Job description

Job Description Nordstrom s Core Infrastructure Services (CIS) team keeps the foundational systems that connect our employees, partners, and customers running across 400 locations and multi-cloud environments. We re hiring an Infrastructure Engineer II to help operate and support DNS/DHCP, network authentication, certificate lifecycle, and automation platforms that our stores, distribution centers, and corporate systems depend on every day. This is a growth-oriented role for an engineer who has a solid foundation in one or more of these domains and is eager to build depth across all of them. You ll work closely with senior engineers on the CIS team, taking on real operational ownership while building the skills to grow into a more senior infrastructure role. A Day in the Life Support day-to-day engineering and operation of enterprise DNS and DHCP services (Infoblox), handling routine changes, zone updates, and scope adjustments. Assist with ClearPass/network access control operations, including onboarding devices, troubleshooting authentication failures, and supporting 802.1X/RADIUS policy changes. Track and execute certificate lifecycle tasks: issuance, renewal, installation, and expiration monitoring across internal and external-facing systems for Nordstrom. Write and maintain automation scripts (Python, Ansible, or similar) to reduce manual, repetitive work across DDI, certificate, and authentication workflows. Monitor DNS, DHCP, and authentication systems for alerts and incidents; triage issues, escalate appropriately, and help drive them to resolution. Participate in an on-call rotation, responding to infrastructure incidents. Document changes, update runbooks, and contribute to knowledge base articles so operational knowledge stays current and shared across the team. Learn and apply AI-assisted tooling for diagnostics, documentation, and repetitive operational tasks as the team adopts these practices. Collaborate with engineers, security, and platform teams on projects that touch DNS, identity, and certificate infrastructure. Support DNS, connectivity, and configuration tasks across our public cloud environments (AWS, Azure, GCP), helping bridge on-premises and cloud-native infrastructure. More About You You are a team player, you love to collaborate and learn fast. You have a working understanding of DNS and DHCP fundamentals and want to go deeper into enterprise-scale operations. You re comfortable picking up new tools quickly, ClearPass, Infoblox, or certificate platforms, and you ask good questions when you hit the edge of your knowledge. You have ‘automation first’ mindset and exposure to scripting or automation and want to build that into a core skill rather than a side interest. You re detail-oriented, especially with things like certificate expirations, DNS updates and access policies, where a small miss has an outsized impact. You communicate clearly , whether that s a ticket update, a runbook, or a note to a teammate. You take ownership of your work and follow through, while knowing when to ask for help or escalate. You re curious about network security and identity-aware access, even if you re not yet the expert in the room. Qualifications Bachelor s degree in Computer Science, Information Technology, Engineering, or equivalent practical experience. 2-4 years of experience in network, infrastructure, or systems engineering, with some exposure to DNS and DHCP. Foundational understanding of TCP/IP, DNS protocol basics, DHCP concepts, and general network troubleshooting. Basic scripting experience (Python, PowerShell, or similar) and interest in building automation skills. Working knowledge of or hands-on experience with public cloud platforms (AWS, Azure, or GCP), along with a genuine willingness and ability to quickly learn new cloud-native tools and services as our infrastructure footprint expands in the cloud. Exposure to or working knowledge of network access control concepts (ClearPass, ISE, RADIUS, or 802.1X). Familiarity with certificate and PKI concepts (what a certificate does, how expiration and renewal work). Ability to follow documented procedures carefully and to document your own work clearly. Effective written and verbal communication, with the ability to work well with more senior teammates and cross-functional partners. Strong team player who collaborates well with others, shares knowledge openly, and contributes positively to team culture. Nice to Have Hands-on exposure to Infoblox NIOS, BloxOne, or another enterprise DDI platform. Familiarity with Palo Alto/Panorama, Zscaler, or other network security and zero-trust platforms. Exposure to certificate authorities or platforms such as Sectigo, DigiCert, or Venafi. Experience with Ansible, Terraform, or other infrastructure-as-code tooling. Interest in or early experience with AI-assisted tooling for infrastructure operations. Familiarity with wireless networking concepts (WLAN controllers, 802.11 standards, RF fundamentals) to support ClearPass-based wireless authentication use cases. Relevant certifications such as CompTIA Network /Security , CCNA, or an Infoblox associate-level credential. Pay Range Details The pay range(s) below has been provided in compliance with state specific laws. Pay ranges may be different for other locations. Pay offers are dependent on the location, as well as job-related knowledge, skills, and experience. $142,000.00 - $220,500.00 Annual We’ve got you covered… Our employees are our most important asset and that’s reflected in our benefits. Nordstrom is proud to offer a variety of benefits to support employees and their families, including: Medical/Vision, Dental, Retirement and Paid Time Away Life Insurance and Disability Merchandise Discount and EAP Resources This position may be eligible for performance-based incentives/bonuses. Benefits include 401k, medical/vision/dental/life/disability insurance options, PTO accruals, Holidays, and more. Eligibility requirements may apply based on location, job level, classification, and length of employment. Learn more in the Nordstrom Benefits Overview by copying and pasting the following URL into your browser: careers.nordstrom.com A few more important points... The job posting highlights the most critical responsibilities and requirements of the job. It’s not all-inclusive. There may be additional duties, responsibilities and qualifications for this job. For Los Angeles or San Francisco applicants: Nordstrom is required to inform you that we conduct background checks after conditional offer and consider qualified applicants with criminal histories in a manner consistent with legal requirements per Los Angeles, Cal. Muni. Code 189.04 and the San Francisco Fair Chance Ordinance. For additional state and location specific notices, please refer to the Legal Notices document within the FAQ section of the Nordstrom Careers site. Applicants with disabilities who require assistance or accommodation should contact the nearest Nordstrom location, which can be identified at www.nordstrom.com . Please be mindful that there may be legal notices and requirements related to this job posting that are specific to your state. Review the Career Site FAQ’s for relevant information and guidelines. Current Nordstrom employees: To apply, log into Workday, click the Careers button and then click Find Jobs. Nordstrom keeps job postings open for at least one day after the posting date. © 2026 Nordstrom, Inc

