DDI Architect

Leidos

Confirmed live today High trust

Quick summary

Work type
On-site
Location
Huntsville, ALOrlando, FLHouston, TXGreenbelt, MD
Salary
$92,300–$166,850 / yr
Employment
Full-time
Posted
81 days ago
Freshness
Confirmed live today

Market check

Salary context

Below market

How this pay compares to similar roles

Similar $209k
This role $130k
$72k $278k
below market most similar roles pay here above market

This role pays less than 95% of similar roles. Most pay $167,700–$249,925 — the blue band above. At the midpoint, this role pays about $130k versus about $209k for comparable roles.

Based on 240 similar postings.

Employer

About Leidos

Leidos is an industry and technology leader serving government and commercial customers with smarter, more efficient digital and mission innovations.

Leidos currently has 426 open roles on FindRole.

Listed pay typically runs $92,300–$166,850 across 344 roles with salary data.

Most-posted roles

View all roles at Leidos

At a glance

TL;DR · DDI Architect

The DDI Architect will lead the architecture, design, engineering, and lifecycle management of enterprise-scale DNS, DHCP, and IP Address Management services across Corporate and Mission networks. Working with Engineering, System Administration, and Operations teams, the architect will build and maintain authoritative and recursive DNS architectures while driving an IPv6-first strategy. Key responsibilities include implementing NIST SP 800-53 controls, DNSSEC signing, and encrypted protocols like DoT, DoH, and DoQ. The role involves managing .gov domain compliance, participating in E-root operations, and ensuring CISA Binding Operational Directives are met. The architect will utilize tools and skills including IPAM APIs, RPKI, and SIEM/SOAR integration to solve complex problems regarding secure name resolution, protective DNS mandates, and large-scale network address governance within a federal environment.

What you'll do

  • Design and maintain authoritative and recursive DNS architectures compliant with NIST SP 800-53 and 800-81r3.
  • Implement encrypted DNS protocols including DoT, DoH, and DoQ while integrating with CISA Protective DNS.
  • Drive an IPv6-first strategy for public services and maintain dual-stack hygiene for DNS, DHCPv6, and IPAM.
  • Manage top-level IPv4/IPv6 allocations and growth planning in accordance with ARIN policies and best practices.
  • Oversee secure configurations, automation, and performance for large-scale DDI environments across corporate and mission networks.
  • Participate in operations for E.root-servers.org, including anycast deployments and adherence to RSSAC-002 metrics.
  • Govern DNS email configurations including SPF, DKIM, and DMARC to meet federal Binding Operational Directives.
  • Integrate DDI platforms with SIEM/SOAR systems for DNS misuse detection, logging, and incident response forensics.

What we're looking for

  • Must have a Bachelor's degree and 10+ years of experience, or an Associate's degree and 15+ years of experience in DDI services.
  • Must have experience designing and operating enterprise DNS, DHCP, and IPAM services with authority in secure architectures like DNSSEC.
  • Must have hands-on experience implementing NIST SP 800-81r3 practices, including protective DNS, encrypted DNS (DoT/DoH/DoQ), and DNS logging.
  • Must have experience meeting CISA Encrypted DNS Guidance and PDNS integration to enforce endpoint, cloud, and SASE/SSE DNS policies.
  • Must have a proven track record implementing federal BODs (18-01, 22-01, 23-01, 23-02) and Zero Trust controls for management interfaces.
  • Must have IPv6 expertise including DNS over IPv6, DHCPv6, and strategic migration compliant with OMB M-21-07.
  • Must have knowledge of ARIN policies, address planning, RPKI, and .gov DNSSEC requirements.
  • Must be a U.S. Citizen with the ability to obtain and maintain a Public Trust.
  • Experience supporting Root Server Operators or E-root anycast operations (preferred).
  • Experience managing DMARC/SPF/DKIM deployments at scale (preferred).
  • Background with ARIN IPv6 allocations and ASN operations at federal scale (preferred).

More like this

Similar roles

Network Architect

Leidos

Bedford, MA 18 days ago $131,300–$237,350
AWS Microsoft Azure Google Cloud Platform Oracle Cloud Infrastructure Terraform Ansible GitLab CI/CD BGP TCP/IP SD-WAN SASE Zero Trust IPAM DNS Kubernetes Firewalls Network Security Infrastructure as Code RMF STIGs NIST
10+ yrs exp

DFT Architect

Amd

San Jose, CA 57 days ago $232,000–$348,000
DFT Scan Compression MBIST ATPG Verilog Tessent Streaming Scan Network SSN STA FPGA Post-Silicon Debug Oscilloscope Logic Analyser Synthesis Physical Design Firmware Digital Communication PHY High-Speed IO

Digital Software Engineering Architect

Boeing

Berkeley, MO 5 days ago $198,050–$267,950
DevSecOps Kubernetes Terraform GitLab Python C++ C# Java Ada C Cloud Services Agile Networking Software Engineering Standards
10+ yrs exp

AI Architect

Salesforce

San Francisco, CA 47 days ago
Python AWS LLMs Generative AI MLOps NLP Deep Learning Apex Agentforce Data Cloud Prompt Engineering Machine Learning Cloud Security Data Preprocessing Feature Engineering Data Synthesis
10+ yrs exp Hybrid

MDM Architect

Modivcare

Remote (Denver, CO) +3 19 days ago $140,000–$185,000
Master Data Management Ataccama ONE Reltio AWS Redshift Glue Lambda S3 Athena Step Functions dbt SQL Terraform Pulumi CI/CD Data Modeling Collibra Alation Microsoft Purview
10+ yrs exp Remote

Drupal Architect

Cognizant

Remote 22 days ago
Drupal 9 Acquia Site Factory Acquia Cloud Acquia Site Studio CI/CD React Next.js Headless Drupal Agile Scrum Release Management
10+ yrs exp Remote