Sr. Infrastructure Engineer: CIS (Hybrid - Seattle, WA)

Nordstrom•Seattle, WA

1d•Hybrid

About The Position

Nordstrom’s Core Infrastructure Services (CIS) team maintains foundational systems used by employees, partners, and customers across more than 400 locations and multi-cloud environments. The Infrastructure Engineer II helps operate and support DNS/DHCP, network authentication, certificate lifecycle, and automation platforms relied upon by stores, distribution centers, and corporate systems. This growth-oriented role is intended for an engineer with a foundation in one or more of these areas who is ready to build expertise across them. The engineer works with senior CIS engineers, takes on operational ownership, and develops toward a more senior infrastructure role. The role supports enterprise DNS and DHCP services, network access control operations, certificate lifecycle activities, and automation. It monitors systems, triages incidents, participates in an on-call rotation, and documents changes and operational knowledge. The engineer also supports infrastructure across AWS, Azure, and GCP, collaborates with engineering, security, and platform teams, and learns to use AI-assisted tools for diagnostics, documentation, and operational tasks.

Requirements

Bachelor’s degree in Computer Science, Information Technology, Engineering, or equivalent practical experience.
2–4 years of experience in network, infrastructure, or systems engineering, with some exposure to DNS and DHCP.
Foundational understanding of TCP/IP, DNS protocol basics, DHCP concepts, and general network troubleshooting.
Basic scripting experience with Python, PowerShell, or similar, and interest in building automation skills.
Working knowledge of or hands-on experience with AWS, Azure, or GCP, and ability and willingness to learn cloud-native tools and services.
Exposure to or working knowledge of network access control concepts such as ClearPass, ISE, RADIUS, or 802.1X.
Familiarity with certificate and PKI concepts, including certificate purpose, expiration, and renewal.
Ability to follow documented procedures carefully and document work clearly.
Effective written and verbal communication and ability to work with senior teammates and cross-functional partners.
Strong collaboration, knowledge-sharing, ownership, and follow-through; ability to seek help or escalate when appropriate.
Detail orientation, particularly with certificate expirations, DNS updates, and access policies.
Curiosity about network security and identity-aware access.

Nice To Haves

Hands-on exposure to Infoblox NIOS, BloxOne, or another enterprise DDI platform.
Familiarity with Palo Alto/Panorama, Zscaler, or other network security and zero-trust platforms.
Exposure to certificate authorities or platforms such as Sectigo, DigiCert, or Venafi.
Experience with Ansible, Terraform, or other infrastructure-as-code tooling.
Interest in or early experience with AI-assisted tooling for infrastructure operations.
Familiarity with wireless networking concepts, including WLAN controllers, 802.11 standards, and RF fundamentals, to support ClearPass-based wireless authentication use cases.
Relevant certifications such as CompTIA Network+/Security+, CCNA, or an Infoblox associate-level credential.

Responsibilities

Support day-to-day engineering and operation of enterprise DNS and DHCP services using Infoblox, including routine changes, zone updates, and scope adjustments.
Assist with ClearPass and network access control operations, including device onboarding, authentication troubleshooting, and 802.1X/RADIUS policy changes.
Track and execute certificate lifecycle tasks, including issuance, renewal, installation, and expiration monitoring across internal and external-facing systems.
Write and maintain automation scripts using Python, Ansible, or similar tools to reduce repetitive work across DDI, certificate, and authentication workflows.
Monitor DNS, DHCP, and authentication systems for alerts and incidents; triage issues, escalate appropriately, and help drive them to resolution.
Participate in an on-call rotation and respond to infrastructure incidents.
Document changes, update runbooks, and contribute to knowledge base articles.
Learn and apply AI-assisted tooling for diagnostics, documentation, and repetitive operational tasks.
Collaborate with engineering, security, and platform teams on projects involving DNS, identity, and certificate infrastructure.
Support DNS, connectivity, and configuration tasks across AWS, Azure, and GCP public cloud environments, helping bridge on-premises and cloud-native infrastructure.