Network Engineer 5 (DNS | DHCP | IPAM)

Network Engineer 5 (DNS | DHCP | IPAM)

Do you love building and pioneering in the technology space? Do you enjoy solving complex business problems in a fast-paced, collaborative, inclusive, and iterative delivery environment?

At Capital One, you'll be part of a big group of makers, breakers, doers and disruptors, who love to solve real problems and meet real customer needs. We are seeking Network Engineers (DDI) who are passionate about leveraging cutting-edge open source frameworks and emerging technologies to join our team. As a Network Engineer, you’ll have the opportunity to be on the forefront of driving a major transformation across Capital One.

In this Senior Manager-level Individual Contributor (IC) role, you will serve as a technical driver spearheading our strategic transformation away from a legacy, monolithic appliance infrastructure (Infoblox) toward a modern, modular, Open Source Software (OSS) and Cloud-native DDI (DNS/DHCP/IPAM) platform ecosystem.

This position is a DevNet role. As such, periodic late-night maintenance work and participation in an on-call rotation will be required.

What You’ll Do

• Partner with Platform Development to Steer Strategy: Collaborate with the Platform Development lead to shape the overall DDI platform roadmap, ensuring software/engine builds align directly with tenant enablement requirements, self-service consumption models, and practical migration paths.
• Lead the Phased OSS Migration: Own the enablement and execution strategy to decouple and transition services from Infoblox into a distributed OSS model
• Champion Developer Experience & Self-Service: Define and advocate for the "golden paths" of DDI consumption. Enable internal product engineering teams to provision and manage DNS/IPAM resources autonomously via APIs, CI/CD integrations, and Infrastructure as Code (IaC).
• Lead POC Validation & Tenant Fit: Direct technical bake-offs and Proof of Concept (POC) validation efforts, evaluating candidate tools not just on raw features, but on scalability, tenant onboarding friction, operational supportability, and automation readiness.
• Lead POC Validation & Tenant Fit: Direct technical bake-offs and Proof of Concept (POC) validation efforts, evaluating candidate tools not just on raw features, but on scalability, tenant onboarding friction, operational supportability, and automation readiness.
• Cross-Functional Technical Influence: Provide technical direction to engineers across both enablement and consumer teams. Represent the DDI platform in architecture review boards, security alignment sessions, and tenant intake forums.
• Automation: Utilize Infrastructure as Code (IaC) and DevOps best practices to ensure scalable, automated infrastructure deployment.
• Architect and Design end-to-end connectivity systems with associated security and operational frameworks
• Utilize software development practices to structure and design how upstream systems (e.g. deployment automation) will interact with running systems and build out end-state configuration frameworks that are software adapted for deploy, change, and maintenance
• Define and drive standards needed for implementation across vendor platforms, cloud environments and in-house software
• Define implementation patterns for all protocol frameworks needed at COF across our campus, WAN/SD-WAN, Colocation facilities, DCs cloud and SaaS fronted services
• Own the architecture and lifecycle of enterprise and cloud network ecosystems, spanning connectivity, security, and automation layers
• Develop and enforce design standards and best practices for routing, security segmentation, and inter-cloud traffic flow
• Lead critical incident response efforts and ensure root-cause analysis drives durable reliability improvements
• Partner with Cloud, Security, and SRE teams to define cross-platform observability, telemetry, and self-healing automation
• Mentor and upskill engineers across the organization on advanced networking, reliability, and automation principles

Basic

Qualifications

• Bachelor’s Degree in Computer Science, Engineering, or at least 8 years of experience in network engineering, including management of network systems
• At least 8 years of experience with routing protocols (BGP, Link-State Protocols, and Tunneling Protocols)
• At least 8 years of experience with network encapsulation technologies (LANS, Virtual LANs, overlay networks, and network fabrics)
• At least 8 years of experience with physical network devices
• At least 8 years of experience designing, implementing, and maintaining network infrastructure

Preferred

Qualifications

• Hands-on experience with OSS DDI and Cloud-native tools (Netbox, PowerDNS, Unbound, Kea, Akamai, AWS Route53)
• Experience with Infoblox technologies
• Experience with DNSSEC implementation and management experience
• Experience with Python scripting
• Proficient in designing, deploying, and managing complex hybrid cloud environments, including IaaS/PaaS, and cloud efficiency
• Deep, practical knowledge of SRE principles and methodologies focused on system reliability, availability, and performance
• Mastery of modern observability stacks and open-source monitoring tools for proactive alerting, trend analysis and capacity planning
• Expertise in managing and provisioning infrastructure through code, utilizing frameworks like Terraform, Ansible, Puppet, or Chef
• Advanced skills in container orchestration (Kubernetes), service meshes, and the broader cloud-native ecosystem
• Strong understanding of cloud security best practices, architecture patterns, and industry compliance standards (e.g., SOC 2, ISO 27001)
• Professional certifications such as CCNP Enterprise, JNCIP, CCDA, or AWS Advanced Networking Specialty
• Strong analytical and troubleshooting skills, with a focus on solving critical network issues efficiently
• Excellent communication and interpersonal skills, with an ability to convey technical concepts to non-technical stakeholders or custome