Sr. Infrastructure Engineer: CIS; Hybrid - Seattle, WA)

Position: Sr. Infrastructure Engineer: CIS (Hybrid - Seattle, WA)
Job Description Nordstrom's Core Infrastructure Services (CIS) team keeps the foundational systems that connect our employees, partners, and customers running across 400+ locations and multi-cloud environments. We're hiring an Infrastructure Engineer II to help operate and support DNS/DHCP, network authentication, certificate lifecycle, and automation platforms that our stores, distribution centers, and corporate systems depend on every day.

This is a growth-oriented role for an engineer who has a solid foundation in one or more of these domains and is eager to build depth across all of them. You'll work closely with senior engineers on the CIS team, taking on real operational ownership while building the skills to grow into a more senior infrastructure role.

A Day in the Life Support day-to-day engineering and operation of enterprise DNS and DHCP services (Infoblox), handling routine changes, zone updates, and scope adjustments.

Assist with Clear Pass/network access control operations, including onboarding devices, troubleshooting authentication failures, and supporting 802.1X/RADIUS policy changes.

Track and execute certificate lifecycle tasks: issuance, renewal, installation, and expiration monitoring across internal and external-facing systems for Nordstrom.

Write and maintain automation scripts (Python, Ansible, or similar) to reduce manual, repetitive work across DDI, certificate, and authentication workflows.

Monitor DNS, DHCP, and authentication systems for alerts and incidents; triage issues, escalate appropriately, and help drive them to resolution.

Participate in an on-call rotation, responding to infrastructure incidents.

Document changes, update runbooks, and contribute to knowledge base articles so operational knowledge stays current and shared across the team.

Learn and apply AI-assisted tooling for diagnostics, documentation, and repetitive operational tasks as the team adopts these practices.

Collaborate with engineers, security, and platform teams on projects that touch DNS, identity, and certificate infrastructure.

Support DNS, connectivity, and configuration tasks across our public cloud environments (AWS, Azure, GCP), helping bridge on-premises and cloud-native infrastructure.

More About You You are a team player, you love to collaborate and learn fast.

You have a working understanding of DNS and DHCP fundamentals and want to go deeper into enterprise-scale operations.

You're comfortable picking up new tools quickly, Clear Pass, Infoblox, or certificate platforms, and you ask good questions when you hit the edge of your knowledge.

You have ‘automation first’ mindset and exposure to scripting or automation and want to build that into a core skill rather than a side interest.

You're detail-oriented, especially with things like certificate expirations, DNS updates and access policies, where a small miss has an outsized impact.

You communicate clearly , whether that's a ticket update, a runbook, or a note to a teammate.

You take ownership of your work and follow through, while knowing when to ask for help or escalate.

You're curious about network security and identity-aware access, even if you're not yet the expert in the room.

Qualifications Bachelor's degree in Computer Science, Information Technology, Engineering, or equivalent practical experience.
2-4 years of experience in network, infrastructure, or systems engineering, with some exposure to DNS and DHCP.Foundational understanding of TCP/IP, DNS protocol basics, DHCP concepts, and general network troubleshooting.

Basic scripting experience (Python, Power Shell, or similar) and interest in building automation skills.

Working knowledge of or hands-on experience with public cloud platforms (AWS, Azure, or GCP), along with a genuine…