Network Principal Lead Engineer (Network Security & Cloud Infrastructure)

We are seeking a visionary and highly technical Network Principal to lead the strategic design, evolution, and governance of customer network infrastructure. This role defines the blueprint for our Network Engineers, who focus on implementation and operations. You will bridge the gap between business strategy and technical execution, architecting scalable, automated, and secure network solutions across LAN, WAN (including SD-WAN), cloud (AWS/Azure), and data centre environments.

You will drive the adoption of Network DevOps and Infrastructure as Code principles at an architectural level, partnering with our MSP, ensuring our network is not just stable, but programmable and resilient. This role requires a deep understanding of both traditional networking and modern automation paradigms, mentoring engineering teams, and providing technical direction to senior management.

Key Responsibilities

• Own the end-to-end network security architecture, ensuring robust protection across on-premises, cloud, and hybrid environments.
• Design, document, and govern secure network segmentation strategies, including Zero Trust models, next-generation firewall frameworks, and secure connectivity solutions such as Direct Connect and Transit Gateway currently delivered by ZScaler.
• Develop and maintain a comprehensive 12–24 month technology roadmap for network security, prioritising automation, orchestration, and integration with the client's Digital Strategic ecosystem to enhance operational efficiency and resilience.
• Define, publish, and enforce enterprise-wide network security standards, conducting regular architectural reviews to ensure alignment with business objectives, regulatory requirements, and industry best practices.
• Serve as the highest escalation point for complex network security incidents, analysing network packet captures and logs to design and implement permanent solutions that address root causes and strengthen the overall security posture.
• Continuously research emerging network security threats, vulnerabilities, and industry trends, recommending architectural innovations to proactively address evolving risks.
• Design and review cloud security architectures, collaborating with cloud teams to ensure secure integration and governance across public, private, and hybrid cloud platforms.
• Provide technical mentorship and guidance to engineering and operations teams, promoting professional growth, knowledge sharing, and adherence to customer’s network security vision and standards.

Skills and Experience

• 8+ years of experience in network engineering, with at least 3+ years in a dedicated Network Principal or Lead role designing global, enterprise-scale networks.
• Proven ability to see the 'big picture' and design holistic solutions that balance performance, security, cost, and automation.
• Expert-Level Technical Knowledge: Deep expertise in routing and switching protocols (BGP, OSPF, VXLAN, MPLS) and network fundamentals (TCP/IP, UDP, DNS, DHCP).
• Advanced knowledge of enterprise network stacks: Cisco (routers/switches/WiFi), Firewalls, load balancers (F5/others), and SD-WAN technologies.
• Strong understanding of Cloud Networking in AWS/Azure (VPCs, Transit Gateway, PrivateLink, Direct Connect, Security Groups, NAT, Cloud WAN).
• Mastery of network monitoring, observability, and IPAM tools at scale.