Sr. Infrastructure Engineer: CIS (Hybrid - Seattle, WA)

Nordstrom•Seattle, WA

1d•$142,000 - $220,500•Hybrid

About The Position

Nordstrom's Core Infrastructure Services (CIS) team keeps the foundational systems that connect our employees, partners, and customers running across 400+ locations and multi-cloud environments. We're hiring an Infrastructure Engineer II to help operate and support DNS/DHCP, network authentication, certificate lifecycle, and automation platforms that our stores, distribution centers, and corporate systems depend on every day. This is a growth-oriented role for an engineer who has a solid foundation in one or more of these domains and is eager to build depth across all of them. You'll work closely with senior engineers on the CIS team, taking on real operational ownership while building the skills to grow into a more senior infrastructure role.

Requirements

Bachelor's degree in Computer Science, Information Technology, Engineering, or equivalent practical experience.
2-4 years of experience in network, infrastructure, or systems engineering, with some exposure to DNS and DHCP.
Foundational understanding of TCP/IP, DNS protocol basics, DHCP concepts, and general network troubleshooting.
Basic scripting experience (Python, PowerShell, or similar) and interest in building automation skills.
Working knowledge of or hands-on experience with public cloud platforms (AWS, Azure, or GCP), along with a genuine willingness and ability to quickly learn new cloud-native tools and services as our infrastructure footprint expands in the cloud.
Exposure to or working knowledge of network access control concepts (ClearPass, ISE, RADIUS, or 802.1X).
Familiarity with certificate and PKI concepts (what a certificate does, how expiration and renewal work).
Ability to follow documented procedures carefully and to document your own work clearly.
Effective written and verbal communication, with the ability to work well with more senior teammates and cross-functional partners.
Strong team player who collaborates well with others, shares knowledge openly, and contributes positively to team culture.

Nice To Haves

Hands-on exposure to Infoblox NIOS, BloxOne, or another enterprise DDI platform.
Familiarity with Palo Alto/Panorama, Zscaler, or other network security and zero-trust platforms.
Exposure to certificate authorities or platforms such as Sectigo, DigiCert, or Venafi.
Experience with Ansible, Terraform, or other infrastructure-as-code tooling.
Interest in or early experience with AI-assisted tooling for infrastructure operations.
Familiarity with wireless networking concepts (WLAN controllers, 802.11 standards, RF fundamentals) to support ClearPass-based wireless authentication use cases.
Relevant certifications such as CompTIA Network+/Security+, CCNA, or an Infoblox associate-level credential.

Responsibilities

Support day-to-day engineering and operation of enterprise DNS and DHCP services (Infoblox), handling routine changes, zone updates, and scope adjustments.
Assist with ClearPass/network access control operations, including onboarding devices, troubleshooting authentication failures, and supporting 802.1X/RADIUS policy changes.
Track and execute certificate lifecycle tasks: issuance, renewal, installation, and expiration monitoring across internal and external-facing systems for Nordstrom.
Write and maintain automation scripts (Python, Ansible, or similar) to reduce manual, repetitive work across DDI, certificate, and authentication workflows.
Monitor DNS, DHCP, and authentication systems for alerts and incidents; triage issues, escalate appropriately, and help drive them to resolution.
Participate in an on-call rotation, responding to infrastructure incidents.
Document changes, update runbooks, and contribute to knowledge base articles so operational knowledge stays current and shared across the team.
Learn and apply AI-assisted tooling for diagnostics, documentation, and repetitive operational tasks as the team adopts these practices.
Collaborate with engineers, security, and platform teams on projects that touch DNS, identity, and certificate infrastructure.
Support DNS, connectivity, and configuration tasks across our public cloud environments (AWS, Azure, GCP), helping bridge on-premises and cloud-native infrastructure.