating Infoblox provisioning and DDI data management using WAPI, REST APIs, Python, Ansible, or equivalent automation technologies.
Experience integrating Infoblox with Active Directory, PKI, NAC, identity services, configuration-management platforms, monitoring systems, and automation workflows.
Experience applying cybersecurity hardening, vulnerability remediation, configuration baselines, and applicable DoD security requirements to DDI and supporting network infrastructure.
Strong written and verbal communication skills, including developing technical designs, implementation procedures, network diagrams, migration documentation, and operational procedures using Visio, PowerPoint, or similar tools.
Current DoD IAT Level II certification or higher, such as Security+ CE.
Active DoD Secret clearance.
Desired Qualifications
Infoblox certification, such as Infoblox Core DDI or equivalent, and Cisco Certified Network Professional Enterprise or equivalent.
Experience with large-scale DNS and DHCP migrations, consolidations, or transitions from Microsoft DNS and DHCP to Infoblox.
Experience with Infoblox API or WAPI automation, or scripting with Python or Ansible to automate DDI provisioning and data hygiene.
Experience with anycast DNS delivery and distributed service architectures.
Experience integrating DDI with network access control, identity-based networking, and segmentation efforts.
Experience with IPv6 addressing, DNS, and DHCPv6 in enterprise dual-stack or IPv6 migration environments.
Experience integrating enterprise networking and DDI with cloud infrastructure and hybrid connectivity.
Experience applying DISA STIGs, vulnerability remediation, and configuration hardening.
Experience with Jira, Confluence, or similar project and knowledge-management tools.
Clearance: Applicants selected will be subject to a security investigation and may need to meet eligibility requirements for access to classified information.
Compensation and Benefits
Salary Range: $110,000-$155,000 (Compensation is determined by various factors, including but not limited to location, work experience, skills, education, certifications, seniority, and business needs. This range may be modified in the future.)
Benefits: Gridiron offers a comprehensive benefits package including medical, dental, vision insurance, HSA, FSA, 401(k), disability & ADD insurance, life and pet insurance to eligible employees. Full-time and part-time employees working at least 30 hours per week on a regular basis are eligible to participate in Gridiron’s benefits programs.
Gridiron IT Solutions is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, pregnancy, sexual orientation, gender identity, national origin, age, protected veteran status or disability status.
Gridiron IT is a Women Owned Small Business (WOSB) headquartered in the Washington, D.C. area that supports our clients' missions throughout the United States. Gridiron IT specializes in providing comprehensive IT services tailored to meet the needs of federal agencies. Our capabilities include IT Infrastructure & Cloud Services, Cyber Security, Software Integration & Development, Data Solution & AI, and Enterprise Applications. These capabilities are backed by Gridiron IT's experienced workforce and our commitment to ensuring we meet and exceed our clients' expectations.
Location: Ft. Meade, MD
Work Type: Full Time
Clearance: Secret
Position Summary: GridIron IT is seeking a Senior Infoblox DDI Engineer to engineer, implement, migrate, and sustain enterprise DNS, DHCP, and IP address management services in support of large-scale network operations. The engineer will provide hands-on technical leadership for Infoblox grid infrastructure, DNS, DHCP, IPAM, and associated network services, including design, migration, troubleshooting, testing, security hardening, and production implementation.
The position also requires strong routing and switching expertise because DDI services depend on the underlying network for reachability, DHCP relay, segmentation, routing, and high availability. The engineer must be able to troubleshoot issues across both the Infoblox platform and the supporting network infrastructure.
Primary Responsibilities
Infoblox and DDI Engineering
Engineer, deploy, configure, and sustain Infoblox grid infrastructure, including Grid Masters, Grid Master Candidates, members, high-availability pairs, and distributed appliances across sites and enclaves.
Design and maintain enterprise DNS architecture, including authoritative and recursive services, forward and reverse zones, delegation, conditional forwarding, split-horizon views, zone transfers, and DNSSEC.
