Principal Network Engineer

Principal Network Engineer – Leonardo, Bristol, United Kingdom

Leonardo is seeking a Principal Network Engineer (Technical Specialist Path) to join the Cyber & Security Solutions Division team. This role is based in Bristol with hybrid working options, combining home and site‑based collaboration.

Key Responsibilities

• Act as the technical authority across one or more networking domains (LAN/WAN, cloud, security, or SDN).
• Lead the design and implementation of secure networks across on‑premise, hybrid, and cloud environments.
• Capture and analyse complex requirements, shaping high‑ and low‑level network designs.
• Ensure secure‑by‑design principles are embedded across all network solutions.
• Own technical delivery within work packages, including planning, estimation, and reporting.
• Provide guidance, mentoring, and technical leadership to junior and senior network engineers.
• Support technology assessments, innovation projects, and roadmap development.
• Engage with customers, stakeholders, and vendors to define and defend technical solutions.

Qualifications

• Extensive technical expertise across multiple networking domains with proven delivery experience.
• Ability to balance hands‑on engineering with technical leadership and solution ownership.
• A problem‑solving mindset with the ability to innovate and recommend the best approaches for complex challenges.

Core Areas (Must Have)

• Deep understanding of networking protocols and technologies (BGP, OSPF, MPLS, VPNs, QoS, IPsec, MCLAG).
• Experience with Cisco (CCNP level) or equivalent multi‑vendor technologies (Dell, Palo Alto, Fortinet).
• Strong knowledge of firewalls, IDS/IPS, and network security principles.
• Experience designing and integrating networks within secure environments.
• Experience with cloud networking (AWS, Azure) and hybrid integration.
• Familiarity with network automation and scripting (Python, Ansible, Terraform).

Desirable

• Full CCNP or equivalent certification/experience (4‑7 years).
• Experience with software‑defined networking (SDN, SD‑WAN) and cloud‑native networking.
• Knowledge of DevSecOps pipelines and integration with security monitoring tools (SIEM, SOC platforms).
• Involvement in industry forums, technical publications, or best‑practice development.
• Experience with enterprise IT services (Active Directory, DNS, PKI, monitoring).

Security Clearance

This role is subject to pre‑employment screening in line with the UK Government’s Baseline Personnel Security Standard (BPSS). Additional personnel security controls such as National Security Vetting (NSV) may apply.

Location

The position can be based at one of our UK sites, Bristol, with hybrid/custom working options where appropriate.

Benefits

• Time to Recharge – generous leave with the opportunity to accrue up to 12 additional flexi‑days each year.
• Secure your Future – pension scheme with up to 15% employer contribution.
• Your Wellbeing Matters – free access to mental health support, financial advice and employee‑led networks championing inclusion and diversity.
• Rewarding Performance – bonus scheme for all employees at management level and below.
• Never Stop Learning – free access to 4,000+ online courses via Coursera and LinkedIn Learning.
• Refer a Friend – financial reward through our referral programme.
• Tailored Perks – spend up to £500 annually on flexible benefits including private healthcare, dental, family cover, tech & lifestyle discounts, gym memberships.
• Flexible working – flexible hours with hybrid working options. For part‑time opportunities, please discuss what might be possible for this role.

Contract Details

Permanent, Full‑time, Hybrid, Mid‑Senior level. Employment type: Full‑time. Job function: Other, Information Technology, and Engineering. Industries: Defense and Space Manufacturing, Aviation and Aerospace Component Manufacturing, and Computer and Network Security.