Job Description

Tesco UK o Welwyn Garden City o Full-Time o Apply by 30-Nov-2025
About the role
The Infrastructure Engineering team is responsible for designing, developing, implementing, and operating all infrastructure used by Tesco Technology across data centres, offices, stores, and distribution centres. This includes multiple domains such as private and public cloud, connectivity, end-user computing, CI/CD, and monitoring tools. The team manages both third-party and internally developed infrastructure applications that support the broader Tesco business.


As part of wider Infrastructure Team, Network Services Team design, develop, implement, and operate Network and Security infrastructure technologies that facilitate both Infrastructure and the rest of Tesco Technology


Key activities include:


Design, develop, implement, and operate large-scale, high-capacity, and highly resilient infrastructure solutions that enable Infrastructure, technology development teams, and business colleagues to utilise Network Security Services. Set the strategy, objectives, and high-level plans for Networks Infrastructure to meet the requirements of Tesco Technology and the business. Define and continually oversee standards and simplification across the entire Network Services portfolio. Drive innovation through transformation and continual service improvement. Evaluate partners, software, and hardware to find the right mix for delivering the Technology and business strategy. Design, develop, implement, and operate Networks solutions using modern automation technologies, such as self-service APIs, to ensure controlled, auditable, and repeatable consumption of Networks and Infrastructure, with seamless failure handling.

Design, deliver, implement, and operate new and reusable infrastructure solutions that meet technological, financial, and business requirements. Collaborate with and advise development teams to create suitable infrastructure solutions that support their needs and the business requirements.


What is in it for you
We're all about the little helps. That's why we make sure our Tesco colleague benefits package takes care of you - both in and out of work.

Annual bonus scheme of up to 20% of base salary Holiday starting at 25 days plus a personal day (plus Bank holidays) Private medical insurance 26 weeks maternity and adoption leave (after 1 years' service) at full pay, followed by 13 weeks of Statutory Maternity Pay or Statutory Adoption Pay, we also offer 4 weeks fully paid paternity leave Free 24/7 virtual GP service, Employee Assistance Programme (EAP) for you and your family, free access to a range of experts to support your mental wellbeing You will be responsible for

The Role - Lead Engineer - Network Security Services

As a Lead Engineer - Network Security Services, you will be the technical authority for designing and delivering secure, automated, and scalable network infrastructure solutions. You'll shape the roadmap, drive innovation, and ensure our network security services are productised, consumable, and aligned with Tesco's technology and business strategy.


You'll work closely with architecture, product, and engineering teams to deliver infrastructure as a product--focusing on reusability, automation, and developer experience.

Define and evolve network security infrastructure as a product--ensuring it is scalable, secure, and easy to consume by internal teams. Lead the design and implementation of modern, automated network security solutions using APIs and infrastructure-as-code. Shape the infrastructure roadmap in collaboration with Architecture and Product teams, aligning with Tesco's business goals. Drive transformation through automation, self-service, and continuous improvement. Partner with software engineers and platform teams to ensure seamless integration and adoption of network services. Coach and mentor engineers, ensuring high-quality designs and fostering a culture of technical excellence. Provide technical leadership if needed in incident analysis, driving design improvements to enhance resilience, reliability, and long-term stability

This role will best suit an individual who brings a product mindset focused on delivering scalable, reusable, and user-friendly infrastructure services, deep technical expertise in network security, cloud networking (especially Azure), and automation. Strong collaboration and communication skills to influence across engineering, architecture, and product teams. A passion for continuous learning, innovation, and mentoring others.



You will need

Skills / Experience Required

Strong collaboration skills for working with cross-functional teams. Excellent communication skills to explain network security concepts to non-technical stakeholders. Commitment to staying current with the latest security trends, technologies, and threats. Analytical and structured approach to design, processes, and advanced troubleshooting. Ability to understand Tesco Technology and business strategies and translate them into technology roadmaps and innovative solutions. Proficient in producing and maintaining high-quality HLD/LLD and standards documentation. Well-organised self-starter who takes personal ownership and accountability throughout the work stream and project life cycles, always willing to go the extra mile. Builds and maintains positive relationships within and across teams. Provides technical leadership within teams and mentors individuals. Communicates effectively, delivering and presenting designs, strategies, and concepts clearly to both senior and junior staff. Takes ownership of staying up to date with the latest industry technologies, approaches, and standards, such as Zero Trust.

Technology Skills

Proven track record in designing and operating secure, scalable network infrastructure across hybrid and cloud environments (especially Azure). Strong expertise in firewalls, IDS/IPS, VPNs, and cloud-native security tools (e.g., Azure Firewall, NSGs). Hands-on experience with automation and IaC using Terraform, Ansible, and Python. Deep understanding of container networking in Kubernetes, including CNI plugins, Ingress, service mesh and network policies. Familiar with CI/CD integration, DevOps practices, and secure infrastructure delivery via Azure DevOps or GitHub Actions. Skilled in traffic management (F5, Akamai, Azure Load Balancer) and network observability tools. Strong documentation, troubleshooting, and cross-team collaboration skills.

Desirable Technology

Experience with NAC, CDN, WAF, SSL/TLS, and web performance optimisation. Knowledge of compliance frameworks (CIS, NIST) and wireless security protocols. Hands-on experience with network observability tools and protocols (SNMP, Netflow, IPSLA).



About us
Our vision at Tesco is to become every customer's favourite way to shop, whether they are at home or out on the move. Our core purpose is 'Serving our customers, communities and planet a little better every day'. Serving means more than a transactional relationship with our customers. It means acting as a responsible and sustainable business for all stakeholders, for the communities we are part of and for the planet.

We are proud to have an inclusive culture at Tesco where everyone truly feels able to be themselves. At Tesco, we not only celebrate diversity, but recognise the value and opportunity it brings. We're committed to creating a workplace where differences are valued, and make sure that all colleagues are given the same opportunities. We're proud to have been accredited Disability Confident Leader and we're committed to providing a fully inclusive and accessible recruitment process.

We're a big business and we can offer a range of diverse full-time & part-time working patterns across our many business areas, which means that we can find something that works for you. We work in a more blended pattern - combining office and remote working. Our offices will continue to be where we connect, collaborate and innovate. If you are applying internally, please speak to the Hiring Manager about how this can work for you - Everyone is welcome at Tesco.