Senior Principal-IT Infrastructure

Job Description

OVERVIEW

Job Title

Senior Principal - Network & IT Security

Job Code

Grade

E2

Group

Government Products

Division

Technology

Department

IT Infrastructure

Unit

Network & IT Security

ROLE PURPOSE

The aim is to state the overall significance of the job from the organization’s perspective.

To provide expert technical leadership in the architecture, design, implementation, operation, and optimization of Elm’s enterprise network and network security environments across production, cloud, and corporate platforms. The role is responsible for ensuring highly available, resilient, scalable, and secure network services, providing expert guidance on complex network and security challenges, driving technology enhancements, and strengthening the reliability and security of the organization’s critical network infrastructure in alignment with Elm’s technology standards, policies, and operational objectives.

KEY ACCOUNTABILITIES & ACTIVITIES

This section describes the principal outputs required from the job.

Key Accountabilities

Key Activities

1. Enterprise Network Architecture & Design

• Define and enhance network architecture across production, corporate, cloud, and hybrid environments.
• Design scalable, resilient, and highly available network solutions that support current and future technology requirements.
• Provide expert technical guidance on network topology, connectivity, segmentation, routing, switching, and architecture decisions.
• Review complex network designs and recommend improvements to enhance reliability, scalability, and operational efficiency.

2. Network Security Architecture & Engineering

• Design and enhance network security solutions that protect enterprise infrastructure against unauthorized access and cyber threats.
• Define technical requirements for firewalls, network segmentation, secure connectivity, remote access, and related network security technologies.
• Apply secure network architecture principles across production, corporate, and cloud environments.
• Evaluate network security technologies and recommend appropriate technical enhancements based on infrastructure requirements.

3. Production, Corporate & Cloud Network Engineering

• Provide expert engineering support for production, corporate, cloud, and hybrid network environments.
• Design and implement complex network configurations, connectivity solutions, and infrastructure enhancements.
• Ensure network services support availability, performance, resilience, and business continuity requirements.
• Resolve complex technical challenges involving enterprise connectivity and network infrastructure.

4. Network Operations & Service Reliability

• Provide expert technical oversight for the operation and health of critical network and network security services.
• Analyze complex incidents, service degradations, and recurring network issues and drive technical resolution.
• Perform advanced root cause analysis and recommend corrective and preventive actions.
• Identify opportunities to strengthen network availability, resilience, recoverability, and operational stability.Monitor URLs and external service availability.
• Support end-to-end visibility of business-critical services.

5. Network Security Controls & Threat Protection

• Strengthen network security controls across enterprise technology environments.
• Review firewall rules, network access controls, segmentation, and secure communication mechanisms from a technical engineering perspective.
• Support vulnerability assessments and remediation activities related to network infrastructure.
• Identify technical network security risks and define appropriate engineering solutions and mitigation measures.

6. Network Performance, Capacity & Optimization

• Analyze network utilization, capacity, latency, availability, and performance across enterprise environments.
• Identify bottlenecks, architecture limitations, and opportunities for technical optimization.
• Define capacity and scalability requirements to support business growth and evolving technology workloads.
• Drive technical improvements that enhance network performance, efficiency, and service reliability.

7. Network Technology Modernization & Automation

• Support the preparation of daily and shift operational reports.
• Identify recurring alarms and monitoring gaps.
• Report false-positive or noisy alerts for tuning.
• Participate in incident reviews when required.
• Suggest improvements to dashboards, alerts and operational procedures.

8. Technical Advisory, Standards & Knowledge Enablement

• Act as a senior subject matter expert for enterprise networking and network security across production, corporate, and cloud environments.
• Define and enhance technical standards, engineering practices, architecture guidelines, and operational documentation.
• Provide expert technical advice to Infrastructure, Cloud, Cybersecurity, Architecture, and other technology stakeholders.
• Transfer specialized technical knowledge and provide expert guidance to strengthen internal network engineering capabilities without direct people management responsibilities.

9. Policies, Processes & Procedures

• Follow all relevant departmental policies, processes, standard operating procedures, and instructions so that work is carried out in a controlled and consistent manner.
• Comply with all relevant safety, quality, and environmental management policies, procedures, and controls to ensure a healthy and safe work environment.

10. Information Security

• Comply with all relevant information security practices and standards to ensure data integrity and confidentiality.

JOB SPECIFICATIONS

Academic and professional qualifications

• Bachelor’s Degree in Computer Science, Information Technology, Computer Engineering, Network Engineering, Cybersecurity, or a related discipline.
• Professional certifications in Enterprise Networking, Network Security, Cloud Networking, or related disciplines are preferred.

Years and Nature of Experience

• 10+ years of experience in Network Engineering, Network Security Engineering, Enterprise Networking, Cloud Networking, or related infrastructure domains.