Senior Engineer - Cloud Services

JOB DESCRIPTION
Senior Engineer - Cloud Services
The Big Picture
About Sysco LABS:
Sysco LABS is the Global In-House Center of Sysco Corporation (NYSE: SYY), the world’s largest foodservice company. Sysco ranks 55th in the Fortune 500 list and is the global leader in the trillion-dollar foodservice industry.
Sysco operates 333 distribution centers across 10 countries, with 75,000 colleagues serving approximately 670,000 customer locations, including restaurants, healthcare and educational facilities, lodging establishments, entertainment venues and more. For fiscal year 2026, which ended June 27, 2026, the company generated sales of more than $84 billion.
Sysco LABS Sri Lanka delivers the technology that powers Sysco’s end-to-end operations.
Sysco LABS’ enterprise technology is present in the end-to-end foodservice journey, enabling the sourcing of food products, merchandising, storage and warehouse operations, order placement and pricing algorithms, the delivery of food and supplies to Sysco’s global network and the in-restaurant dining experience of the end-customer.
Role Overview
As a Senior Engineer of Sysco’s Global Public Cloud Engineering Team, you will own and support our multi-cloud, hybrid infrastructure and service transformation. You will assist the design and implementation of secure, scalable, and highly available cloud environments across AWS, GCP, and Azure, Fastly (CDN/WAF) and Cloud Governance Platforms focusing relentlessly on cloud-native patterns and the lowest total cost of ownership (TCO). Blending hands-on engineering execution with technical leadership, you will set enterprise standards for Infrastructure-as-Code, automated governance, edge security, and developer enablement.
Key Responsibilities
1. Architecture & Cloud Transformation
Act as point of contact for multi-cloud, hybrid infrastructure services transformation, establishing architecture standards and golden patterns for provisioning and deployment.
Support cloud-native solutions over legacy lift-and-shift patterns, aligning all designs with the six pillars of the Well-Architected Framework (Operational Excellence, Security, Reliability, Performance Efficiency, Cost Optimization, and Sustainability).
Design and implement enterprise cloud architectures, develop cloud landing zones and platform capabilities, design hybrid-cloud and multi-cloud connectivity.
Define and own end-to-end Solution Architecture (Infrastructure, applications, and data technologies) utilizing service-oriented architecture principles.
Assist migration initiatives, including On-Premises-to-Cloud and Cloud-to-Cloud migrations with zero downtime architectures and robust Disaster Recovery (DR) validation.
AI Infrastructure & Workload Support: Support robust, scalable, and secure underlying cloud infrastructure for AI/ML workloads (including GPU-optimized nodes, vector database connectivity, and secure model serving endpoints) across AWS, GCP, and Azure.
AI-Assisted Engineering Productivity: Help the secure adoption of AI-driven developer tooling (e.g., GitHub Copilot, Amazon Q) within infrastructure teams, establishing safety guardrails for automated code and Infrastructure-as-Code generation.
ITIL-Aligned Cloud Engineering/Operations: Bridge modern cloud engineering practices with IT Service Management (ITSM) frameworks (ITIL v4 or above), ensuring rapid deployment velocity is balanced with robust service quality, predictability, and risk control.
2. Governance, Security & Compliance
Design and enforce enterprise Cloud Governance strategies, implementing automated guardrails and continuous compliance using Cloud Custodian and native cloud policies (e.g., AWS SCPs, Azure Policies).
Support comprehensive Cloud Identity and Access Management (IAM), tenant isolation, federated authentication, and least-privilege security models.
Partner with security teams to configure and manage enterprise edge security architectures, integrating Fastly CDN and NFWAF (Next-Gen WAF) to protect core applications from modern web threats.
Ensure end-to-end security and regulatory compliance across all enterprise infrastructure, data pipelines, and application configurations.
AI Governance & Policy-as-Code: Extend Cloud Custodian and native cloud governance engines to audit, monitor, and enforce compliance policies on cloud-hosted AI and generative AI services, preventing unauthorized shadow AI deployments.
AI Security & Data Privacy: Partner with security teams to ensure secure data pipelines, strict API rate-limiting, and egress/ingress protection via Fastly CDN and NFWAF for enterprise AI applications. Implement FinOps guardrails specifically tailored for high-cost AI/ML resource consumption.
3. DevOps, Automation & CI/CD Excellence
Standardize and govern Infrastructure-as-Code using Terraform and Terragrunt for modular, DRY multi-cloud deployments.
Optimization and management of CI/CD pipelines, driving adoption toward GitHub and GitHub Actions while managing legacy Jenkins maintenance.
Develop advanced automation scripts and custom orchestration tools using Python, Bash, and PowerShell.
Ability to support configuration management frameworks and server baseline standards using Ansible, alongside containerized runtime workloads using Docker and Kubernetes.
4. Technical Leadership & Engineering Support
Troubleshoot critical production issues, perform root cause analyses, and drive technical problem-solving across cross-functional engineering squads.
Conducting rigorous code and Pull Request (PR) reviews for Terraform configurations and CI/CD pipelines.
Build and maintain comprehensive internal knowledge bases, technical documentation, and reusable architecture decision records (ADRs).
Articulate technical risks, cost-capacity ratios, and strategic roadmaps clearly to audiences ra