Senior Engineer - Cloud Services

Senior Engineer - Cloud Services The Big Picture   About Sysco LABS:  Sysco LABS is the Global In-House Center of Sysco Corporation (NYSE: SYY), the world’s largest foodservice company. Sysco ranks 55th in the Fortune 500 list and is the global leader in the trillion-dollar foodservice industry.  Sysco operates 333 distribution centers across 10 countries, with 75,000 colleagues serving approximately 670,000 customer locations, including restaurants, healthcare and educational facilities, lodging establishments, entertainment venues and more. For fiscal year 2026, which ended June 27, 2026, the company generated sales of more than $84 billion.  Sysco LABS Sri Lanka delivers the technology that powers Sysco’s end-to-end operations.  Sysco LABS’ enterprise technology is present in the end-to-end foodservice journey, enabling the sourcing of food products, merchandising, storage and warehouse operations, order placement and pricing algorithms, the delivery of food and supplies to Sysco’s global network and the in-restaurant dining experience of the end-customer.  Role Overview As a Senior Engineer of Sysco’s Global Public Cloud Engineering Team, you will own and support our multi-cloud, hybrid infrastructure and service transformation. You will assist the design and implementation of secure, scalable, and highly available cloud environments across AWS, GCP, and Azure, Fastly (CDN/WAF) and Cloud Governance Platforms focusing relentlessly on cloud-native patterns and the lowest total cost of ownership (TCO). Blending hands-on engineering execution with technical leadership, you will set enterprise standards for Infrastructure-as-Code, automated governance, edge security, and developer enablement. Key Responsibilities 1. Architecture & Cloud Transformation Act as point of contact for multi-cloud, hybrid infrastructure services transformation, establishing architecture standards and golden patterns for provisioning and deployment. Support cloud-native solutions over legacy lift-and-shift patterns, aligning all designs with the six pillars of the Well-Architected Framework (Operational Excellence, Security, Reliability, Performance Efficiency, Cost Optimization, and Sustainability). Design and implement enterprise cloud architectures, develop cloud landing zones and platform capabilities, design hybrid-cloud and multi-cloud connectivity. Define and own end-to-end Solution Architecture (Infrastructure, applications, and data technologies) utilizing service-oriented architecture principles. Assist migration initiatives, including On-Premises-to-Cloud and Cloud-to-Cloud migrations with zero downtime architectures and robust Disaster Recovery (DR) validation. AI Infrastructure & Workload Support: Support robust, scalable, and secure underlying cloud infrastructure for AI/ML workloads (including GPU-optimized nodes, vector database connectivity, and secure model serving endpoints) across AWS, GCP, and Azure. AI-Assisted Engineering Productivity: Help the secure adoption of AI-driven developer tooling (e.g., GitHub Copilot, Amazon Q) within infrastructure teams, establishing safety guardrails for automated code and Infrastructure-as-Code generation. ITIL-Aligned Cloud Engineering/Operations: Bridge modern cloud engineering practices with IT Service Management (ITSM) frameworks (ITIL v4 or above), ensuring rapid deployment velocity is balanced with robust service quality, predictability, and risk control. 2. Governance, Security & Compliance Design and enforce enterprise Cloud Governance strategies, implementing automated guardrails and continuous compliance using Cloud Custodian and native cloud policies (e.g., AWS SCPs, Azure Policies). Support comprehensive Cloud Identity and Access Management (IAM), tenant isolation, federated authentication, and least-privilege security models. Partner with security teams to configure and manage enterprise edge security architectures, integrating Fastly CDN and NFWAF (Next-Gen WAF) to protect core applications from modern web threats. Ensure end-to-end security and regulatory compliance across all enterprise infrastructure, data pipelines, and application configurations. AI Governance & Policy-as-Code: Extend Cloud Custodian and native cloud governance engines to audit, monitor, and enforce compliance policies on cloud-hosted AI and generative AI services, preventing unauthorized shadow AI deployments. AI Security & Data Privacy: Partner with security teams to ensure secure data pipelines, strict API rate-limiting, and egress/ingress protection via Fastly CDN and NFWAF for enterprise AI applications. Implement FinOps guardrails specifically tailored for high-cost AI/ML resource consumption. 