Lead Engineer - Cloud Platform Operations

AVON is seeking a Lead Engineer for Cloud Platform Operations to join its global technology team. The role involves full accountability for provisioning, securing, and continuously improving AVON's multi-cloud estate, primarily on AWS, alongside OCI and Azure. The position covers IaaS and PaaS operations, Infrastructure-as-Code engineering, cloud-native security and networking, Kubernetes/container platforms, SRE practices, and FinOps.

• 7+ years of enterprise cloud engineering and operations experience, with at least 2 years in a team lead or managerial role.
• Deep, hands-on production expertise in AWS; experience with OCI and/or Azure.
• Demonstrable Terraform expertise with CI/CD pipeline integration and policy gates.
• Proven experience delivering cloud migration and transformation projects.
• Experience designing and operating cloud IAM frameworks including federation/SSO, workload identities, JIT/PAM, least-privilege design, and secret management.
• Hands-on experience with cloud networking including VNet/VPC design, private endpoints, hub-and-spoke architectures, DNS, global load balancing, and egress controls.
• Experience operating Kubernetes clusters (EKS, AKS, or OKE) in production.
• Background in FinOps practices including cost allocation, rightsizing, commitment planning, anomaly detection, and showback/chargeback.
• Experience supporting or leading cloud audit and compliance activities (ISO 27001, SOC 2, PCI-DSS, or equivalent).
• Proficiency with ITSM and project tracking platforms such as Jira and ServiceNow.
• Strong documentation and coaching skills; ability to standardize patterns into reusable blueprints.

Nice to have:

• Experience with Red Hat, Ansible, VMware vSphere, Bash scripting, Pacemaker, Kerberos, LDAP, Python.
• Familiarity with Nutanix HCI/cloud platform.
• AI-assisted automation and agent development experience.

• Lead provisioning, management, and optimization of multi-cloud infrastructure across AWS, OCI, and Azure, ensuring security, scalability, and cost efficiency within landing-zone guardrails.
• Build and maintain infrastructure as code (Terraform) with drift detection, auto-remediation, and secure CI/CD pipeline integration.
• Maintain a Cloud Service Catalog of approved blueprints and standardize reusable patterns.
• Own policy-as-code guardrails, identity and access management, and secure network architectures.
• Lead Kubernetes/container operations including cluster lifecycle, autoscaling, admission control, and supply-chain security.
• Embed SRE practices such as SLOs, error budgets, observability, and incident response.
• Develop automation scripts and AI-assisted tooling to reduce toil.
• Manage FinOps activities including cost allocation, budgeting, rightsizing, and commitments.
• Oversee backup, disaster recovery, business continuity, and ITSM integration with audit readiness.
• Lead cloud migration projects ensuring minimal disruption and regulatory compliance.
• Participate in governance, reporting, and service reviews of cloud utilization and performance.
• Mentor engineers on build standards, IaC patterns, manage team workload, prioritize Jira queue, and run on-call rotations.