Principal Network Engineer - Remote Across UK Or Ireland

Ocho People; Belfast City District; Remote; GBP 104,000 - 127,000; Full time

Benefits offered by this job

Fully remote

Up to £115k + bonus

Unlimited PTO

Pension, 5% employer contribution

Private medical insurance

Job summary

Ocho People Ltd. in the United Kingdom seeks a Principal Network Engineer to lead our global network strategy across data centres and cloud. You will automate infrastructure, codify network state, and enable self-service capabilities, reducing tickets.

This hands-on, remote role spans US and Europe, with PCI DSS and SOX considerations; you will mentor senior engineers and drive major design decisions, balancing reliability, security, and performance.

Qualifications

• Extensive experience as a principal or lead network engineer in production enterprise environments.
• Expert routing and switching: BGP, OSPF, VXLAN/EVPN, plus networking in AWS, Azure, OCI or GCP.
• Firewall policy and segmentation in regulated environments, ideally PCI DSS and SOX.
• Proven network automation with Terraform, Ansible, vendor APIs and a network source of truth.
• Production-quality code in Python, Go or similar, using Git, pull requests and CI, not just procedural scripts.
• Daily use of agentic coding tools such as Claude Code, Codex or Cursor, with a safety-first approach to reviewing agent output.
• Clear writing and the confidence to explain design trade-offs and make the case for new approaches.

Responsibilities

• Keep the network's intended state in source control, managing switches, routers, firewalls and cloud networking through Terraform, Ansible and vendor APIs, with automated validation before any production change
• Build self-service capabilities with policy checks and guardrails for common requests such as network segments, VPCs, firewall rules and private connectivity
• Design Palo Alto segmentation and firewall policy as code, keeping PCI DSS cardholder data scope tight
• Design and evolve routing and switching (BGP, VXLAN/EVPN) across data centres and cloud interconnects
• Provide load balancing and traffic steering as code, integrated with service discovery
• Build PCI DSS and SOX controls into the network, with automated backups, drift detection and audit evidence
• Ship every capability with telemetry, flow data and alerting, and run what you build, including on-call and failover testing
• Mentor senior engineers and lead the most significant designs and build-versus-buy decisions

Skills

BGP

OSPF

VXLAN/EVPN

Terraform

Ansible

Python

Go

CI/CD

Cloud networking

Firewall policy

Networking automation

Tools

Terraform

Ansible

Git

CI/CD

Job description

Principal Network Engineer

We're looking for a Principal Network Engineer to be the most senior technical lead for network engineering at a global payments technology company. You'll set direction for the whole network across data centres and public cloud, and turn it into automated, self-service capabilities that engineers use without raising a ticket. Success is measured by the requests that no longer need to be made.

This is a hands-on role for a network engineer who has made the move to automation and software engineering. You'll write code every week, use AI tools daily and work autonomously in a fully remote team across the US and Europe.

Key Responsibilities

• Keep the network's intended state in source control, managing switches, routers, firewalls and cloud networking through Terraform, Ansible and vendor APIs, with automated validation before any production change
• Build self-service capabilities with policy checks and guardrails for common requests such as network segments, VPCs, firewall rules and private connectivity
• Design Palo Alto segmentation and firewall policy as code, keeping PCI DSS cardholder data scope tight
• Design and evolve routing and switching (BGP, VXLAN/EVPN) across data centres and cloud interconnects
• Provide load balancing and traffic steering as code, integrated with service discovery
• Build PCI DSS and SOX controls into the network, with automated backups, drift detection and audit evidence
• Ship every capability with telemetry, flow data and alerting, and run what you build, including on-call and failover testing
• Mentor senior engineers and lead the most significant designs and build-versus-buy decisions

Required Experience

• Extensive experience as a principal or lead network engineer in production enterprise environments
• Expert routing and switching: BGP, OSPF, VXLAN/EVPN, plus networking in AWS, Azure, OCI or GCP
• Firewall policy and segmentation in regulated environments, ideally PCI DSS and SOX
• Proven network automation with Terraform, Ansible, vendor APIs and a network source of truth
• Production-quality code in Python, Go or similar, using Git, pull requests and CI, not just procedural scripts
• Daily use of agentic coding tools such as Claude Code, Codex or Cursor, with a safety-first approach to reviewing agent output
• Clear writing and the confidence to explain design trade-offs and make the case for new approaches

Nice to Have

• Palo Alto (including Panorama), Juniper and Cisco
• HAProxy Enterprise, HashiCorp Consul, NetBox, Cloudflare and Splunk
• Experience designing or reviewing MCP servers for AI agents

Package

• Up to £115k salary + bonus
• Fully remote
• Unlimited PTO
• Pension, 5% employer contribution rising to 7% after 3 years
• Private medical insurance, including optical and dental