Systems Engineer III – Identity and Collaboration

at  Tesco

About the role
We require a senior systems engineer with extensive experience in similar roles within large-scale, complex, global organizations. Proficient in technology strategy and roadmap planning, technology engineering, technology lifecycle planning and delivery, product selection (including business case planning), and technical project delivery (from initial conception through to transition into production). Broader, complementary skills such as commercial awareness, being evangelistic, delivery-focused, secure by design mindset, and having strong operations and customer awareness complete the profile.
Specifically, we are looking for a candidate with in-depth, architectural / design level experience with Active Directory, Azure AD / Entra, PKI, M365 (full stack), file server, and data technologies.

You will be responsible for

• Represent Infrastructure/Systems Engineering across all of Tesco Technology and with suppliers
• Own and drive design of identity and collaboration technologies across multiple Infrastructure domains which enable the acceleration of new capability, making it easier for Tesco colleagues to consume technologies
• Own and shape the direction of significant areas of value.

You will need
Ideally 10 years in a mid-senior IT technical role, with real world demonstrable experience of technology delivery in the specific technology domain. In Tesco, this would mean 3-4 successful years in a Systems Engineer II role having consistently demonstrated the core capabilities of a Systems Engineer III.
System Engineering Skills

Design

• Own and drive the architectural strategy and roadmap for technical domain.
• Drive the implementation of solutions that introduce new technologies into Tesco in line with our technology strategy and principles.
• Support the standards and guidance for new technologies.
• Influence product roadmaps for the technology area.
• Contribute to commercial arrangements when dealing with technology vendors.
• Ensure that solutions improve the security baseline of the collaboration offerings.
• Work with infrastructure Architects, Product Managers, and third-party consultants to ensure alignment of the solution and product strategy.
• Full project lifecycle, ability to drive a solution through from conception to operational handover.

Operations

• Keep my technical skills up to date and keep track of new technologies.
• Design with automation in mind, solutions that will minimize the amount of hands-on activity needed to fix issues.
• Define, analyse, plan, forecast, measure, maintain and improve all aspects of the availability of services.
• Manage changes to services and how to request changes in response to incidents or problems to mitigate the impact of service unavailability.
• Explore, analyse and identify the opportunity for business and service improvement.
• Coordinate the response of incident report, with clear post-incident root cause analysis documentation.
• Address escalations from SEI engineers and assist with the resolution of complex problems.
• Awareness or knowledge of emerging technologies outside your specialism.
• Aware of all high impact changes and projects in Infrastructure Services and take proactive measures to ensure the stability of service.
• A liaison between customers, operations and engineering teams.
• With a good understanding of translating the maintenance cost of any services in engineering, analyse, explore and identify opportunities to reduce the maintenance cost of services.

Leadership & Potentials

Complementary Skills

• Collaborate with a wider area or teams to drive overall enterprise design.
• Demonstrate leadership qualities by coaching and mentor others to achieve team objectives
• Raise the bar of your business unit.
• Introduce new tools and methodologies when appropriate to simplify or increase the efficiency of development.
• Understand when new tools may not be appropriate.
• Introduce new technologies into Tesco, as a product evangelist.
• Adaptive to changes in technology or support scope.
• Prepare and maintain technical documents & presentations for systems engineering and system operations.
• Proficient in spoken and written English and comfortable communicating to leaders and engineers.
• Experience in designing and driving service improvement or projects that are large and complex.

Drive

• Drive to succeed and deliver, and to see beyond the formal boundaries of your role.
• Willing to challenge others as well as yourself and taking appropriate risks.
• Ability to bounce back and adapt to setbacks.

Judgment

• Anticipating and identifying issues and opportunities quickly and responding with agility to changes.
• Identify criticality of issues, and understanding the business impact, and liaising with the right teams to resolve the issues
• Using a bigger picture perspective to approach issues and make a decision with an open-mind

Influence

• Be effective by showing humility, using challenge, and feedback to improve
• Effectively navigating based on insight into the dynamics of the organization and the people around you.
• Able to impact and motivate, as well as to adapt your approach to connecting with, respond to, and persuade others.

