{"id":4245538,"url":"https://alion.io/job/nawiri-group-principal-it-engineer","title":"Principal IT Engineer","company":{"id":679404,"name":"Nawiri Group","domain":"nawirigroup.com","url":"https://alion.io/company/nawirigroup","size_band":null,"is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Recruitee","truth_index":null},"role":"Support","role_family":"Support","seniority":"lead","employment_type":null,"work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Cape Town, South Africa"],"countries":["ZA"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":null,"experience_years_min":10,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Active Directory","optional":false},{"name":"Azure","optional":false},{"name":"ISO 27001","optional":false},{"name":"Least Privilege","optional":false},{"name":"Microsoft Entra ID","optional":false},{"name":"PowerShell","optional":false},{"name":"SIEM","optional":false},{"name":"VPN","optional":false},{"name":"Windows Server","optional":false},{"name":"Zero Trust","optional":false}],"status":"live","first_seen_at":"2026-10-06T13:48:55Z","employer_posted_date":"2026-10-06","last_verified_at":"2026-11-15T02:27:16Z","board_verified":true,"closed_at":null,"days_open":39,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":39},"description":"NawiriGroup is foremost known as a leading safari travel group, offering great personalised nature-based travel experiences across the African continent. Our core purpose goes beyond delivering exceptional safaris. We are a platform that connects local communities, expert partners, investors, and travellers to drive positive impact at scale within some of Africa’s most iconic wilderness areas.\nSince inception, we’ve supported national parks, community-led conservancies, local communities and governments with many initiatives and millions of dollars in their efforts to safeguard and manage some of Africa’s most important wilderness areas. We believe travel should be a force for good and our vision is to use responsible travel to create a sustainable and prosperous future for natural ecosystems in Africa and the local people living in and around these unique, globally important areas.\nToday, through the Group’s various subsidiaries across multiple countries, which includes Asilia Africa, a leading safari operator with 17 bespoke camps and lodges across Kenya, Tanzania, and Uganda, with a full-service DMC offering, and the multi-award-winning African safari tour operator Go2Africa, we employ close to 1,300 people in sub-Saharan Africa all dedicated to delivering immersive experiences while working towards our goal of delivering impact at scale.\nPurpose Driven\nOur shared purpose is encapsulated in our group name - ‘Nawiri’ is Kiswahili for ‘to flourish/thrive’, reflecting our vision of creating a future where vital ecosystems and local communities thrive together.\n\nWe are proud as a group to be B Corp certified, a testament to our dedication to balancing the needs of people, planet, and profit in everything we do. Our journey with B Corp started more than a decade ago when Asilia qualified in 2012, the first African Travel company to do so.\n\nLast financial year we contributed US$9.8m to nature protection and positive impact projects. We continue to grow our impact reach and agenda.\n\nWe have ambitious commercial growth plans and are expanding our operational, commercial, analytical and technology capabilities to enable the further scaling of both our guest experiences and travel offerings.\n\nWhy should you work for us?\nJoin a team that has continuously led the way in our industry, ranging from creating cutting-edge technology platforms to deploying innovative solutions to lead the way in sustainable operations.\n\nWe take pride in creating a culture where people grow, find purpose, and contribute to progress that reaches far beyond the organisation. Training and development are at the heart of this journey, and we are proud of the number of in-house programmes that we have available, including a training library offering over 130 different training modules.\n\nEnjoy the flexibility of a hybrid working arrangement to get the most out of your working hours. Combine work in one of the Nawiri Group offices, located in the picturesque cities of Cape Town, Nairobi, Arusha, and London, with the option of remote work.\n\nROLE SUMMARY\nWe are looking for an experienced Principal Engineer to join our Group IT team and act as the senior technical authority across our infrastructure environment. This is a senior technical leadership role for someone who has progressed beyond operational engineering and is comfortable taking ownership of architecture, technical standards, cybersecurity, infrastructure resilience and the development of a geographically distributed team.\nThe environment spans multiple businesses, countries, offices and remote operational sites. The successful candidate therefore needs to be comfortable working across a complex and widely distributed IT environment and leading engineers with different levels of experience, personalities and technical specialisations.\nKEY RESPONSIBILITIES\nTechnical Leadership\nEstablish Group infrastructure architecture, technical standards and roadmaps in partnership with the Head of IT.\n\nReview and approve complex designs and changes, identify technical debt and make sound decisions across security, availability, scalability, cost and supportability.\n\nProvide senior escalation and technical direction to engineers, specialists, regional teams and strategic vendors.\n\nEnsure critical platforms have clear primary and secondary owners, with current documentation and shared knowledge.\n\nPeople Leadership\nLead experienced engineers across locations, cultures, disciplines and differing operational priorities through credibility, trust, coaching and clear direction.\n\nDelegate effectively, recognise individual strengths and develop future technical leaders without becoming the sole resolver of every complex issue.\n\nBuild a collaborative engineering culture centred on ownership, professional behaviour and consistent technical practices.\n\nInfrastructure Architecture\nDesign secure, resilient and scalable infrastructure across Group entities and locations.\n\nLead the integration of new businesses, sites and environments into Group standards, standardising platforms where practical.\n\nMaintain an infrastructure and technical-security roadmap that supports Group growth and operational resilience.