Requirements

Must-haves

A Day in the Life Support day-to-day engineering and operation of enterprise DNS and DHCP services (Infoblox), handling routine changes, zone updates, and scope adjustments.
Assist with ClearPass/network access control operations, including onboarding devices, troubleshooting authentication failures, and supporting 802.1X/RADIUS policy changes.
Track and execute certificate lifecycle tasks: issuance, renewal, installation, and expiration monitoring across internal and external-facing systems for Nordstrom.
Write and maintain automation scripts (Python, Ansible, or similar) to reduce manual, repetitive work across DDI, certificate, and authentication workflows.
Monitor DNS, DHCP, and authentication systems for alerts and incidents; triage issues, escalate appropriately, and help drive them to resolution.
Participate in an on-call rotation, responding to infrastructure incidents.
Document changes, update runbooks, and contribute to knowledge base articles so operational knowledge stays current and shared across the team.
Learn and apply AI-assisted tooling for diagnostics, documentation, and repetitive operational tasks as the team adopts these practices.
Collaborate with engineers, security, and platform teams on projects that touch DNS, identity, and certificate infrastructure.
Support DNS, connectivity, and configuration tasks across our public cloud environments (AWS, Azure, GCP), helping bridge on-premises and cloud-native infrastructure.
More About You You are a team player, you love to collaborate and learn fast.
You have a working understanding of DNS and DHCP fundamentals and want to go deeper into enterprise-scale operations.
You re comfortable picking up new tools quickly, ClearPass, Infoblox, or certificate platforms, and you ask good questions when you hit the edge of your knowledge.
You have ‘automation first’ mindset and exposure to scripting or automation and want to build that into a core skill rather than a side interest.
You re detail-oriented, especially with things like certificate expirations, DNS updates and access policies, where a small miss has an outsized impact.
You communicate clearly , whether that s a ticket update, a runbook, or a note to a teammate.
You take ownership of your work and follow through, while knowing when to ask for help or escalate.
You re curious about network security and identity-aware access, even if you re not yet the expert in the room.
Qualifications Bachelor s degree in Computer Science, Information Technology, Engineering, or equivalent practical experience.
2-4 years of experience in network, infrastructure, or systems engineering, with some exposure to DNS and DHCP.
Foundational understanding of TCP/IP, DNS protocol basics, DHCP concepts, and general network troubleshooting.
Basic scripting experience (Python, PowerShell, or similar) and interest in building automation skills.
Exposure to or working knowledge of network access control concepts (ClearPass, ISE, RADIUS, or 802.1X).

Nice-to-haves

Nice to Have Hands-on exposure to Infoblox NIOS, BloxOne, or another enterprise DDI platform.

Application prep

Use the role’s language and application details while tailoring your materials.

Keywords to mirror

pythonaiawsazuregcpgo

Platform: workday
Effort: long

Benefits

Benefits detected in the listing.

Dental

Vision

401k

Pto