Technology Understanding

• At least five years’ experience designing and implementing complex identity and workplace collaboration solutions at scale.
• Domain Admin experience at a large complex global enterprise.
• Expert level knowledge of Active Directory importantly including Azure/Entra AD.
• Expert level knowledge of PKI and certificate services.
• Solid architectural understanding of file services including technologies such as DFS and cloud based storage technologies.
• Deep understanding of file server / data technologies, on prem / cloud.
• Deep understanding of file server / data related technologies, data security, data archiving, data retention, data compliance and data backup restore / recovery.
• Exposure to VMWare and Azure virtual platform technologies.
• General awareness of digital/modern workplace technologies.
• M365 product stack and its associated productivity tools.
• Microsoft management tools and licencing models.
• A deep understanding of Federation Services, Single Sign On (SSO) and Multi-Factor Authentication (MFA).
• Excellent understanding of Active Directory and related infrastructure components such as DNS, Group Policies, LDAPs, Kerberos Authentication.
• Technical understanding of Microsoft Server based Operating Systems 2016, 2019 and 2022.
• Strong knowledge of Windows security and auditing and up to date knowledge of Microsoft best practice around security practices and technologies.
• PowerShell scripting and automation skills to an advanced level focused on automation in the Windows Infrastructure / Platform space.
• A good understanding of networking and firewall concepts.
• Experience with Active Directory backup/restore solutions (DR, TLR, BCP).
• Critical and strategic mindset, able to articulate a technology vision and underpinning roadmap.

Finance & Commercials

• Understand and initiate proof of concepts and pilot activity.
• Ability to support business cases by evaluating suitable products for their technology and commercial impact on Tesco and assist the business team in making the right decision.
• Understand how budgeting and procurement process works in Tesco and can effectively apply the knowledge in planning and influencing product roadmaps.
• Ability to structure and present a technology business case / proposal.

About us
Our vision at Tesco is to become every customer’s favourite way to shop, whether they are at home or out on the move. Our core purpose is ‘Serving our customers, communities and planet a little better every day’. Serving means more than a transactional relationship with our customers. It means acting as a responsible and sustainable business for all stakeholders, for the communities we are part of and for the planet.
We are proud to have an inclusive culture at Tesco where everyone truly feels able to be themselves. At Tesco, we not only celebrate diversity, but recognise the value and opportunity it brings. We’re committed to creating a workplace where differences are valued, and make sure that all colleagues are given the same opportunities. We’re proud to have been accredited Disability Confident Leader and we’re committed to providing a fully inclusive and accessible recruitment process. For further information on the accessibility support we can offer, please click here.
We’re a big business and we can offer a range of diverse full-time & part-time working patterns across our many business areas, which means that we can find something that works for you. We work in a more blended pattern -combining office and remote working. Our offices will continue to be where we connect, collaborate and innovate.
What’s in it for you

We’re all about the little helps. That’s why we give our wonderful colleagues bags of benefits. Including wellbeing services, an award-winning pension scheme and much, much more, our colleague reward package keeps on giving. And helps make every day a little better for you and your family. These include but are not limited to:

• Annual bonus scheme of up to 20% of base salary
• Holiday starting at 25 days plus a personal day (plus Bank holidays)
• Buy holiday salary sacrifice scheme (for salaried roles)
• Private medical insurance
• Retirement savings plan - save between 4% and 7.5% and Tesco will match your contribution
• Life Assurance - 5 x contractual pay
• 26 weeks maternity and adoption leave (after 1 years’ service) at full pay, followed by 13 weeks of Statutory Maternity Pay or Statutory Adoption Pay, we also offer 4 weeks fully paid paternity leave
• The right to request flexible working from your first day with us
• Free 24/7 virtual GP service, Employee Assistance Programme (EAP) for you and your family, free access to a range of experts to support your mental wellbeing
• A Colleague Clubcard for you & a family member (after 3 months of service), giving you access to lots of discounts in-store & online
• Great colleague deals and discounts, saving you money on everyday purchases, eating out and utility bills for the home
• Access to our colleague networks providing a space for colleagues to come together from a range of backgrounds. For more information about our colleague networks please click here
• Opportunities to get on - take advantage of our ongoing learning opportunities and award-winning training, to help you achieve the job and career you want

Click Here to read more about the full range of benefits we have available for our colleague

• Represent Infrastructure/Systems Engineering across all of Tesco Technology and with suppliers
• Own and drive design of identity and collaboration technologies across multiple Infrastructure domains which enable the acceleration of new capability, making it easier for Tesco colleagues to consume technologies
• Own and shape the direction of significant areas of value