Network and Infrastructure Engineer

In this role you will design, implement, and maintain Avon’s IT infrastructure across on-premises, private cloud, and multiple sites. You will collaborate with IT and business stakeholders within a matrix structure to ensure high availability, security, and performance of core systems while supporting transformation initiatives. You’ll work on network, server, storage, and security components with a focus on reliability and scalable solutions. This is an opportunity to shape and modernize enterprise infrastructure in a multi-site setting with vendors and cross-functional teams.

• Design, implement, and maintain network, server, and storage infrastructure
• Support infrastructure delivery in Cisco-based networking environments
• Manage routing and switching
• Implement and maintain network security controls (firewalls, VPNs, NAC/ISE)
• Deploy and support compute platforms (physical servers and virtualised platforms)
• Support and maintain enterprise storage solutions (SAN/NAS, replication, performance tuning)
• Install, configure, and commission infrastructure hardware and platforms
• Support upgrades, migrations, and refresh activities
• Ensure patching of servers, network devices, and firmware
• Maintain infrastructure security posture (updates, hardening, vulnerability remediation)
• Provide 3rd line support for infrastructure and network issues
• Troubleshoot performance, connectivity, and system-level issues
• Support high availability and resilience through design and configurations
• Maintain backup, recovery, and disaster recovery solutions
• Maintain standard builds, configurations, and deployment processes
• Monitor infrastructure health, capacity, and performance
• Produce and maintain technical documentation
• Collaborate with cloud, security, and application teams
• Contribute to automation and continuous improvement initiatives

• Cisco networking (routing, switching, VLANs, STP)
• DNS, DHCP, IP addressing, network segmentation basics
• Network security controls (firewalls, VPNs, 802.1X/ISE)
• Microsoft server platforms (Windows Server, Active Directory, Group Policy)
• Microsoft 365 integrations (hybrid identity, tenant config)
• Virtualisation (Hyper-V, VMware)
• High availability and clustering concepts
• SAN/NAS storage, replication, performance tuning
• Backup and disaster recovery concepts (Veeam)
• PKI/certificate services and secure service integration
• Patching, hardening, vulnerability management
• Familiarity with NIST controls
• Multi-site/global infrastructure considerations
• Monitoring and performance tooling
• ITIL-aligned service management practices

• Good communication and presentation
• Self-motivation and time management
• Independent and team-working capability
• Cisco routing and switching
• Hyper-V, VMware virtualization
• Windows Server, Active Directory, Group Policy