Sr Infrastructure Engineer: CIS

Brobston Group; Seattle (WA); Vor Ort; USD 142.000 - 221.000; Vollzeit

Benefits dieser Stelle

Medical/Dental/Vision

Retirement benefits

Paid Time Away

Zusammenfassung

Nordstrom is seeking an Infrastructure Engineer II to operate DNS/DHCP and certificate workflows across multi-cloud and on-prem environments. You will own operational tasks, contribute to automation, and grow toward senior infrastructure responsibilities while collaborating with security and platform partners.

Responsibilities include DNS/DHCP service management (Infoblox), ClearPass authentication support, and certificate lifecycle tasks, with on-call rotation and strong documentation practice.

Qualifikationen

• Bachelor's degree in CS/IT/Engineering or equivalent
• 2–4 years in network/infrastructure/systems engineering with DNS/DHCP exposure
• Foundational TCP/IP, DNS, DHCP knowledge and troubleshooting
• Basic scripting (Python/PowerShell) and automation interest
• Experience with cloud platforms (AWS/Azure/GCP) and willingness to learn cloud-native tools
• Exposure to network access control concepts (ClearPass, RADIUS, 802.1X)
• Familiarity with certificate lifecycle concepts and PKI
• Ability to follow and document procedures clearly
• Strong written and verbal communication; team collaboration

Aufgaben

• Operates and supports DNS/DHCP services (Infoblox) and related authentication tasks
• Assist with network access control operations and policy changes
• Manage certificate lifecycle tasks: issuance, renewal, installation, monitoring
• Develop automation scripts to reduce manual work across DNS, certificates, and authentication workflows
• Monitor systems for alerts, triage incidents, and drive resolution
• Participate in on-call rotation and incident response
• Document changes and contribute to runbooks and knowledge base
• Collaborate with security, platform, and engineering teams on DNS/identity/certificate projects
• Bridge on-premises and cloud infrastructure across AWS, Azure, GCP

Kenntnisse

DNS/DHCP

Automation

Python

Infoblox

ClearPass

Networking

Ausbildung

Bachelor's degree

Tools

Infoblox NIOS

BloxOne

Ansible

Terraform

Python

Jobbeschreibung

Job Description

Nordstrom's Core Infrastructure Services (CIS) team keeps the foundational systems that connect our employees, partners, and customers running across 400+ locations and multi-cloud environments. We're hiring an Infrastructure Engineer II to help operate and support DNS/DHCP, network authentication, certificate lifecycle, and automation platforms that our stores, distribution centers, and corporate systems depend on every day.

This is a growth-oriented role for an engineer who has a solid foundation in one or more of these domains and is eager to build depth across all of them. You'll work closely with senior engineers on the CIS team, taking on real operational ownership while building the skills to grow into a more senior infrastructure role.

A Day in the Life

• Support day-to-day engineering and operation of enterprise DNS and DHCP services (Infoblox), handling routine changes, zone updates, and scope adjustments.
• Assist with ClearPass/network access control operations, including onboarding devices, troubleshooting authentication failures, and supporting 802.1X/RADIUS policy changes.
• Track and execute certificate lifecycle tasks: issuance, renewal, installation, and expiration monitoring across internal and external-facing systems for Nordstrom.
• Write and maintain automation scripts (Python, Ansible, or similar) to reduce manual, repetitive work across DDI, certificate, and authentication workflows.
• Monitor DNS, DHCP, and authentication systems for alerts and incidents; triage issues, elevate appropriately, and help drive them to resolution.
• Participate in an on‑call rotation, responding to infrastructure incidents.
• Document changes, update runbooks, and contribute to knowledge base articles so operational knowledge stays current and shared across the team.
• Learn and apply AI‑assisted tooling for diagnostics, documentation, and repetitive operational tasks as the team adopts these practices.
• Collaborate with engineers, security, and platform teams on projects that touch DNS, identity, and certificate infrastructure.
• Support DNS, connectivity, and configuration tasks across our public cloud environments (AWS, Azure, GCP), helping bridge on‑premises and cloud‑native infrastructure.

