A purpose-led travel group operating across several countries is looking for a Principal IT Engineer to act as the senior technical authority across its infrastructure.
This is a senior technical leadership role for someone who has moved beyond operational engineering: you’ll own architecture, technical standards, cybersecurity, resilience and the development of a geographically distributed team, across many businesses, offices and remote sites.
What you’ll do
Set infrastructure architecture, technical standards and roadmaps with the Head of IT
Review and approve complex designs and changes, and give senior escalation to engineers, regional teams and vendors
Lead and develop experienced engineers across locations and cultures
Design secure, resilient infrastructure and integrate new businesses and sites into standards
Act as senior technical lead during major infrastructure and cybersecurity incidents
Own architecture across Azure, Microsoft 365, Entra ID, Active Directory and hybrid environments, including identity, Conditional Access and privileged access
Define network and firewall standards (Fortinet or equivalent, SD-WAN, VPN, ZTNA) and improve segmentation
Lead security architecture across EDR/XDR, endpoint hardening and ransomware resilience, working with MDR and SOC providers
Oversee backup, disaster recovery, vulnerability and patch management
What you’ll need
At least 10 years in enterprise infrastructure, networking, cloud or cybersecurity, including 5 years in senior engineering, architecture or technical leadership
Proven leadership of distributed technical teams across multiple sites or countries
Strong architecture experience across Azure, Microsoft 365, Entra ID, Active Directory and Windows Server
Strong enterprise networking and firewall experience
Practical experience in backup and DR, EDR/XDR, security monitoring, vulnerability management and incident response
Strong documentation and scripting, including PowerShell or similar
Willingness to travel to support offices in other countries
Nice to have
Knowledge of Zero Trust, CIS Controls, NIST CSF and ISO 27001 principles
What’s on offer
The senior technical voice across a multi-country group
Hybrid working
Extensive in-house training and development
Cape Town. Hybrid. Permanent.