Oracle Cloud Engineer(SC/ DV Cleared)

We run one of the largest Oracle Cloud shared services in UK government: HR, payroll and finance for around 25,000 people in the UK and overseas. Under the applications sits an OCI estate of production and non-production environments, and this role owns keeping that estate healthy, current, recoverable and affordable.

Builds are scripted, restores are rehearsed, patching runs to a clock, and there is a live piece of work to reduce the number of environments we pay for.

This role also carries the highest level of administrative access to the platform. Engineers here hold privileged administration as a named custodian duty: every action logged, every request checked, every shortcut declined. If you have been the person trusted with root in a serious environment, you know exactly what that involves.

RequirementsWhat You Will Actually Do

• Provision, refresh and decommission environments across SaaS, PaaS and IaaS as the service needs them
• Run production-to-test cloning and the post-clone work that follows, including data masking, so test environments are safe as well as useful
• Plan the environment estate around the quarterly Oracle release cycle and publish that plan so nobody is surprised
• Maintain existing Terraform and write new Terraform, so infrastructure gets built the same way every time
• Own backup and restore: full, incremental and snapshot, tested back to a consistent known-good state, not just assumed to work
• Own disaster recovery for the platform layers: replication to the recovery site, a recovery plan that is current, and at least one proper test of it a year
• Run the vulnerability management cycle with our scanning tooling, and remediate to fixed timescales, with critical fixes measured in days not months
• Apply monthly vendor patches and firmware updates across the estate
• Automate start-up, shutdown and routine operations, and keep an eye on capacity so problems are raised before users notice them
• Help redesign the environment estate to support a better development lifecycle at a lower cost
• Share the privileged administration custodian duty: fulfil the small number of access requests that only top-level administration can action, and put bulk access changes through the formal change process rather than on the side
• Operate the break-glass process that governs any vendor back-end access: named individuals, stated purpose, fixed time window, nothing open-ended
• Keep the access records straight: an accurate environments tracker, evidence for the monthly access audit, and maintained standard operating procedures for system administration

• Strong hands-on OCI experience: compute, storage, networking, IAM and compartment design, including firewall and routing configuration
• Terraform in production use, not just a lab
• Linux administration and comfortable scripting
• Real backup, restore and disaster recovery experience, including having actually run a recovery test
• Experience running vulnerability scanning and remediation cycles in a managed environment
• Familiarity with bastion or jump host access patterns and privileged access management tooling, because the custodian duty runs through them
• DV clearance

Useful but Not Essential

• Oracle database familiarity (ATP, ADW or DBCS)
• Exposure to Tenable and Splunk
• Data masking or test data management
• Experience supporting an Oracle SaaS or ERP estate from the platform side
• Government or other high-assurance environments

• Core support hours run 06:00 to 22:00, Monday to Friday, covered on a rota, plus an out-of-hours on-call rota for serious platform incidents.
• All work on the system happens from within the UK. Bulk data work, live environment changes and privileged administration are done from the office, and privileged access stays within core hours unless an exception is agreed in advance.