> Markdown version of [/jobs/ext/2208059-principal-platform-engineer-privileged-access-management](https://www.wearedevelopers.com/jobs/ext/2208059-principal-platform-engineer-privileged-access-management). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Principal Platform Engineer - Privileged Access Management - **Company:** gb Hackajob Ltd - **Location:** Yeovil, UK (Remote available) - **Salary:** £53,269.0 - £71,400.0 - **Contract:** Permanent contract - **Skills:** Microsoft Windows, Active Directory, Amazon Web Services, Systems Engineering, Microsoft Azure, Bash Shell, Computer Networks, Dynamic Host Configuration Protocol, Linux, Domain Name System (DNS), Hyper-V, Python (Programming Language), Public Key Infrastructure, Windows PowerShell, Ansible, Security Information and Event Management, TCP/IP, Virtualization Technology, Cyberark, DevOps Tools - Open-source, Firewalls (Computer Science), Containerization, Kubernetes, Api Design, Terraform, Docker, Vmware - **Published:** August 24, 2026 - **Apply:** https://www.totaljobs.com/job/principal-platform-engineer/hackajob-ltd-job107889210 ## About the Role * Extensive technical expertise across multiple platform domains, with a track record of delivering secure solutions. * The ability to balance hands-on engineering with technical leadership and mentorship. * A problem-solving mindset, able to innovate and recommend the best approach for complex challenges. Core areas (must have): * Windows and Linux operating systems * Virtualisation platforms (VMware, Hyper-V) * Privileged Access Management concepts and implementation (CyberArk or similar) * Secure credential storage, rotation, and access control models * Integration of PAM into enterprise platforms and services * Networking concepts (TCP/IP, DNS, DHCP, firewalls) * Automation and scripting (PowerShell, Bash, Python, Ansible, Terraform) * Knowledge of cyber security controls and accreditation requirements * Experience across the systems engineering lifecycle * Design and implementation of privileged access models across complex systems * Delivery within highly controlled / secure environments (e.g. air-gapped, defence) Desirable: * Expertise with cloud platforms (AWS, Azure) and Infrastructure as Code * Experience integrating enterprise services (Active Directory, PKI, monitoring, SIEM) * Hands-on use of DevSecOps tools and CI/CD pipelines * Automation of account onboarding/offboarding (API-driven) * Integration with SIEM / SOC tooling for audit and monitoring * Containerisation platforms (Kubernetes, Docker) * Experience working with enterprise identity and access management solutions ## Description Leonardo UK is seeking aPrincipal Platform Engineer to join the Cyber & Security Solutions Division team. This role is focused on delivering, maintaining, and improving platform and systems engineering solutions that underpin critical defence, government and public sector services. What you will do as a Principal Platform Engineer * Act as the technical authority on one of our platform engineering domains (e.g. virtualisation) providing specialist domain expertise to projects and programmes. * Lead the design and implementation of secure platforms across on-premise, hybrid, and cloud environments. * Capture, analyse, and interpret complex customer requirements to drive system design and architecture. * Develop high- and low-level designs, ensuring alignment with secure-by-design principles. * Take ownership of technical delivery within work packages, including planning, estimation, and progress reporting. * Mentor, coach, and develop junior and senior engineers, raising technical capability across the community. * Provide input to technology strategies, feasibility studies, and innovation projects. * Engage with internal and external stakeholders, presenting technical solutions and justifying design decisions. ## Related Videos - [Docker network without Docker](https://www.wearedevelopers.com/videos/1418-docker-network-without-docker) - [You can’t hack what you can’t see](https://www.wearedevelopers.com/videos/41-you-can-t-hack-what-you-can-t-see) - [WebAssembly: The Next Frontier of Cloud Computing](https://www.wearedevelopers.com/videos/972-webassembly-the-next-frontier-of-cloud-computing) - [Docker Compose: Rediscovered](https://www.wearedevelopers.com/videos/1978-docker-compose-rediscovered) - [Docker exec without Docker](https://www.wearedevelopers.com/videos/1094-docker-exec-without-docker) - [Docker build without Docker](https://www.wearedevelopers.com/videos/100114-docker-build-without-docker) ## Related Articles - [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking) - [Fully Remote Software Engineer Jobs](https://www.wearedevelopers.com/magazine/447-fully-remote-software-engineer-jobs) - [Find a Developer Job: 12 Best Job Sites For Developers](https://www.wearedevelopers.com/magazine/165-find-a-developer-job-12-best-job-sites-for-developers) - [Where To Find Software Engineering Jobs](https://www.wearedevelopers.com/magazine/396-where-to-find-software-engineering-jobs) - [The Best Job Search Websites of 2025](https://www.wearedevelopers.com/magazine/368-the-best-job-search-websites-of-2025) - [Why Upskilling And Reskilling is Important For Developers](https://www.wearedevelopers.com/magazine/428-why-upskilling-and-reskilling-is-important-for-developers)