3. DevOps, Automation & CI/CD Excellence Standardize and govern Infrastructure-as-Code using Terraform and Terragrunt for modular, DRY multi-cloud deployments. Optimization and management of CI/CD pipelines, driving adoption toward GitHub and GitHub Actions while managing legacy Jenkins maintenance. Develop advanced automation scripts and custom orchestration tools using Python, Bash, and PowerShell. Ability to support configuration management frameworks and server baseline standards using Ansible, alongside containerized runtime workloads using Docker and Kubernetes. 4. Technical Leadership & Engineering Support Troubleshoot critical production issues, perform root cause analyses, and drive technical problem-solving across cross-functional engineering squads. Conducting rigorous code and Pull Request (PR) reviews for Terraform configurations and CI/CD pipelines. Build and maintain comprehensive internal knowledge bases, technical documentation, and reusable architecture decision records (ADRs). Articulate technical risks, cost-capacity ratios, and strategic roadmaps clearly to audiences ranging from operations engineers to executive stakeholders. Internal Platform Development – In-house cloud platform management solutions development - Develop self-service platform capabilities etc. Candidate Profile & Qualifications Education & Experience Bachelor’s Degree in Computer Science, Information Technology or equivalent. 4+ years of total progressive industry experience in IT infrastructure and software delivery. 2+ years of dedicated hands-on cloud engineering, platform design, or operational experience. Proven track record of hands-on experience across at least one major cloud vendor (AWS, Azure, and/or GCP). Experience in two cloud vendors would be an advantage. Technical Competencies Thorough understanding or core cloud foundational services (networking/VPC peering, enterprise IAM, hybrid connectivity, compute, and container runtimes) across AWS, GCP, and Azure, with a proven ability to design and manage resilient, high-performance multi-cloud platforms. Expertise in Infrastructure-as-Code tooling (Terraform, Terragrunt) and modern CI/CD ecosystems (GitHub Actions, Jenkins). Strong working knowledge of configuration management and automation frameworks (Python, Bash, PowerShell, Ansible). Understanding of networking, CDN caching tiers, WAF configurations (i.e. Fastly CDN, NGWAF), and hybrid cloud connectivity. Experience in implementing/supporting cloud security controls, encryption (at rest and in transit), key management systems, vulnerability assessments, and SIEM integrations. AI Governance & Cloud Integration: Familiarity with supporting governance, security controls, and resource optimization for cloud-native AI/ML services. Responsible AI & Compliance: Understanding of data residency, privacy frameworks, and security baselines required when deploying AI models in enterprise multi-cloud environments. ITSM & ITIL Frameworks: Solid working knowledge of ITIL principles, particularly concerning change enablement, incident management, problem management, and Configuration Management Database (CMDB) tracking in multi-cloud architectures. Certifications & Soft Skills Cloud Certifications: Active certification from at least one major cloud provider at the minimum of Associate/Engineer level. Infrastructure Automation Certifications: Having HashiCorp Certified: Terraform Associate (or higher Authoring and Operations Professional) is an added advantage. Service Management: Certification in ITIL v4 Foundation or above would be an added advantage. Communication & Influence: Exceptional written, verbal, and presentation abilities; adept at translating complex architectural trade-offs and risks into business terms for executive leadership. Benefits:   Performance-based annual bonus   Performance rewards and recognition   Agile Benefits - special allowances for Health, Wellness & Academic purposes   Entertainment allowance   Team engagement allowance   Comprehensive Health & Life Insurance Cover - extendable to parents and in-laws   Hybrid work arrangement      Sysco LABS is an Equal Opportunity Employer. Sysco is the global leader in selling, marketing and distributing food products to restaurants, healthcare and educational facilities, lodging establishments and other customers who prepare meals away from home. Its family of products also includes equipment and supplies for the foodservice and hospitality industries. With more than 71,000 colleagues, the company operates 333 distribution facilities worldwide and serves approximately 700,000 customer locations. For fiscal year 2022 that ended July 2, 2022, the company generated sales of more than $68 billion. Information about our Sustainability program, including Sysco’s 2022 Sustainability Report and 2022 Diversity, Equity & Inclusion Report, can be found at www.sysco.com.