Senior Systems Engineer - Enterprise Protected Domain Name Service

About the role

Join GDIT as a Senior Systems Engineer and build an impactful career in enterprise IT, collaborating with people who are driven and resourceful like you. You will play a crucial role in providing Information Technology System Engineering, Capability Management, Tier III and Service Support Management, and Risk Management Framework support to employ Enterprise Protected Domain Name Services to specified Non-Classified Internet Protocol Router Network (NIPRNET), Secret Internet Protocol Router Network (SIPRNET), and Deployed Forces (DF) portion of the Department of War Information Network (DOWIN).

Responsibilities

• Lead/Manage/Support by performing all procedures necessary to ensure the security of information systems assets and to protect systems from intentional or inadvertent access or destruction.
• Collaborate with your peers to provide planning, design, development, engineering, integration, and technical and operational support to the ADCNOMS project and Army DNS systems.
• Drive success by delivering comprehensive technical, logistical, programmatic, accreditation, configuration, maintenance, and operational oversight for EP-DNS, including scheduling, testing, integration, validation, documentation updates, and service reporting.
• Ensure the integrity and accuracy of system configurations by maintaining complete and current configuration management records.
• Provide Tier III support for EP-DNS and DNS-related infrastructure, performing advanced troubleshooting and service restoration as needed.
• Conduct cybersecurity analysis and support RMF compliance activities, including actions required for IAVA-related findings.
• Cook up system documentation and provide clear guidance on the use and administration of EP-DNS capabilities for personnel at all levels.
• Utilize your expertise across Unclassified and Classified networks, including DNSSEC signing and validation, Infoblox DDI configuration, grid management, and IPAM workflows.
• Demonstrate strong ability in auditing and troubleshooting ISC BIND, researching IAVM/IAVA vulnerabilities, and developing shell scripts to automate data-gathering tasks in laboratory environments.
• Install and configure test-environment components such as Solaris-based DNS servers, Oracle database servers, Infoblox and SafeNet appliances, and JRE environments.
• Provide Tier III DNS support, performing advanced troubleshooting, root cause analysis, and validation of mission-system changes.
• Support operational oversight, service reporting, and thorough documentation within enterprise ticketing systems and audit logs.
• Demonstrate familiarity with auditing large-scale TCP/IP schemes and experience with Hyper-V, VMware, meta-database environments, PowerShell scripting, the Microsoft Office suite, and Microsoft Visio.

Qualifications

• Education: Bachelor’s Degree. An additional 4 years of experience may be substituted in lieu of degree.
• Security Clearance: Active Secret required. In addition, selected candidate must be able to obtain a Top Secret/SCI clearance post hire.
• Experience: 5+ years of related experience.
• Certification: DoW 8570 IAT Level III Certification and Computing Environment Certification.
• Role Requirements: Experience in System Cybersecurity Management, RMF control implementation, and compliance validation.
• Experience applying mitigation actions from security findings and maintaining configuration baselines across EP-DNS lab and production systems.
• Demonstrated ability to maintain accurate and current system documentation, diagrams, SOPs, and configuration records.
• Ability to support full-time onsite work schedule.