Systems Engineer III

About the role

This role sits within the workplace Operations team which is part of the Tesco Infrastructure Service & Operations team, part of a global function delivering secure, scalable, and modern workplace solutions for Tesco colleagues. As a senior engineer and domain expert in workplace technologies, you will be part of the full technology lifecycle — from collaborating with Engineering team, and delivery — for the services that underpin our digital colleague experience.

You will be responsible for

Strategic Leadership

Objective: Strengthen existing workplace services, remove legacy risks, and establish governance.

• Inventory & Assessment – Document all workplace assets (devices, applications, collaboration tools, telephony, on-prem services).
• Baseline Security & Compliance – Apply CIS benchmarks, patch management, MFA enforcement, encryption, and endpoint protection.
• Standardized Device Builds – Golden images, standard apps, driver management, automated patching.
• Active Directory Hygiene – Cleanup of stale objects, GPO rationalization, tiered admin model, PKI/Certificate services optimization.
• Monitoring & Service Metrics – Establish SLAs, incident trend analysis, and digital experience monitoring.

Service Delivery

• Design and deliver secure, scalable platforms that support global business needs and enable modern digital workplace capabilities.
• Automate solutions across the end user devices lifecycle: concept, evaluation, prototyping, testing, production deployment, and management.
• Act as a senior escalation point for complex issues related to authentication, replication, certificate lifecycle, hybrid identity, and directory services.

Operational Excellence

Objective: manage cloud and hybrid models while maintaining on-prem dependencies.

• Azure AD Hybrid Integration – Enable SSO, Conditional Access, and secure federation with on-prem AD.
• Cloud Mail & Collaboration – Migrate to Exchange Online and manage MS Teams, MTR room, OneDrive, SharePoint Online.
• Unified Endpoint Management (UEM) – Manage MECM to Intune
• VDI/Cloud Desktops – Evaluate virtual workloads and ensure performance
• Automation & Self-Service – PowerShell/Graph API automation, end-user self-service portals for password reset, app installs.
• Proficiency with scripting and automation tools (PowerShell, Terraform, etc.).
• Contribute to and maintain Business Continuity Plans (BCPs), ensuring critical identity components are documented with clear recovery priorities.
• Drive Disaster Recovery (DR) execution for directory services, authentication systems, and PKI, with regular failover testing and documented RTO/RPO.
• Define and verify backup and recovery plans for workplace infrastructure, including domain controllers, VDIs, certificate authorities, and configuration artifacts.
• Partner with Workplace Technology leadership to shape and manage budgets, forecasts, and business cases for new initiatives.

Governance & Security

• Drive adoption of Zero Trust principles, secure admin tiering, modern auth standards, conditional access, and multifactor authentication.
• Own the health, design, and policy of PKI infrastructure and associated directory services (including certificate templates, CRLs, and HSMs).
• Work closely with the Security and Risk teams to ensure compliance with internal controls, regulatory obligations, and audit findings.

Leadership & Influence

• Represent Workplace Operations across Tesco Technology and into broader cross-functional initiatives.
• Lead by example in Operational excellence, stakeholder engagement, and mentoring of less experienced engineers.
• Promote a culture of simplification, technical rigour, and continuous improvement.

Complementary Skills

• Strong collaboration and influencing skills across engineering, operations, product, and security domains.
• Commercial and vendor awareness to support technology selection, licensing decisions, and cost optimisation.
• Strong written and verbal communication skills, with the ability to engage both engineers and senior stakeholders.
• A proactive, accountable, and resilient mindset — aligned to Tesco's values and the mission of the Workplace Technology team.

You will need

Refer: You will be responsible for

Whats in it for you?

At Tesco, we are committed to providing the best for you.

As a result, our colleagues enjoy a unique, differentiated, market- competitive reward package, based on the current industry practices, for all the work they put into serving our customers, communities and planet a little better every day.

Our Tesco Rewards framework consists of pillars - Fixed Pay, Incentives, and Benefits.

Total Rewards offered at Tesco is determined by four principles -simple, fair, competitive, and sustainable.

Salary - Your fixed pay is the guaranteed pay as per your contract of employment.

Leave & Time-off - Colleagues are entitled to 30 days of leave (18 days of Earned Leave, 12 days of Casual/Sick Leave) and 10 national and festival holidays, as per the company's policy.

Making Retirement Tension-FreeSalary - In addition to Statutory retirement beneets, Tesco enables colleagues to participate in voluntary programmes like NPS and VPF.

Health is Wealth - Tesco promotes programmes that support a culture of health and wellness including insurance for colleagues and their family. Our medical insurance provides coverage for dependents including parents or in-laws.

Mental Wellbeing - We offer mental health support through self-help tools, community groups, ally networks, face-to-face counselling, and more for both colleagues and dependents.

Financial Wellbeing - Through our financial literacy partner, we offer one-to-one financial coaching at discounted rates, as well as salary advances on earned wages upon request.

Save As You Earn (SAYE) - Our SAYE programme allows colleagues to transition from being employees to Tesco shareholders through a structured 3-year savings plan.

Physical Wellbeing - Our green campus promotes physical wellbeing with facilities that include a cricket pitch, football field, badminton and volleyball courts, along with indoor games, encouraging a healthier lifestyle.

About Us

Tesco in Bengaluru is a multi-disciplinary team serving our customers, communities, and planet a little better every day across markets. Our goal is to create a sustainable competitive advantage for Tesco by standardising processes, delivering cost savings, enabling agility through technological solutions, and empowering our colleagues to do even more for our customers. With cross-functional expertise, a wide network of teams, and strong governance, we reduce complexity, thereby offering high-quality services for our customers.

Tesco in Bengaluru, established in 2004 to enable standardisation and build centralised capabilities and competencies, makes the experience better for our millions of customers worldwide and simpler for over 3,30,000 colleagues

Tesco Technology

Today, our Technology team consists of over 5,000 experts spread across the UK, Poland, Hungary, the Czech Republic, and India. In India, our Technology division includes teams dedicated to Engineering, Product, Programme, Service Desk and Operations, Systems Engineering, Security & Capability, Data Science, and other roles.

At Tesco, our retail platform comprises a wide array of capabilities, value propositions, and products, essential for crafting exceptional retail experiences for our customers and colleagues across all channels and markets. This platform encompasses all aspects of our operations – from identifying and authenticating customers, managing products, pricing, promoting, enabling customers to discover products, facilitating payment, and ensuring delivery. By developing a comprehensive Retail Platform, we ensure that as customer touchpoints and devices evolve, we can consistently deliver seamless experiences. This adaptability allows us to respond flexibly without the need to overhaul our technology, thanks to the creation of capabilities we have built.