Required Skills & Experience

- Deep expertise in at least one, and experience with all:
- Active Directory: design, hardening, replication, domain controller lifecycle, GPOs, admin tiering.
- Azure AD / Entra ID: hybrid identity, conditional access, MFA, identity protection, SSO, SCIM.
- Public Key Infrastructure (PKI): policy, lifecycle, templates, automation, CRL/OCSP, HSMs.
- Authentication protocols: OAuth2, OpenID Connect, SAML, Kerberos, NTLM, WS-Fed.

- Demonstrated ability to significantly contribute to design and delivery of identity platforms in large, complex environments.
- Understanding of identity’s role in enterprise security frameworks and compliance requirements.
- Proficiency with scripting and automation tools (PowerShell, Terraform, etc.).
- Familiar with monitoring, backup, recovery, and DR practices for identity systems.
- Ensure identity services are designed with built-in resilience, supporting high availability, fault tolerance, and fast recovery across hybrid environments.
- Contribute to Business Continuity Plans (BCPs), ensuring critical identity components are documented with clear recovery priorities.
- Contribute to design and validation of Disaster Recovery (DR) strategies for directory services, authentication systems, and PKI, with regular failover testing and documented RTO/RPO.
- Contribute to defining,



and verify backup and recovery plans for identity infrastructure, including domain controllers, certificate authorities, and configuration artifacts.
- Estimate engineering effort and support the costing of identity-related projects, including resource planning, licensing, infrastructure, and delivery timelines.
- Partner with senior colleagues to help shaping and managing budgets, forecasts, and business cases for new identity initiatives.

Nice to Have

- Experience integrating identity across Linux, SaaS, and multi-cloud platforms.
- Understanding of M365, Microsoft ecosystem, and their dependency on robust identity infrastructure.
- Exposure to identity governance, entitlement management, and lifecycle workflows.

Complementary Skills

- Robust collaboration skills across engineering, operations and security domains.
- Experience with collaboration with product teams.
- Commercial and vendor awareness to support technology selection, licensing decisions, and cost optimisation.
- Strong written and verbal communication skills, with the ability to engage both engineers and senior stakeholders.
- A proactive, accountable, influential and resilient mindset — aligned to Tesco’s values and the mission of the Workplace Technology team.

📌 Systems Engineer II (Bengaluru)
🏢 Tesco
📍 Bengaluru