Description
We are seeking a Network Engineer 5 (DDI) to join our team at Capital One. As a Senior Manager-level Individual Contributor (IC) role, you will serve as a technical driver spearheading our strategic transformation away from a legacy, monolithic appliance infrastructure (Infoblox) toward a modern, modular, Open Source Software (OSS) and Cloud-native DDI (DNS/DHCP/IPAM) platform ecosystem.
What You'll Do:
- Partner with Platform Development to Steer Strategy: Collaborate with the Platform Development lead to shape the overall DDI platform roadmap, ensuring software/engine builds align directly with tenant enablement requirements, self-service consumption models, and practical migration paths.
- Lead the Phased OSS Migration: Own the enablement and execution strategy to decouple and transition services from Infoblox into a distributed OSS model.
- Champion Developer Experience & Self-Service: Define and advocate for the "golden paths" of DDI consumption. Enable internal product engineering teams to provision and manage DNS/IPAM resources autonomously via APIs, CI/CD integrations, and Infrastructure as Code (IaC).
- Lead POC Validation & Tenant Fit: Direct technical bake-offs and Proof of Concept (POC) validation efforts, evaluating candidate tools not just on raw features, but on scalability, tenant onboarding friction, operational supportability, and automation readiness.
- Cross-Functional Technical Influence: Provide technical direction to engineers across both enablement and consumer teams. Represent the DDI platform in architecture review boards, security alignment sessions, and tenant intake forums.
- Automation: Utilize Infrastructure as Code (IaC) and DevOps best practices to ensure scalable, automated infrastructure deployment.
- Architect and Design end-to-end connectivity systems with associated security and operational frameworks.
- Utilize software development practices to structure and design how upstream systems (e.g. deployment automation) will interact with running systems and build out end-state configuration frameworks that are software adapted for deploy, change, and maintenance.
- Define and drive standards needed for implementation across vendor platforms, cloud environments and in-house software.
- Define implementation patterns for all protocol frameworks needed at COF across our campus, WAN/SD-WAN, Colocation facilities, DCs cloud and SaaS fronted services.
- Own the architecture and lifecycle of enterprise and cloud network ecosystems, spanning connectivity, security, and automation layers.
- Develop and enforce design standards and best practices for routing, security segmentation, and inter-cloud traffic flow.
- Lead critical incident response efforts and ensure root-cause analysis drives durable reliability improvements.
- Partner with Cloud, Security, and SRE teams to define cross-platform observability, telemetry, and self-healing automation.
- Mentor and upskill engineers across the organization on advanced networking, reliability, and automation principles.
Basic Qualifications:
- Bachelor’s Degree in Computer Science, Engineering, or at least 8 years of experience in network engineering, including management of network systems.
- At least 8 years of experience with routing protocols (BGP, Link-State Protocols, and Tunneling Protocols).
- At least 8 years of experience with network encapsulation technologies (LANS, Virtual LANs, overlay networks, and network fabrics).
- At least 8 years of experience with physical network devices.
- At least 8 years of experience designing, implementing, and maintaining network infrastructure.
Preferred Qualifications:
- Hands-on experience with OSS DDI and Cloud-native tools (Netbox, PowerDNS, Unbound, Kea, Akamai, AWS Route53).
- Experience with Infoblox technologies.
- Experience with DNSSEC implementation and management experience.
- Experience with Python scripting.
- Proficient in designing, deploying, and managing complex hybrid cloud environments, including IaaS/PaaS, and cloud efficiency.
- Deep, practical knowledge of SRE principles and methodologies focused on system reliability, availability, and performance.
- Mastery of modern observability stacks and open-source monitoring tools for proactive alerting, trend analysis and capacity planning.
- Expertise in managing and provisioning infrastructure through code, utilizing frameworks like Terraform, Ansible, Puppet, or Chef.
- Advanced skills in container orchestration (Kubernetes), service meshes, and the broader cloud-native ecosystem.
- Strong understanding of cloud security best practices, architecture patterns, and industry compliance standards (e.g., SOC 2, ISO 27001).
- Professional certifications such as CCNP Enterprise, JNCIP, CCDA, or AWS Advanced Networking Specialty.
- Strong analytical and troubleshooting skills, with a focus on solving critical network issues efficiently.
- Excellent communication and interpersonal skills, with an ability to convey technical concepts to non-technical stakeholders or customers.
- Experience collaborating across engineering domains (security, compute, storage, cloud) to deliver resilient, performant systems.
- Experience leveraging AI-driven tooling to automate network operations, improve network reliability and performance, or optimize network capacity and cost.
The minimum and maximum full-time annual salaries for this role are:
McLean, VA: $229,900 - $262,400 for Network Engineer 5
Plano, TX: $209,000 - $238,500 for Network Engineer 5
Richmond, VA: $209,000 - $238,500 for Network Engineer 5
Capital One offers a comprehensive, competitive, and inclusive set of health, financial and other benefits that support your total well-being.