Resident Engineer - DDI Infrastructure

About the Role

We are looking for a seasoned Resident Engineer specialized in DNS, DHCP, and IP Address Management (DDI) to provide on-site operational administration and technical support. This role ensures the availability, security, and optimal performance of the client’s DDI system while serving as the main technical intermediary between client teams and vendors.

Primary Responsibilities

• Oversee and maintain DNS, DHCP, and IPAM platforms with daily health checks and monitoring.
• Diagnose and resolve operational issues including incidents, outages, and performance shortcomings.
• Coordinate maintenance schedules, escalations, and ensure compliance with service level agreements.
• Implement and manage configuration changes, updates, and expansions within the DDI environment.
• Manage DNS zones, DHCP scopes, IPAM records, associated policies, and Grid components.
• Support infrastructure deployments, system upgrades, patching, and migrations.
• Integrate DDI solutions with SIEM, threat intelligence, identity and access management, and related security tools.
• Drive automation through REST APIs and scripting to enhance operational efficiency.
• Enforce DNS security measures including RPZ, DNS Firewall, and threat detection mechanisms.
• Identify and mitigate DNS-based security threats such as tunneling and malware command and control activities.
• Maintain regulatory compliance, audit logs, and assist in security audits and governance reviews.
• Recommend architectural and system improvements to boost resiliency and scalability.
• Conduct performance tuning, system optimization, and health assessments.
• Generate and maintain comprehensive technical documentation, reports, SOPs, and operational procedures.
• Serve as the key technical contact for vendor support escalations and liaise with network, security, and project teams.

Qualifications and Experience

• At least 5 to 7 years’ experience working with DNS, DHCP, and IPAM technologies, including 3+ years hands-on with enterprise DDI platforms.
• Proficient in NIOS Administration, Grid Management, RPZ, DNSSEC, DNS Firewall, and threat intelligence operations.
• Strong knowledge of TCP/IP protocols, VLANs, routing, switching, and high availability architectures.
• Experience integrating DDI with SIEM and enterprise cybersecurity platforms.
• Skilled in REST API usage and scripting languages such as Python or PowerShell.
• Deep understanding of cybersecurity best practices including Zero Trust, RBAC, IAM, and DNS security policies.
• Competent in analyzing DNS logs and assisting incident response processes.
• Excellent analytical, troubleshooting, communication, documentation, and stakeholder coordination skills.
• Ability to work independently in an onsite client-facing setting.

Preferred Certifications

• Core or Advanced DDI Security certifications.
• Cisco certifications such as CCNA or CCNP.
• CompTIA Security+ or CySA+ certifications.