Network Engineer 5 (DNS | DHCP | IPAM)

Description

The company is moving its DNS, DHCP and IPAM services off Infoblox appliances and onto a modular, open source, cloud-native platform.

The team builds on open source frameworks and newer technologies, and the work touches much of the organisation.

This is a senior manager-level individual contributor role, acting as the lead technical driver of the change.

This is a DevNet role.

Responsibilities

• Set the DDI platform roadmap with the platform development lead so builds match tenant needs, self-service use and workable migration routes.
• Own the plan for moving services from Infoblox to a distributed open source model.
• Define standard paths that let product engineering teams provision and manage DNS and IPAM themselves through APIs, CI/CD pipelines and Infrastructure as Code.
• Run proofs of concept and bake-offs, judging tools on scale, tenant onboarding effort, supportability and readiness for automation, not only on features.
• Give technical direction to engineers in enablement and consumer teams, and represent the platform in architecture reviews, security alignment and tenant intake.
• Design end-to-end connectivity along with its security and operations frameworks.
• Apply software development practices to how deployment automation interacts with live systems, and build end-state configuration frameworks for deploying, changing and maintaining them.
• Set standards for implementation across vendor platforms, cloud environments and in-house software.
• Define implementation patterns for every protocol framework needed across COF, campus, WAN/SD-WAN, colocation, DCs, cloud and SaaS-fronted services.
• Own the architecture and lifecycle of enterprise and cloud networks across connectivity, security and automation.
• Set and enforce design standards for routing, security segmentation and inter-cloud traffic flow.
• Lead critical incident response and make sure root-cause analysis leads to lasting reliability gains.
• Work with cloud, security and SRE teams on cross-platform observability, telemetry and self-healing automation.
• Coach engineers across the organisation on advanced networking, reliability and automation.
• Use IaC and DevOps practices to deploy infrastructure at scale with automation.

Requirements

• A bachelor's degree in computer science or engineering, or at least 8 years of network engineering that includes running network systems.
• At least 8 years working with routing protocols such as BGP, link-state and tunnelling protocols.
• At least 8 years working with encapsulation technologies such as LANs, VLANs, overlay networks and network fabrics.
• At least 8 years working hands-on with physical network devices.
• At least 8 years designing, implementing and maintaining network infrastructure.
• Preferred: hands-on experience with open source DDI and cloud-native tools such as Netbox, PowerDNS, Unbound, Kea, Akamai and AWS Route53.
• Preferred: experience with Infoblox technologies.
• Preferred: experience implementing and managing DNSSEC.
• Preferred: Python scripting experience.
• Preferred: designing, deploying and managing complex hybrid cloud environments, including IaaS and PaaS, with attention to cloud efficiency.
• Preferred: deep, practical knowledge of SRE principles for reliability, availability and performance.
• Preferred: strong command of modern observability stacks and open source monitoring for proactive alerting, trend analysis and capacity planning.
• Preferred: managing infrastructure through code with Terraform, Ansible, Puppet or Chef.
• Preferred: advanced skills in Kubernetes, service meshes and the wider cloud-native ecosystem.
• Preferred: solid understanding of cloud security practices, architecture patterns and compliance standards such as SOC 2 and ISO 27001.
• Preferred: professional certifications such as CCNP Enterprise, JNCIP, CCDA or AWS Advanced Networking Specialty.
• Preferred: strong analytical and troubleshooting skills, focused on resolving critical network issues efficiently.
• Preferred: excellent communication, able to explain technical concepts to non-technical stakeholders or customers.
• Preferred: experience working across security, compute, storage and cloud teams to deliver resilient, high-performing systems.
• Preferred: experience using AI-driven tools to automate network operations, improve reliability and performance, or optimise capacity and cost.

Conditions

This is a hybrid role. You must follow the company's hybrid policy on required on-site presence at your designated office.

Periodic late-night maintenance and an on-call rotation are required.

The company will not sponsor new applicants for work authorisation or provide any immigration support for this role.

Full-time annual base salary: McLean, VA $229,900 - $262,400; Plano, TX $209,000 - $238,500; Richmond, VA $209,000 - $238,500, all for Network Engineer 5. Part-time pay is prorated to regular hours. Candidates hired in other locations receive that location's range, with the exact figure stated in the offer letter.

Applications will be accepted for at least 5 business days.

No agencies.

Equal opportunity employer (including disability and veterans) that considers applicants with criminal histories in line with applicable law.

Benefits

• Performance-based incentive pay, which may include cash bonuses and/or long-term incentives, discretionary or non-discretionary depending on the plan.
• Health, financial and other benefits; eligibility depends on full or part-time status, exempt status and management level.