Senior Manager, Network Engineering

Mach Industries•Huntington Beach, CA

2d•$140,000 - $180,000

About The Position

Mach Industries is seeking a hands-on Network Manager to lead the architecture, design, implementation, and day-to-day operation of enterprise and operational technology (OT) networks across all sites. The role is responsible for secure, reliable, and scalable network infrastructure, including segmentation to protect systems and data subject to CUI and ITAR requirements. It combines technical leadership and hands-on engineering with oversight of network operations and development of a small network team. The Network Manager will plan and deploy network infrastructure for two upcoming site openings and own network-related security controls and evidence supporting NIST SP 800-171 and CMMC Level 2 compliance. The role also includes supporting the Microsoft 365 GCC High migration and Okta device-binding rollout, managing network vendors and carriers, and owning the network capital and operating expense line. Mach Industries is a defense technology company founded in 2023, with approximately 350 employees. The company develops autonomous defense platforms and focuses on scalable, decentralized defense systems. The position may require access to information controlled under U.S. export laws. Applicants must meet applicable ITAR eligibility or be eligible to obtain required authorizations.

Requirements

8+ years in network engineering, including 2+ years leading a network team in a hands-on role.
Experience designing and delivering networks for multiple sites, including at least one greenfield site build.
Expertise in enterprise routing/switching, wireless, next-generation firewalls, SD-WAN, and VPN/ZTNA on at least two major platforms, such as Cisco, Arista, Juniper, Palo Alto, Fortinet, or Meraki.
Network security and segmentation design experience, including meeting NIST SP 800-171 boundary-protection and remote-access requirements or an equivalent framework.
Budget ownership and vendor/carrier management experience.
Available to work extended hours and weekends as needed.
Willingness to travel around 25–30% as needed during new site development.
Must be a U.S. citizen or national, lawful permanent resident, refugee, or asylee, or be eligible to obtain required U.S. Department of State authorizations, to conform to U.S. Government export regulations.

Nice To Haves

Experience supporting network environments in the defense, aerospace, or cleared-facility industries.
Familiarity with OT/ICS networking, including the Purdue Model and IEC 62443 standards.
Experience implementing zero-trust network architectures and Secure Access Service Edge (SASE) solutions.
Experience with Microsoft 365 Government Community Cloud High (GCC High).
Relevant industry certifications such as CCNP, CCIE, PCNSE, or NSE 7.

Responsibilities

Own network architecture and standards for all sites, including LAN/WLAN, WAN/SD-WAN, firewalls, VPN/ZTNA, DNS/DHCP/IPAM, and out-of-band management.
Design and deliver networks for two planned sites, from site survey and cabling specifications through cutover.
Enforce segmentation for CUI enclaves, ITAR zones, guest/BYOD, lab/test environments, and OT using the Purdue model; own the firewall rulebase and its change process.
Own network-side NIST SP 800-171 and CMMC Level 2 controls and produce supporting evidence; feed network telemetry to Security's detection platform.
Run network operations, including monitoring, capacity management, firmware and patch lifecycle, vendor support, outage response, and on-call duties.
Lead network dependencies of the Microsoft 365 GCC High migration and the Okta device-binding rollout.
Manage network vendors and carriers and own the network capex/opex line.
Hire and develop network engineers and set documentation standards, including as-builts, diagrams, version-controlled configurations, and runbooks.