Network Engineer 5 (DNS | DHCP | IPAM)
About The Position
Capital One is seeking a Network Engineer (DDI) to help transform its legacy monolithic Infoblox infrastructure into a modern, modular, open-source and cloud-native DNS, DHCP, and IPAM platform ecosystem. This Senior Manager-level individual contributor role is a DevNet position and requires periodic late-night maintenance work and participation in an on-call rotation. The engineer will partner with Platform Development to shape the DDI roadmap, lead phased OSS migration and tenant enablement, and establish self-service consumption paths through APIs, CI/CD integrations, and Infrastructure as Code. The role also directs technical evaluations and proofs of concept, and provides technical direction across enablement and consumer teams. Responsibilities span enterprise and cloud network architecture, connectivity, security, automation, implementation standards, and lifecycle management across campus, WAN/SD-WAN, colocation, data centers, cloud, and SaaS environments. The engineer will lead incident response and root-cause analysis, collaborate with Cloud, Security, and SRE teams on observability and self-healing automation, and mentor engineers. The role is hybrid, with required on-site presence under Capital One’s hybrid policy.
Requirements
- Bachelor’s degree in Computer Science or Engineering, or at least 8 years of experience in network engineering, including management of network systems.
- At least 8 years of experience with routing protocols, including BGP, link-state protocols, and tunneling protocols.
- At least 8 years of experience with network encapsulation technologies, including LANs, VLANs, overlay networks, and network fabrics.
- At least 8 years of experience with physical network devices.
- At least 8 years of experience designing, implementing, and maintaining network infrastructure.
Nice To Haves
- Hands-on experience with OSS DDI and cloud-native tools such as Netbox, PowerDNS, Unbound, Kea, Akamai, and AWS Route 53.
- Experience with Infoblox technologies.
- Experience implementing and managing DNSSEC.
- Experience with Python scripting.
- Proficiency designing, deploying, and managing complex hybrid cloud environments, including IaaS/PaaS and cloud efficiency.
- Practical knowledge of SRE principles and methodologies focused on reliability, availability, and performance.
- Mastery of modern observability stacks and open-source monitoring tools for alerting, trend analysis, and capacity planning.
- Expertise provisioning infrastructure as code using Terraform, Ansible, Puppet, or Chef.
- Advanced skills in Kubernetes, service meshes, and the broader cloud-native ecosystem.
- Understanding of cloud security best practices, architecture patterns, and compliance standards such as SOC 2 and ISO 27001.
- Professional certifications such as CCNP Enterprise, JNCIP, CCDA, or AWS Advanced Networking Specialty.
- Strong analytical and troubleshooting skills focused on resolving critical network issues.
- Excellent communication and interpersonal skills, including explaining technical concepts to non-technical stakeholders or customers.
- Experience collaborating across security, compute, storage, and cloud engineering domains to deliver resilient, performant systems.
- Experience using AI-driven tooling to automate network operations, improve reliability and performance, or optimize network capacity and cost.
Responsibilities
- Partner with Platform Development to shape the DDI platform roadmap and align software and engine builds with tenant enablement, self-service consumption, and migration needs.
- Own the strategy and execution for phased migration from Infoblox to a distributed open-source software model.
- Define and advocate for standard DDI consumption paths, enabling engineering teams to provision and manage DNS/IPAM resources through APIs, CI/CD integrations, and Infrastructure as Code.
- Direct technical bake-offs and proof-of-concept validation, evaluating scalability, tenant onboarding, operational supportability, and automation readiness.
- Provide technical direction to enablement and consumer teams, and represent the DDI platform in architecture reviews, security alignment sessions, and tenant intake forums.
- Use Infrastructure as Code and DevOps practices to automate scalable infrastructure deployment.
- Architect and design end-to-end connectivity systems and their security and operational frameworks.
- Design how upstream systems interact with running systems and build software-adapted configuration frameworks for deployment, change, and maintenance.
- Define implementation standards across vendor platforms, cloud environments, and in-house software.
- Define implementation patterns for protocol frameworks across campus, WAN/SD-WAN, colocation facilities, data centers, cloud, and SaaS-fronted services.
- Own the architecture and lifecycle of enterprise and cloud network ecosystems across connectivity, security, and automation layers.
- Develop and enforce design standards and best practices for routing, security segmentation, and inter-cloud traffic flow.
- Lead critical incident response and ensure root-cause analysis results in durable reliability improvements.
- Partner with Cloud, Security, and SRE teams to define cross-platform observability, telemetry, and self-healing automation.
- Mentor and upskill engineers in advanced networking, reliability, and automation.
Benefits
- Comprehensive health, financial, and other benefits supporting total well-being.
- Eligibility for performance-based incentive compensation, which may include cash bonuses and/or long-term incentives.
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Senior