Engineer and maintain enterprise DHCP services, including scope and range design, failover and redundancy, reservations, option configuration, relay behavior, and lease management.
Design and maintain IPAM structure, including network containers, address-space allocation, utilization reporting, extensible attributes, and enterprise data hygiene.
Perform Infoblox grid upgrades, patching, backup and restore, capacity planning, licensing, and lifecycle management.
Integrate Infoblox with Active Directory, network access control, automation platforms, and provisioning workflows through APIs and supported integrations.
Implement approved DNS security capabilities such as response policy zones, query filtering and logging, and threat-intelligence-driven blocking.
Routing and Switching Engineering
Engineer, configure, and implement enterprise routing and switching infrastructure supporting DDI services, including routing policy, VLAN architecture, DHCP relay paths, anycast service delivery, and high-availability designs.
Support routing protocol configuration and troubleshooting across BGP, OSPF, and EIGRP, including redistribution, filtering, and convergence behavior affecting DDI reachability.
Perform installation, modification, configuration, testing, and servicing of network equipment, including hardware refresh and software upgrades.
Provide senior-level troubleshooting for complex connectivity, name-resolution, and address-assignment issues spanning client, network, and service layers.
Implementation and Documentation
Develop implementation plans, test and validation steps, rollback procedures, and change documentation for DDI and network changes, and execute them during approved change windows.
Support DNS and DHCP migrations, consolidations, and namespace cleanup efforts, including data validation and cutover sequencing.
Apply configuration hardening, STIG requirements, and vulnerability remediation to DDI appliances and network devices.
Maintain DDI architecture diagrams, namespace and address plans, zone and scope documentation, integration designs, backup and recovery procedures, troubleshooting guides, standard operating procedures, and as-built documentation.
Key Success Factors
Successfully execute DNS and DHCP migrations with minimal operational impact.
Maintain DNS, DHCP, and IPAM data integrity before, during, and after migration.
Detect and resolve dependencies between DDI services and routing, switching, security, identity, and applications.
Produce repeatable migration procedures that can be executed consistently across multiple SIPR sites and environments.
Restore or roll back DDI services quickly when migration validation criteria are not met.
Required Qualifications
Bachelor’s degree with 8+ years of relevant experience, or a Master’s degree with 6+ years of relevant experience. Additional relevant experience, education, and training may be considered in lieu of a degree.
Significant hands-on experience engineering, implementing, and troubleshooting enterprise network infrastructure supporting DNS, DHCP, and IPAM services, including TCP/IP, VLANs, routing, DHCP relay, high availability, and service reachability.
Working knowledge of enterprise routing protocols, including BGP and OSPF; EIGRP experience is desirable.
Strong working knowledge of DNS, DHCP, and IPAM principles, including resolution, zone management, scope and range design, options, relay, failover, lease management, address-space planning, utilization management, and data integrity.
Demonstrated experience performing enterprise-scale DNS and DHCP migrations, including discovery, data analysis, source validation, planning, cutover execution, rollback planning, and post-migration verification.
Experience migrating legacy Microsoft DNS and DHCP services to Infoblox or an equivalent enterprise DDI platform.
Hands-on experience with Infoblox Grid architecture, including Grid Masters, Grid Master Candidates, Grid Members, high-availability pairs, delegated administration, and distributed DDI service delivery.
Experience troubleshooting complex DNS resolution and DHCP address-assignment issues using packet captures, DNS query analysis, DHCP transaction analysis, logs, and network telemetry.
Experience with forward and reverse zones, AXFR and IXFR zone transfers, primary and secondary relationships, delegation, forwarding, recursion, conditional forwarding, and DNSSEC.
Experience configuring and troubleshooting DHCP relay across routed, segmented, and multi-VRF network environments.
Experience validating DNS and DHCP data before migration, including records, scopes, reservations, exclusions, leases, options, stale records, and duplicate or conflicting data.
Experience developing detailed migration runbooks, implementation plans, test procedures, validation criteria, and rollback procedures and executing cutovers during approved production maintenance windows.
