About this role:
Wells Fargo is seeking a Lead Network Engineer specializing in automation and Infrastructure as Code for enterprise DNS, DHCP, IPAM (DDI) and Network Time Services (NTP/PTP). Develops and maintains Python and Ansible code to automate configuration management, compliance validation, data collection, and reporting to improve consistency, visibility, and operational efficiency.
In this role, you will:
Automate DNS record lifecycle (create/update/delete) using Python and Ansible to reduce manual work and improve consistency
Build Ansible playbooks/roles to standardize DNS configurations across environments and teams
Develop Python scripts to validate DNS zone configuration, delegation, and naming standards
Integrate DNS automation with CI/CD workflows (version control, testing, packaging, release notes)
Produce clear documentation for automated DNS workflows (inputs/outputs, guardrails, runbooks)
Create automated compliance checks and produce audit-ready reports on DNS configuration state
Automate DNS health checks (resolution, latency, NXDOMAIN rates, recursion behavior) and publish results for monitoring
Write automation to support change execution (pre-checks, safe rollouts, post-validation, rollback triggers)
- Lead the review, resolution and implementation for the most complex technical issues and initiatives related to large scale network applications, data systems, voice and other technical products and services
- Use and create diagnostic, simulation and other tools to maintain, troubleshoot and restore service or data to systems
- Evaluate or review queries to extract data, create standard procedures, or perform limited programming to fine tune systems supported
- Research performance trends and recommend process improvements
- Perform complex migrations from development to production, upgrades, installations and configurations
- Make decisions in security and regulatory policies to design and implement foolproof secured network solutions
- Assess changes for risk to production systems and assure quality, security and compliance requirements are met for supported areas
- Identify gaps in current technology processes and recommend changes to assure Service Level Agreements can be supported
- Collaborate and consult with peers, colleagues and managers to resolve issues and achieve goals
Required Qualifications:
- 5+ years of Network Engineering experience, or equivalent demonstrated through one or a combination of the following: work experience, training, military experience, education
Desired Qualifications:
- 5+ years Experience automating DNS configuration and validation using Python and Ansible
- 5+ years Hands-on experience with Infrastructure as Code concepts for network and service configuration
- Ability to develop automation for configuration compliance, auditing, and reporting
- 3+ years Experience integrating automation with DDI platforms (e.g., Infoblox, BlueCat, or equivalent)
- Proficiency writing reusable, maintainable Python code with logging and error handling
- 3+ years Experience building Ansible playbooks, roles, and inventories for network services
- Familiarity with configuration drift detection and validation techniques
- Experience collecting and analyzing service data, metrics, and logs for reporting purposes
- Experience working with version control and automation testing workflows
Job Expectations:
- Develop and maintain Python and Ansible automation for DNS-related configuration tasks
- Ensure automation follows established network standards and guardrails
- Automate DNS validation, compliance checks, and configuration audits
- Support DNS operations by automating common runbook and request workflows
- Collaborate with network and security teams to align automation with controls and processes
- Continuously improve automation based on feedback, incidents, and operational needs
