Network and Infrastructure Engineer

Scope of the Function

This role sits in the EUD and Infrastructure team, which is responsible for the design, implementation and support of Avon’s IT Infrastructure.

The Senior Network and Infrastructure Engineer is responsible for the operation and maintenance of systems across all sites and hosting providers. The role manages on-premises and private cloud infrastructure, ensuring high availability, performance, and security of core IT systems while supporting strategic transformation initiatives. This position works within established standards and architectures, supporting network and infrastructure platforms and collaborating with wider IT teams and business stakeholders.

• Design, implement, and maintain network, server, and storage infrastructure
• Support delivery of infrastructure solutions across Cisco-based networking environments
• Manage and support routing and switching
• Implement and maintain network security controls (firewalls, VPNs, NAC / ISE where applicable)
• Deploy and support compute platforms (physical servers and virtualised platforms)
• Support and maintain enterprise storage solutions (SAN/NAS, replication, performance tuning)
• Perform installation, configuration, and commissioning of infrastructure hardware and platforms
• Support infrastructure upgrades, migrations, and refresh activities
• Ensure patching of servers, network devices, and firmware across all platforms
• Maintain infrastructure security posture through updates, hardening, and vulnerability remediation
• Provide 3rd line support for infrastructure and network issues
• Troubleshoot performance, connectivity, and system-level issues across infrastructure layers
• Support high availability and resilience through appropriate design and configurations
• Maintain and support backup, recovery, and disaster recovery solutions
• Maintain standard builds, configurations, and deployment processes
• Monitor infrastructure health, capacity, and performance
• Produce and maintain technical documentation (network diagrams, configs, procedures)
• Work collaboratively with cloud, security, and application teams
• Contribute to automation and continuous improvement initiatives

• Operates as part of the Group-wide IT function
• Works with IT Directors for each Strategic Business Unit (SBU)
• Supports site IT and SBU IT teams to maintain service reliability
• Collaborates across IT and business stakeholders
• Takes direction from the Director of M365, EUD and Infrastructure
• Works within a matrix IT structure
• Engages with third-party vendors for support and service delivery
• Provides technical guidance and support to engineers and service teams across multiple locations
• Engages with third-party vendors and partners for support, delivery, and escalation of infrastructure solutions
• Oversees the lifecycle of infrastructure assets (from planning upgrades to retiring legacy systems), and manages vendor relationships and contracts for support and new solutions

• Coaching and mentoring Junior team members

• Cisco networking (routing, switching, VLANs, STP)
• Understanding of core network services such as DNS, DHCP, IP addressing, and network segmentation
• Good grasp of network security controls, including firewalls, VPNs, and secure access models (e.g. 802.1X/Cisco ISE)
• Proficiency with Microsoft server platforms, including Windows Server, Active Directory, and Group Policy
• Working capability in Microsoft 365 integrations, including hybrid identity, tenant-level configuration and application permissions
• Strong capability across virtualisation platforms, including Hyper‑V, VMware, and comparable hypervisors
• Understanding of high availability and clustering design across compute and network platforms
• Solid grounding in enterprise storage technologies, including SAN/NAS, RAID, replication, and performance tuning
• Understanding of backup and disaster recovery design principles, ideally utilising Veeam
• Capability in certificate services and PKI, including certificate lifecycle and secure service integration
• Understanding of patching, system hardening, and vulnerability management practices
• Familiarity…