Principal Platform Engineer (Privileged Access Management)

Principal Platform Engineer (Technical Specialist Path) at Leonardo UK leads design, integration, and delivery of secure platforms across on-premises, hybrid, and cloud environments. Acts as the technical authority for platform domains (e.g., virtualization), shaping designs that adhere to secure-by-design principles, and owning technical delivery within work packages. Responsibilities include capturing complex customer requirements, developing high- and low-level designs, mentoring engineers, contributing to technology strategies and feasibility studies, and presenting technical solutions to stakeholders. The role supports a blended hybrid working model with both home-based and on-site work at one of Leonardo’s UK offices to enable close collaboration with the wider team and customers. Core skills include Windows and Linux, virtualization (VMware/Hyper-V), PAM concepts and CyberArk implementations, secure credential storage and access control, integration of PAM into enterprise platforms, networking (TCP/IP, DNS, DHCP, firewalls), automation and scripting (PowerShell, Bash, Python, Ansible, Terraform), and experience delivering in highly controlled environments (defence/air-gapped). Desirable experience includes cloud platforms (AWS, Azure), IAM integrations (AD, PKI), CI/CD/DevSecOps tooling, SIEM, and containerization (Kubernetes, Docker). Security clearance (DV) and BPSS-derived vetting are noted prerequisites for the role’s deployment in sensitive environments; the position is based at a UK site in Yeovil with hybrid working options. Leonardo emphasizes an inclusive, supportive workplace with strong learning and benefits opportunities. Be part of something bigger and apply now. #LI-CYBER