Infrastructure Engineer

About Us: We are Ocado Technology and we empower global grocery retailers with cutting-edge cloud, robotics, AI, and IoT. Our Ocado Smart Platform (OSP) powers highly automated Customer Fulfilment Centres (CFCs), enabling efficient, single-pick online grocery delivery. Of course, achieving this is no mean feat, and whilst we have ambitious strategies to grow our business, we need to match this in our capabilities to ensure the ongoing security of our sensitive data, our people, our customers, and our assets. That’s where Ocado’s innovative Information Security team comes into play…

About the role: This role forms part of the team that underpins Ocado Technology's technical focus, driving technical excellence and being a key contributor to your team and department’s delivery. In this role, you will be a go-to person in your team, with deep expertise, strong problem solving and knowledge sharing. You’ll be working with others to find great solutions and taking an active role in technical decision making across your team and department.

Day-to-day, you’ll need to:

• Contribute significantly to setting technical direction
• Develop other engineers around you into more capable and experienced people
• Provide mentorship and coaching for others across your department on technical craft
• Apply good strategic judgement in supporting architectural decision making
• Be responsible for your personal delivery towards team goals
• Collaborate with the Product Team to understand the customer needs well and find ways to meet them within the given technical constraints
• Act as the go-to person for your specialism or domain, within your department
• Manage upwards effectively, ensuring Team Leader / Product Manager or Engineering Manager are informed of progress, celebrate team successes and make key risks visible
• Actively build good relationships and trust between the team and other stakeholders, embedding a ‘one Ocado’ approach
• Actively support recruitment through technical interviewing or other activities (e.g. external PR & events)
• Actively promote new ideas in the infrastructure and automation space
• Provide technical mentoring of more Junior Engineers
• Design for Future
• Make consistently good decisions on design, taking into account the business, technical and economic context
• Support other teams to find ways to solve their problems
• Guide design activities and communicate outcomes effectively
• Apply breadth or depth of experience to prepare your department for future endeavours
• Look for multiple ways to solve problems and communicate effectively the benefits and drawbacks of each
• Demonstrate a sound understanding of the technology that your team are working on & are able to act as a proxy for other stakeholders, where technical expertise is needed
• Create tools and processes that help to reduce repetitive tasks
• Understand and assess when automation and programmatic techniques should be utilised to solve a problem
• Where appropriate, embrace low-code approaches to solving business challenges and needs
• Actively contribute to the delivery of value with appropriate timeliness and quality
• Participate in the full delivery lifecycle, from technical discovery to value validation, mentoring others at each stage
• Actively look for incremental ways to enhance value
• Help build clarity in the area about the technical strategy and support its implementation
• Help the team resolve difficult engineering problems through effective collaboration and guidance
• Measurably reduce waste in the ways of working within your department
• Identify which data is important to measure about your Product implementation. Extract, gather and present this data effectively to support future design, delivery and operation
• Able to deliver positive change, that solves today’s problems in a maintainable and scalable manner
• Execute with Quality
• Pursue technical excellence with the economic constraints taken into account, with appropriate quality and security in mind
• Ensure that your department’s practices are informed by industry best practice
• Identify and mitigate risks to delivery, including consistent application of high quality testing
• Champion security awareness across your department
• Implement or direct security related work at the team level as appropriate
• Make sure your Product’s implementation can be diagnostically analysed, where practical, building in observability, in order to resolve faults and be maintainable
• Embrace and extend IaC capabilities
• Document designs, changes and infrastructure
• Support Deliver solutions to ongoing support queries
• Provide 3rd line Product support with a high level of autonomy in critical situations
• Reduce manual support through process and/or Product improvement
• Participate in out of hours support rota
• Be a point of escalation for junior members of the team and wider department
• Support the wider team and business during incidents and outages

This role may be required to perform tasks as required by management deemed as a reasonable request. This role description is a summary of the typical functions of the role, not an exhaustive or comprehensive list of possible role responsibilities, tasks and duties.

About you: You’ll bring extensive experience in administering, automating, and troubleshooting across modern infrastructure platforms, including:

• Microsoft Environments: Deep knowledge of Entra ID, Windows Server, Active Directory, and Microsoft Azure services (VMs, container instances, Function Apps, VWAN, Azure Firewall, Automation Accounts).
• Scripting & Automation: Proven expertise in PowerShell for system automation (e.g., JML processes), data handling, and admin tasks. Experience with Python and scripting against REST APIs is also essential.
• DevOps Tools: Comfortable working with Azure DevOps, GitLab, or similar CI/CD platforms.
• Infrastructure as Code: Practical experience with Terraform and cloud provisioning.

Bonus Skills That Set You Apart: We’d love it if you also have exposure to:

• Virtualisation & OS: VMware vCenter, intermediate Linux, and basic MSSQL knowledge.
• Modern IT Environments: Experience with Zero Trust security models, Google Workspace, Citrix, and thin/edge client management (Wyse/IGEL/Intune).
• Network & Security Foundations: Strong troubleshooting skills in TCP/IP networking, plus hands-on with DNS, DHCP, PKI in large-scale or production environments.

What we offer you: Our employee benefits are designed for you, we care about people and we’ve ensured we have a wealth of benefits that focus on your well-being. We regularly review our benefits to ensure we are supporting our employees appropriately. Currently, we offer technically stretching work, a competitive salary and hybrid working patterns meaning part of the working week can be spent working remotely (typically 3 days per week). However, your working pattern will depend upon your role/team. Wellbeing support through Apps such as Unmind and an Employee Assistance Programme. 25 days annual leave, rising to 27 days after 5 years service (plus optional holiday purchase). Pension scheme (various options available including employer contribution matching up to 7%). Private Medical Insurance. 22 weeks paid maternity leave and 6 weeks paid paternity leave (once relevant service requirements complete). Train Ticket loan (interest-free). Cycle to Work Scheme. Free shuttle bus to and from Hatfield Train Station to the Hatfield offices. Free shuttle bus to and from Welwyn Garden City Train Station to the Welwyn Garden City offices. Opportunity to participate in Sharesave and Buy as You Earn share schemes. 15% discount on Ocado.com and free delivery for all employees. Income Protection (can be up to 50% of salary for 3 years) and Life Assurance (3 x annual salary).