\n\nMajor Incident Response\nAct as the senior technical lead during major infrastructure and cybersecurity incidents. Lead investigation, containment, isolation and recovery; coordinate engineers and technical providers; preserve technical evidence; and convert post-incident findings into infrastructure and security improvements. The Head of IT retains overall incident command, business escalation and executive communication.\nTechnical Scope:\nMicrosoft Cloud and Identity\nOwn architecture oversight across Azure, Microsoft 365, Entra ID, Active Directory and hybrid Microsoft environments.\n\nSet standards for identity, Conditional Access, MFA, privileged access, least privilege and separation of administrative access.\n\nReview cloud and identity security, reduce unnecessary privilege and strengthen access controls across the Group.\n\nNetworks and Firewalls\nDefine enterprise network and firewall standards covering Fortinet or equivalent platforms, routing, switching, VLANs, VPN, SD-WAN, secure remote access and ZTNA concepts.\n\nImprove segmentation and controls between users, servers, cloud environments and critical infrastructure, reducing unnecessary lateral access.\n\nProvide architecture guidance and senior escalation for complex network and connectivity issues.\n\nCybersecurity Engineering\nLead technical security architecture across EDR and XDR, identity security, privileged access, endpoint hardening, application control and ransomware resilience.\n\nWork with MDR, SOC and forensic providers to improve detection coverage, logging, alerting, technical response and evidence availability.\n\nTranslate vulnerabilities, penetration-test findings and security risks into prioritised, practical remediation, including compensating controls where immediate remediation is not possible.\n\nApply Zero Trust, least privilege, defence-in-depth and recognised control frameworks, while independent governance and regulatory assurance remain outside this role.\n\nBackup, Disaster Recovery and Resilience\nProvide architecture oversight for enterprise, immutable and off-site or cloud backup platforms, disaster recovery and business-service recovery.\n\nEnsure critical platforms have protected backup infrastructure, documented recovery plans and regular restore and disaster-recovery testing.\n\nStrengthen resilience against ransomware, privileged-account compromise and other high-impact failures.\n\nVulnerability Endpoint and Patch Management\nSet technical vulnerability and patch-management standards, prioritising internet-facing, identity, firewall, remote-access and critical-server risks.\n\nIdentify unsupported or end-of-life infrastructure and guide engineers on remediation planning.\n\nOversee endpoint and remote-management standards, ensure RMM and remote-access tools are controlled and inventoried, and reduce unnecessary administrative access.\n\nRequirements\nRequired Experience\nAt least 10 years in enterprise infrastructure, networking, cloud or cybersecurity, including five years in senior engineering, architecture or technical leadership.\n\nProven leadership of experienced, geographically distributed technical teams across multiple sites, offices or countries.\n\nStrong architecture experience across Azure, Microsoft 365, Entra ID, Active Directory, Windows Server and hybrid-cloud environments.\n\nStrong enterprise networking and firewall experience, including Fortinet or an equivalent platform, segmentation and secure remote access.\n\nPractical experience in backup and disaster recovery, EDR or XDR, security monitoring, vulnerability management and cybersecurity incident response.\n\nStrong technical documentation, architecture, scripting and infrastructure-automation capability, including PowerShell or a similar language.\n\nCore Technical Knowledge\nCloud and identity: Azure, Microsoft 365, Entra ID, Active Directory, Conditional Access, MFA, privileged access and hybrid Microsoft environments.\n\nNetwork and security: Fortinet or equivalent firewalls, routing and switching, VLANs, segmentation, VPN, SD-WAN, ZTNA, EDR or XDR, MDR or SOC and SIEM concepts.\n\nResilience and operations: Windows Server, immutable backup, disaster recovery, ransomware recovery, vulnerability management, RMM, incident response and infrastructure automation.\n\nSecurity principles: Zero Trust, least privilege, defence in depth, identity security, incident response, CIS Controls, NIST Cybersecurity Framework and ISO 27001 principles.\n\nEMPLOYMENT EQUITY\nAt Nawiri Group, we are committed to fostering diversity and inclusion. We encourage Employment Equity candidates and individuals with disabilities to apply. As an equal opportunities employer, we believe that a diverse workforce is key to our success. We welcome applications from individuals of all backgrounds, regardless of age, gender, disability, sexual orientation, race, religion, or beliefs.","description_format":"text","description_chars":10054,"description_truncated":false,"requirements":{"experience_years_min":10,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["Equity","Hybrid work"],"hiring_locations":[{"name":"South Africa","iso":"ZA","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Adventure Tourism","Information Security","Eco Tourism"],"lifecycle":[{"event":"open","at":"2026-11-13T12:34:05Z"}],"visa":[],"liveness":{"score":40,"band":"fade","label":"Fading","p_open":1,"p_active":0.719,"p_room":0.55,"age_days":38,"expected_fill_days":29,"reasons":["conf:2","win:tail"],"computed_at":"2026-11-14T05:58:10Z"},"pay":null,"html_url":"https://alion.io/job/nawiri-group-principal-it-engineer","json_url":"https://alion.io/job/nawiri-group-principal-it-engineer.json","meta":{"generated_at":"2026-11-15T03:54:49Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":7355,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-16T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.1,"usd":0.01,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":679404},"rest":"https://alion.io/mcp/rest/get_company?id=679404"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fnawiri-group-principal-it-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"free","price":{"credits":0,"usd":0},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fnawiri-group-principal-it-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.1,"usd":0.01},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fnawiri-group-principal-it-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/nawiri-group-principal-it-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fnawiri-group-principal-it-engineer"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":4245538}},{"tool":"search_jobs","arguments":{"company":"nawirigroup.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":4245538},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}