Experience performing post-migration validation of forward and reverse DNS resolution, DHCP address allocation, relay operation, failover, client connectivity, and service availability.
Experience supporting DDI services across multiple network enclaves, security zones, geographically distributed sites, or other complex enterprise environments.
Experience with DNS and DHCP monitoring, alerting, capacity management, availability management, operational health reporting, configuration baselines, and as-built documentation.
Ability to identify and resolve dependencies among DNS, DHCP, IPAM, Active Directory, routing and switching infrastructure, applications, identity services, and security controls.
Ability to analyze, reconcile, and remediate inaccurate or inconsistent DDI data and establish standards for maintaining data quality.
Experience developing and executing technical test plans with documented success criteria, validation evidence, defect tracking, remediation, and operational acceptance.
Experience supporting formal change-management processes, including change requests, implementation plans, maintenance windows, validation evidence, backout procedures, and post-change documentation.
Demonstrated troubleshooting experience using packet capture and protocol-analysis tools across multi-vendor enterprise environments.
Hands-on experience with Infoblox and one or more enterprise networking platforms such as Cisco, Aruba, Palo Alto, Dell, or Brocade.
Experience automating Infoblox provisioning and DDI data management using WAPI, REST APIs, Python, Ansible, or equivalent automation technologies.
Experience integrating Infoblox with Active Directory, PKI, NAC, identity services, configuration-management platforms, monitoring systems, and automation workflows.
Experience applying cybersecurity hardening, vulnerability remediation, configuration baselines, and applicable DoD security requirements to DDI and supporting network infrastructure.
Strong written and verbal communication skills, including developing technical designs, implementation procedures, network diagrams, migration documentation, and operational procedures using Visio, PowerPoint, or similar tools.
Current DoD IAT Level II certification or higher, such as Security+ CE.
Active DoD Secret clearance.
Desired Qualifications
Infoblox certification, such as Infoblox Core DDI or equivalent, and Cisco Certified Network Professional Enterprise or equivalent.
Experience with large-scale DNS and DHCP migrations, consolidations, or transitions from Microsoft DNS and DHCP to Infoblox.
Experience with Infoblox API or WAPI automation, or scripting with Python or Ansible to automate DDI provisioning and data hygiene.
Experience with anycast DNS delivery and distributed service architectures.
Experience integrating DDI with network access control, identity-based networking, and segmentation efforts.
Experience with IPv6 addressing, DNS, and DHCPv6 in enterprise dual-stack or IPv6 migration environments.
Experience integrating enterprise networking and DDI with cloud infrastructure and hybrid connectivity.
Experience applying DISA STIGs, vulnerability remediation, and configuration hardening.
Experience with Jira, Confluence, or similar project and knowledge-management tools.
Clearance: Applicants selected will be subject to a security investigation and may need to meet eligibility requirements for access to classified information.
Compensation and Benefits
Salary Range: $110,000-$155,000 (Compensation is determined by various factors, including but not limited to location, work experience, skills, education, certifications, seniority, and business needs. This range may be modified in the future.)
Benefits: Gridiron offers a comprehensive benefits package including medical, dental, vision insurance, HSA, FSA, 401(k), disability & ADD insurance, life and pet insurance to eligible employees. Full-time and part-time employees working at least 30 hours per week on a regular basis are eligible to participate in Gridiron’s benefits programs.
Gridiron IT Solutions is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, pregnancy, sexual orientation, gender identity, national origin, age, protected veteran status or disability status.
Gridiron IT is a Women Owned Small Business (WOSB) headquartered in the Washington, D.C. area that supports our clients' missions throughout the United States. Gridiron IT specializes in providing comprehensive IT services tailored to meet the needs of federal agencies. Our capabilities include IT Infrastructure & Cloud Services, Cyber Security, Software Integration & Development, Data Solution & AI, and Enterprise Applications. These capabilities are backed by Gridiron IT's experienced workforce and our commitment to ensuring we meet and exceed our clients' expectations.
group id: 91017793