Principal Platform Engineer

Overview

In this role you will be the SME for Windows-based enterprise infra on a critical MOD site, driving design, deployment and ongoing support of high-security systems. You will work closely with cross-functional teams to resolve complex issues, implement secure Windows environments, and uphold governance and compliance. You’ll leverage monitoring and documentation to sustain high availability and enable security-focused IT services. This on-site, DV-cleared position offers impactful work within defence and aerospace operations and a clear path to influence infrastructure design and security.

Pay / Benefits

• generous leave with up to 12 flexi-days
• award-winning pension scheme with up to 15% employer contribution
• mental health support and financial advice
• bonus scheme
• free access to 4,000+ online courses
• referral programme financial reward

Responsibilities

• Own complex technical issues from detection to resolution with cross-team collaboration
• Provide expert troubleshooting for escalated incidents to minimize service disruption
• Deploy and harden secure Windows Server environments (AD, GPO, DNS, DHCP) following best practices
• Implement and maintain infrastructure security measures including patching and access controls
• Use monitoring tools to optimize performance and ensure high availability
• Create and maintain technical documentation and share knowledge
• Participate in IT projects ensuring alignment with technical and business objectives
• Collaborate with network, security, and application teams to deliver reliable IT services

Key requirements

• Experience with high-security MOD systems and secure design principles
• Proficiency with Ivanti Application & Device Control or similar lockdown tools
• Familiarity with RMADS, SyOPs, NIST frameworks

• collaboration
• problem-solving
• communication
• Windows Server 2019/2022/2025
• Active Directory, Group Policy, DNS, DHCP
• Exchange Server 2019, SQL Server, SharePoint 2019

…