Network and Infrastructure Engineer
Role details
Job location
Tech stack
Job description
This role sits in the EUD and Infrastructure team, which is responsible for the design, implementation and support of Avon's IT Infrastructure. The Network and Infrastructure Engineer is responsible for the operation and maintenance of systems across all sites and hosting providers. The role manages on-premises and private cloud infrastructure, ensuring high availability, performance, and security of core IT systems while supporting strategic transformation initiatives This position works within established standards and architectures, supporting network and infrastructure platforms and collaborating with wider IT teams and business stakeholders., * Design, implement, and maintain network, server, and storage infrastructure
- Support delivery of infrastructure solutions across Cisco-based networking environments
- Manage and support routing and switching
- Implement and maintain network security controls (firewalls, VPNs, NAC / ISE where applicable)
- Deploy and support compute platforms (physical servers and virtualised platforms)
- Support and maintain enterprise storage solutions (SAN/NAS, replication, performance tuning)
- Perform installation, configuration, and commissioning of infrastructure hardware and platforms
- Support infrastructure upgrades, migrations, and refresh activities
- Ensure patching of servers, network devices, and firmware across all platforms
- Maintain infrastructure security posture through updates, hardening, and vulnerability remediation
- Provide 3rd line support for infrastructure and network issues
- Troubleshoot performance, connectivity, and system-level issues across infrastructure layers
- Support high availability and resilience through appropriate design and configurations
- Maintain and support backup, recovery, and disaster recovery solutions
- Maintain standard builds, configurations, and deployment processes
- Monitor infrastructure health, capacity, and performance
- Produce and maintain technical documentation (network diagrams, configs, procedures)
- Work collaboratively with cloud, security, and application teams
- Contribute to automation and continuous improvement initiatives
Key Outputs
- Operates as part of the Group-wide IT function
- Works with IT Directors for each Strategic Business Unit (SBU)
- Supports site IT and SBU IT teams to maintain service reliability
- Collaborates across IT and business stakeholders
- Takes direction from the Director of M365, EUD and Infrastructure
- Works within a matrix IT structure
- Engages with third-party vendors for support and service delivery
- Provides technical guidance and support to engineers and service teams across multiple locations
- Engages with third-party vendors and partners for support, delivery, and escalation of infrastructure solutions
- Oversee the lifecycle of infrastructure assets (from planning upgrades to retiring legacy systems), and manage vendor relationships and contracts for support and new solutions
Other Responsibilities
- Operates as part of the Group-wide IT function
- Works with IT Directors for each Strategic Business Unit (SBU)
- Supports site IT and SBU IT teams to maintain service reliability
- Collaborates across IT and business stakeholders
- Takes direction from the Director of M365, EUD and Infrastructure
- Works within a matrix IT structure
- Engages with third-party vendors for support and service delivery
- Provides technical guidance and support to engineers and service teams across multiple locations
- Engages with third-party vendors and partners for support, delivery, and escalation of infrastructure solutions
- Oversee the lifecycle of infrastructure assets (from planning upgrades to retiring legacy systems)
- manage vendor relationships and contracts for support and new solutions
- Coaching and mentoring Junior team members, This job description is not intended, and should not be construed, to be an all inclusive list of all responsibilities, skills, efforts or working conditions associated with this job. While this job description is intended to be an accurate reflection of the job requirements, management reserved the right to modify, add or remove duties from particular jobs and to assign other duties as necessary.
Responsibilities of this position may include direct and/or indirect physical or logical access to information, systems, technologies subjected to the regulations/compliance with U.S. Export Control Laws.
U.S. Export Control laws and U.S. Government Department of Defense contracts and sub-contracts impose certain restrictions on companies and their ability to share export-controlled and other technology and services with certain "non-U.S. persons" (persons who are not U.S. citizens or nationals, lawful permanent residents of the U.S., refugees, "Temporary Residents" (granted Amnesty or Special Agricultural Worker provisions), or persons granted asylum (but excluding persons in nonimmigrant status such as H-1B, L-1, F-1, etc.) or non-U.S. citizens.
To comply with these laws, and in conjunction with the review of candidates for those positions within Avon that may present access to export controlled technical data, Avon must assess employees' U.S. person status, as well as citizenship(s).
Requirements
- Cisco networking (routing, switching, VLANs, STP)
- Understanding of core network services such as DNS, DHCP, IP addressing, and network segmentation
- Good grasp of network security controls, including firewalls, VPNs, and secure access models (e.g. 802.1X/Cisco ISE)
- Proficiency with Microsoft server platforms, including Windows Server, Active Directory, and Group Policy
- Working capability in Microsoft 365 integrations, including hybrid identity, tenant-level configuration and application permissions
- Strong capability across virtualisation platforms, including Hyper-V, VMware, and comparable hypervisors
- Understanding of high availability and clustering design across compute and network platforms
- Solid grounding in enterprise storage technologies, including SAN/NAS, RAID, replication, and performance tuning
- Understanding of backup and disaster recovery design principles, ideally utilising Veeam
- Capability in certificate services and PKI, including certificate lifecycle and secure service integration
- Understanding of patching, system hardening, and vulnerability management practices
- Familiarity with NIST security frameworks and application of controls within infrastructure environments
- Awareness of multi-site and global infrastructure considerations, including latency, resilience, and standardisation
- Familiarity with monitoring, alerting, and performance management tooling
- Understanding of ITIL-aligned service management practices
Desirable
- 10 years+ of working with virtualisation, Windows server and storage technologies
- 5 years+ of working with Cisco technologies, leading and managing network platforms
- 3 years+ of Microsoft Cloud experience across M365 and Azure
- Experience of working with a multi-national business and regulated environments
- Able to develop and contribute to solution designs and implementation, * Good communication, interpersonal and presentation skills
- Self-motivated and able to prioritise tasks and manage own time efficiently
- Proven ability to work independently or as part of a team
- Developing self, individuals and teams
- Demonstrate a Continuous Improvement mindset and traits
- Technical documentation and presentation to IT and business stakeholders, Must be legally authorized to work in country of employment without a sponsorship for employment visa status (e.e. H1B status).
The anticipated salary range for candidates who will work in Cadillac, MI is $100,000 to $140,000 annually. The final salary offered to a successful candidate will be dependent on several factors that may include but are not limited to the type and years of experience within the job, type and years of experience within the industry, education, etc.
Benefits & conditions
We offer a comprehensive benefits package that includes the following:
- Flexible Schedule
- Generous paid time off
- Competitive Compensation Package
- Learning and Development Opportunities
- Bonus Plan
- Employee Stock Purchase Plan
- 401k Matching
- Tuition Reimbursement Program
- Mentorship Program
- Supplemental plans
- Company-paid life and AD&D
- Medical/Dental/Vision