Job Title: Oracle Cloud Engineer (SC/ DV Cleared)

Location: Milton Kynes

Position Type: Full-time

Experience Level: 5+ years

Clearance Required: SC/ DV Cleared

The Work

We run one of the largest Oracle Cloud shared services in UK government: HR, payroll and finance for around 25,000 people in the UK and overseas. Under the applications sits an OCI estate of production and non-production environments, and this role owns keeping that estate healthy, current, recoverable and affordable.

Builds are scripted, restores are rehearsed, patching runs to a clock, and there is a live piece of work to reduce the number of environments we pay for.

This role also carries the highest level of administrative access to the platform. Engineers here hold privileged administration as a named custodian duty: every action logged, every request checked, every shortcut declined. If you have been the person trusted with root in a serious environment, you know exactly what that involves.

Requirements

What You Will Actually Do

• Provision, refresh and decommission environments across SaaS, PaaS and IaaS as the service needs them
• Run production-to-test cloning and the post-clone work that follows, including data masking, so test environments are safe as well as useful
• Plan the environment estate around the quarterly Oracle release cycle and publish that plan so nobody is surprised
• Maintain existing Terraform and write new Terraform, so infrastructure gets built the same way every time
• Own backup and restore: full, incremental and snapshot, tested back to a consistent known-good state, not just assumed to work
• Own disaster recovery for the platform layers: replication to the recovery site, a recovery plan that is current, and at least one proper test of it a year
• Run the vulnerability management cycle with our scanning tooling, and remediate to fixed timescales, with critical fixes measured in days not months
• Apply monthly vendor patches and firmware updates across the estate
• Automate start-up, shutdown and routine operations, and keep an eye on capacity so problems are raised before users notice them
• Help redesign the environment estate to support a better development lifecycle at a lower cost
• Share the privileged administration custodian duty: fulfil the small number of access requests that only top-level administration can action, and put bulk access changes through the formal change process rather than on the side
• Operate the break-glass process that governs any vendor back-end access: named individuals, stated purpose, fixed time window, nothing open-ended
• Keep the access records straight: an accurate environments tracker, evidence for the monthly access audit, and maintained standard operating procedures for system administration