More About You

• You are a team player, you love to collaborate and learn fast.
• You have a working understanding of DNS and DHCP fundamentals and want to go deeper into enterprise‑scale operations.
• You're comfortable picking up new tools quickly, ClearPass, Infoblox, or certificate platforms, and you ask good questions when you hit the edge of your knowledge.
• You have ‘automation first’ mindset and exposure to scripting or automation and want to build that into a core skill rather than a side interest.
• You're detail-oriented, especially with things like certificate expirations, DNS updates and access policies, where a small miss has an outsized impact.
• You communicate clearly , whether that's a ticket update, a runbook, or a note to a teammate.
• You take ownership of your work and follow through, while knowing when to ask for help or elevate.
• You're curious about network security and identity‑aware access, even if you're not yet the expert in the room.

Qualifications

• Bachelor's degree in Computer Science, Information Technology, Engineering, or equivalent practical experience.
• 2-4 years of experience in network, infrastructure, or systems engineering, with some exposure to DNS and DHCP.
• Foundational understanding of TCP/IP, DNS protocol basics, DHCP concepts, and general network troubleshooting.
• Basic scripting experience (Python, PowerShell, or similar) and interest in building automation skills.
• Working knowledge of or hands‑on experience with public cloud platforms (AWS, Azure, or GCP), along with a genuine willingness and ability to quickly learn new cloud‑native tools and services as our infrastructure footprint expands in the cloud.
• Exposure to or working knowledge of network access control concepts (ClearPass, ISE, RADIUS, or 802.1X).
• Familiarity with certificate and PKI concepts (what a certificate does, how expiration and renewal work).
• Ability to follow documented procedures carefully and to document your own work clearly.
• Effective written and verbal communication, with the ability to work well with more senior teammates and cross‑functional partners.
• Strong team player who collaborates well with others, shares knowledge openly, and contributes positively to team culture.

Nice to Have

• Hands‑on exposure to Infoblox NIOS, BloxOne, or another enterprise DDI platform.
• Familiarity with Palo Alto/Panorama, Zscaler, or other network security and zero‑trust platforms.
• Exposure to certificate authorities or platforms such as Sectigo, DigiCert, or Venafi.
• Experience with Ansible, Terraform, or other infrastructure‑as‑code tooling.
• Interest in or early experience with AI‑assisted tooling for infrastructure operations.
• Familiarity with wireless networking concepts (WLAN controllers, 802.11 standards, RF fundamentals) to support ClearPass‑based wireless authentication use cases.
• Relevant certifications such as CompTIA Network+/Security+, CCNA, or an Infoblox associate‑level credential.

Pay Range Details

The pay range(s) below has been provided in compliance with state specific laws. Pay ranges may be different for other locations.

Pay offers are dependent on the location, as well as job‑related knowledge, skills, and experience.

$142,000.00 - $220,500.00 Annual

We’ve got you covered…

Our employees are our most important asset and that’s reflected in our benefits. Nordstrom is proud to offer a variety of benefits to support employees and their families, including:

• Medical/Vision, Dental, Retirement and Paid Time Away
• Life Insurance and Disability
• Merchandise Discount and EAP Resources

This position may be eligible for performance‑based incentives/bonuses. Benefits include 401k, medical/vision/dental/life/disability insurance options, PTO accruals, Holidays, and more. Eligibility requirements may apply based on location, job level, classification, and length of employment. Learn more in the Nordstrom Benefits Overview by copying and pasting the following URL into your browser: https://careers.nordstrom.com/pdfs/Ben_Overview_17-19.pdf

A few more important points...

The job posting highlights the most critical responsibilities and requirements of the job. It’s not all‑inclusive. There may be additional duties, responsibilities and qualifications for this job.

For Los Angeles or San Francisco applicants: Nordstrom is required to inform you that we conduct background checks after conditional offer and consider qualified applicants with criminal histories in a manner consistent with legal requirements per Los Angeles, Cal. Muni. Code 189.04 and the San Francisco Fair Chance Ordinance. For additional state and location specific notices, please refer to the Legal Notices document within the FAQ section of the Nordstrom Careers site.

Applicants with disabilities who require assistance or accommodation should contact the nearest Nordstrom location, which can be identified at www.nordstrom.com (http://www.nordstrom.com/).

Please be mindful that there may be legal notices and requirements related to this job posting that are specific to your state. Review the Career Site FAQ’s (https://careers.nordstrom.com/#/contact-us/faq) for relevant information and guidelines.