Senior DDI Solution Architect

Job Title

Senior DDI Solution Architect (DNS/DHCP/IPAM)

Client

University of Oklahoma

Work Location

Norman, Oklahoma (Hybrid/Onsite as Required)

Work Mode

Hybrid

Employment Type

Contract

Duration

Initial Contract through June 30, 2027 (Subject to Project Requirements and Extensions)

Estimated Effort

Full-Time (40 Hours/Week)

Compensation

Hourly (DOE)

Start Date

Tentative - October/November 2026

Job Summary

We ares seeking a highly experienced Senior DDI Solution Architect (DNS/DHCP/IPAM) to support a large-scale Enterprise DDI Infrastructure Modernization initiative for the University of Oklahoma.

The selected consultant will lead the architecture, deployment, migration, and optimization of an enterprise DNS, DHCP, and IP Address Management (DDI) platform supporting multiple campuses, remote clinics, partner organizations, data centers, and hybrid cloud environments.

This position requires an experienced infrastructure professional with deep expertise in enterprise networking, DDI platforms, cloud integration, cybersecurity, automation, and infrastructure modernization. The successful candidate will work closely with University stakeholders to design a secure, scalable, highly available, and centrally managed DDI environment while minimizing operational disruption.

Key Responsibilities

• Lead the architecture, design, and deployment of enterprise DNS, DHCP, and IP Address Management (DDI) solutions.
• Assess existing network infrastructure and develop modernization and migration strategies.
• Plan and execute phased migration of DNS, DHCP, and IPAM services with minimal downtime and documented rollback procedures.
• Configure, deploy, and administer enterprise DDI platforms such as Infoblox, BlueCat, EfficientIP, or equivalent solutions.
• Design highly available (HA), redundant, and fault-tolerant DNS/DHCP infrastructure.
• Integrate DDI services with Microsoft Active Directory, LDAP, DNS Secure Updates, and enterprise identity services.
• Implement Role-Based Access Control (RBAC), delegated administration, and multi-tenant management capabilities.
• Configure DNS security features including DNSSEC, Response Policy Zones (RPZ), threat intelligence integration, malicious DNS protection, and secure recursive DNS.
• Design and implement hybrid cloud DNS solutions supporting AWS, Microsoft Azure, and Google Cloud Platform.
• Develop API-driven automation using REST APIs, PowerShell, Python, or similar technologies.
• Integrate the DDI platform with SIEM, monitoring, alerting, logging, and enterprise management tools.
• Perform capacity planning, performance tuning, scalability analysis, and health assessments.
• Produce architecture diagrams, migration plans, operational documentation, and standard operating procedures.
• Conduct administrator training sessions and provide comprehensive knowledge transfer.
• Support production deployment, stabilization, troubleshooting, and post-implementation operations.
• Collaborate with infrastructure, cybersecurity, cloud, and networking teams throughout the project lifecycle.

Required Qualifications

• Bachelor's degree in Computer Science, Information Technology, Network Engineering, Cybersecurity, or a related discipline.
• Minimum 8 years of experience in enterprise network infrastructure.
• Minimum 5 years of hands-on experience implementing enterprise DNS, DHCP, and IPAM (DDI) solutions.
• Demonstrated experience with enterprise DDI platforms such as Infoblox, BlueCat, EfficientIP, or equivalent.
• Strong knowledge of DNS architecture, DHCP services, IPAM, DNSSEC, recursive and authoritative DNS, and IP address planning.
• Experience designing High Availability (HA), clustering, failover, and disaster recovery solutions.
• Experience integrating DDI solutions with Microsoft Active Directory and enterprise authentication systems.
• Experience implementing Role-Based Access Control (RBAC) and delegated administration.
• Strong understanding of TCP/IP, IPv4, IPv6, VLANs, routing, switching, and enterprise networking concepts.
• Experience supporting hybrid cloud networking environments across AWS, Azure, and Google Cloud.
• Experience integrating enterprise infrastructure with SIEM, centralized logging, monitoring, and alerting platforms.
• Strong scripting and automation skills using PowerShell, Python, REST APIs, or similar technologies.
• Excellent analytical, troubleshooting, documentation, and communication skills.

Preferred Qualifications

• Experience supporting Higher Education, Healthcare, Government, or other large enterprise organizations.
• Experience leading enterprise infrastructure modernization initiatives.
• Familiarity with NIST security principles, Zero Trust architecture, and enterprise cybersecurity best practices.
• Experience with ITIL service management and change management processes.
• Experience working in multi-campus or geographically distributed enterprise environments.

Preferred Certifications

• Infoblox Certified Professional (ICP)
• BlueCat Certified Professional
• Cisco Certified Network Professional (CCNP Enterprise)
• AWS Certified Advanced Networking - Specialty
• Microsoft Certified: Azure Network Engineer Associate
• ITIL Foundation Certification
• CISSP (Preferred)

Responsibilities During Implementation

The selected consultant will play a critical role in:

• Enterprise DDI solution design and validation.
• Infrastructure assessment and migration planning.
• High Availability and disaster recovery implementation.
• Hybrid cloud integration.
• Security hardening and DNS protection.
• API integration and operational automation.
• Testing, cutover, and production deployment.
• Documentation and knowledge transfer.
• Post-implementation stabilization and operational support.

Deliverables & Performance Expectations

The successful consultant will be expected to deliver:

• A secure, scalable, enterprise-grade DDI environment supporting the University's distributed infrastructure.
• Successful migration with minimal service interruption.
• High Availability architecture with redundancy and failover capabilities.
• Integration with Active Directory, cloud platforms, monitoring, and security systems.
• Complete architecture documentation, configuration guides, operational runbooks, and migration documentation.
• Administrator training for University technical staff.
• Ongoing production support during the stabilization period.
• Recommendations for future scalability, lifecycle management, and platform optimization.