# Network Engineer 5 (DNS | DHCP | IPAM) **Company**: Capital One **Location**: McLean, VA **Work arrangement**: hybrid **Experience**: senior **Job type**: full-time **Salary**: $229,900 - $262,400 **Category**: Engineering **Industry**: Finance **Apply**: https://capitalone.wd12.myworkdayjobs.com/en-US/Capital_One/job/McLean-VA/Network-Engineer-5--DNS---DHCP---IPAM-_R1004768?utm_source=yubhub.co&utm_medium=jobs_feed&utm_campaign=apply **Canonical**: https://yubhub.co/jobs/job_4a575613-59b ## Description We are seeking a Network Engineer 5 (DDI) to join our team at Capital One. As a Senior Manager-level Individual Contributor (IC) role, you will serve as a technical driver spearheading our strategic transformation away from a legacy, monolithic appliance infrastructure (Infoblox) toward a modern, modular, Open Source Software (OSS) and Cloud-native DDI (DNS/DHCP/IPAM) platform ecosystem. **What You'll Do:** - Partner with Platform Development to Steer Strategy: Collaborate with the Platform Development lead to shape the overall DDI platform roadmap, ensuring software/engine builds align directly with tenant enablement requirements, self-service consumption models, and practical migration paths. - Lead the Phased OSS Migration: Own the enablement and execution strategy to decouple and transition services from Infoblox into a distributed OSS model. - Champion Developer Experience & Self-Service: Define and advocate for the "golden paths" of DDI consumption. Enable internal product engineering teams to provision and manage DNS/IPAM resources autonomously via APIs, CI/CD integrations, and Infrastructure as Code (IaC). - Lead POC Validation & Tenant Fit: Direct technical bake-offs and Proof of Concept (POC) validation efforts, evaluating candidate tools not just on raw features, but on scalability, tenant onboarding friction, operational supportability, and automation readiness. - Cross-Functional Technical Influence: Provide technical direction to engineers across both enablement and consumer teams. Represent the DDI platform in architecture review boards, security alignment sessions, and tenant intake forums. - Automation: Utilize Infrastructure as Code (IaC) and DevOps best practices to ensure scalable, automated infrastructure deployment. - Architect and Design end-to-end connectivity systems with associated security and operational frameworks. - Utilize software development practices to structure and design how upstream systems (e.g. deployment automation) will interact with running systems and build out end-state configuration frameworks that are software adapted for deploy, change, and maintenance. - Define and drive standards needed for implementation across vendor platforms, cloud environments and in-house software. - Define implementation patterns for all protocol frameworks needed at COF across our campus, WAN/SD-WAN, Colocation facilities, DCs cloud and SaaS fronted services. - Own the architecture and lifecycle of enterprise and cloud network ecosystems, spanning connectivity, security, and automation layers. - Develop and enforce design standards and best practices for routing, security segmentation, and inter-cloud traffic flow. - Lead critical incident response efforts and ensure root-cause analysis drives durable reliability improvements. - Partner with Cloud, Security, and SRE teams to define cross-platform observability, telemetry, and self-healing automation. - Mentor and upskill engineers across the organization on advanced networking, reliability, and automation principles. **Basic Qualifications:** - Bachelor’s Degree in Computer Science, Engineering, or at least 8 years of experience in network engineering, including management of network systems. - At least 8 years of experience with routing protocols (BGP, Link-State Protocols, and Tunneling Protocols). - At least 8 years of experience with network encapsulation technologies (LANS, Virtual LANs, overlay networks, and network fabrics). - At least 8 years of experience with physical network devices. - At least 8 years of experience designing, implementing, and maintaining network infrastructure. **Preferred Qualifications:** - Hands-on experience with OSS DDI and Cloud-native tools (Netbox, PowerDNS, Unbound, Kea, Akamai, AWS Route53). - Experience with Infoblox technologies. - Experience with DNSSEC implementation and management experience. - Experience with Python scripting. - Proficient in designing, deploying, and managing complex hybrid cloud environments, including IaaS/PaaS, and cloud efficiency. - Deep, practical knowledge of SRE principles and methodologies focused on system reliability, availability, and performance. - Mastery of modern observability stacks and open-source monitoring tools for proactive alerting, trend analysis and capacity planning. - Expertise in managing and provisioning infrastructure through code, utilizing frameworks like Terraform, Ansible, Puppet, or Chef. - Advanced skills in container orchestration (Kubernetes), service meshes, and the broader cloud-native ecosystem. - Strong understanding of cloud security best practices, architecture patterns, and industry compliance standards (e.g., SOC 2, ISO 27001). - Professional certifications such as CCNP Enterprise, JNCIP, CCDA, or AWS Advanced Networking Specialty. - Strong analytical and troubleshooting skills, with a focus on solving critical network issues efficiently. - Excellent communication and interpersonal skills, with an ability to convey technical concepts to non-technical stakeholders or customers. - Experience collaborating across engineering domains (security, compute, storage, cloud) to deliver resilient, performant systems. - Experience leveraging AI-driven tooling to automate network operations, improve network reliability and performance, or optimize network capacity and cost. The minimum and maximum full-time annual salaries for this role are: McLean, VA: $229,900 - $262,400 for Network Engineer 5 Plano, TX: $209,000 - $238,500 for Network Engineer 5 Richmond, VA: $209,000 - $238,500 for Network Engineer 5 Capital One offers a comprehensive, competitive, and inclusive set of health, financial and other benefits that support your total well-being. ## Skills ### Required - BGP - Link-State Protocols - Tunneling Protocols - LANS - Virtual LANs - overlay networks - network fabrics - physical network devices ### Nice to have - OSS DDI - Cloud-native tools - Netbox - PowerDNS - Unbound - Kea - Akamai - AWS Route53 - Infoblox technologies - DNSSEC implementation - Python scripting - Terraform - Ansible - Puppet - Chef - Kubernetes --- Source: [Apply at capitalone.wd12.myworkdayjobs.com](https://capitalone.wd12.myworkdayjobs.com/en-US/Capital_One/job/McLean-VA/Network-Engineer-5--DNS---DHCP---IPAM-_R1004768?utm_source=yubhub.co&utm_medium=jobs_feed&utm_campaign=apply)