Hiring: Principal Cloud Platform Engineer (Permanent)

Exceptions above the standard range are managed through governance controls to protect internal equity. \n Your Impact \n Are you ready to take on complex technical challenges at the forefront of cyber and platform engineering? At Leonardo, our Principal Platform Engineers are hands-on experts who shape the design, integration, and delivery of secure platforms that keep our customers' missions running. \n Your work at Leonardo UK will see you take the lead in solving customer problems in an agile, innovative and team-centric manner. The role may involve a blended hybrid working model, with a mixture of working from home and working on site at one of our Leonardo offices to ensure close collaboration with the wider team and with our customers. \n Leonardo UK is seeking a Principal Platform Engineerto join the Cyber & Security Solutions Division team. This role is focused on delivering, maintaining, and improving platform and systems engineering solutions that underpin critical defence, government and public sector services. What you will do as a Principal Platform Engineer \n \n \n Act as the technical authority on one or more platform engineering domains (e.g. cloud, virtualisation, automation, networking, or cyber tooling) providing specialist domain expertise to projects and programmes. \n \n Lead the design and implementation of secure platforms across on-premise, hybrid, and cloud environments. \n \n Mentor, coach, and develop junior and senior engineers, raising technical capability across the community. \n \n Provide input to technology strategies, feasibility studies, and innovation projects. \n \n The ability to balance hands-on engineering with technical leadership and mentorship. \n Core areas (must have): \n \n \n Windows and Linux operating systems \n \n Virtualisation platforms (VMware, Hyper-V) \n \n Cross-domain solutions: design and implementation of data transfer between security domains (e.g. high-to-low, restricted-to-enterprise) \n \n Secure data handling and policy enforcement (sanitisation, validation, filtering) \n \n Implementation of controlled and auditable data transfer mechanisms \n \n Networking concepts (TCP/IP, DNS, DHCP, firewalls) \n \n Automation and scripting (PowerShell, Bash, Python, Ansible, Terraform) \n \n Knowledge of cyber security controls and accreditation requirements \n \n Experience across the systems engineering lifecycle \n \n Design and assurance of secure data flows across trust boundaries \n \n Delivery within highly controlled / secure environments (e.g. cross-domain, air-gapped, defence) \n Desirable: \n \n \n Experience with cross-domain / secure transfer solutions (e.g. Opswat or similar) \n \n Data diode / one-way transfer architectures \n \n Integration with security tooling (SOC, SIEM, monitoring platforms) \n \n Performance and throughput optimisation for secure data transfer systems \n \n Expertise with cloud platforms (AWS, Azure) and Infrastructure as Code \n \n Hands-on use of DevSecOps tools and CI/CD pipelines \n \n Containerisation platforms (Kubernetes, Docker) \n Security Clearance \n This role is subject to pre-employment screening in line with the UK Government's Baseline Personnel Security Standard (BPSS). We offer a comprehensive, company-funded benefits package that supports your wellbeing, career development, and work-life balance. \Award-winning pension scheme with up to 15% employer contribution. \