Principal Network Engineer

Votaw; Los Angeles, Northern (CA, KY); Hybrid; USD 150,000 - 230,000; Full time

Job summary

Votaw Precision Technologies, LLC in California seeks a Principal Network Engineer to own and secure the enterprise network across sites, including new facility standups, with OT/IT segmentation aligned to CMMC Level 2. This hands-on role requires design, implementation, and operation of a reliable, scalable network for a 24/7 manufacturing environment.

The role involves leading architecture for LAN/WAN, SD-WAN, firewalls, DNS/DHCP/IPAM, VPNs, and site-to-site connectivity, while mentoring

Qualifications

• 10+ years of network engineering across multi-site enterprises.
• Experience designing OT/IT segmentation in manufacturing environments.
• Strong DNS, DHCP, IPAM, load balancing, and VPN at scale.

Responsibilities

• Design and deliver the platform network across all sites, including new facilities.
• Establish network segmentation and OT/IT isolation per CMMC/NIST guidance.
• Remediate connectivity issues and evaluate options with ITAR/CUI compliance.
• Stand up facilities with repeatable network architectures for rapid acquisitions.
• Own boundary protection and secure remote access (Palo Alto, Fortinet, or equivalent).
• Partner with cloud engineering to connect on-prem to AWS GovCloud (Direct Connect/VPN).
• Own foundational services (DNS/DHCP/IPAM, load balancing, site-to-site VPN).
• Establish visibility with network monitoring and documentation for audits.
• Support a 24/7 manufacturing operation and participate in on-call rotation.
• Provide mentorship to junior engineers as the team grows.

Skills

Network design

OT/IT segmentation

NIST SP 800-171/CMMC

DNS/DHCP/IPAM

VPN/SD-WAN/firewalls

Multi-site networks

Mentoring

Cloud connectivity

Education

Bachelor's degree in technical field

Tools

Cisco IOS

Juniper Junos

Arista switches

Palo Alto

Fortinet

Job description

Description

Vaylent is a Cerberus-backed aerospace and defense manufacturing platform building the enterprise infrastructure, capabilities, and operational foundation to support a growing network of manufacturing companies, including Votaw Precision Technologies. Through its operating companies, Vaylent supports demanding aerospace, defense, and industrial programs by combining advanced manufacturing expertise with scalable business and technology infrastructure.

The Principal Network Engineer will be the senior technical owner of Vaylent's network, responsible for designing, building, and securing connectivity across existing sites and new facility standups. This hands-on, high-autonomy role will architect and mature a segmented, multi-site network designed to meet CMMC Level 2 requirements.

What You Will Own (Essential Functions)

• Design and deliver the platform network across all Vela sites, including new facility standups — LAN/WAN, SD-WAN, firewalls, switching, and wireless.
• Establish network segmentation and isolation of shop-floor OT from enterprise IT in line with CMMC Level 2 / NIST SP 800-171 and a defense-in-depth (Purdue-model) architecture.
• Remediate site connectivity problems— assess current-state connectivity, resolve reliability issues, and evaluate options (including any satellite/Starlink proposal) against ITAR/CUI data-handling requirements before adoption.
• Stand up new facilities with standardized, repeatable network architecture that supports a fast acquisition-integration playbook.
• Own boundary protection (next-generation firewalls and secure remote access, including jump/bastion hosts into controlled environments). Palo Alto, Fortinet, or similar a plus.
• Partner with cloud engineering to secure connectivity between on-prem sites and AWS GovCloud (Direct Connect / VPN).
• Own foundational network services — including plant-floor wireless, core services (DNS/DHCP/IPAM), load balancing, and site-to-site VPN across the platform.
• Establish visibility — stand up network monitoring/NMS and maintain current network documentation and diagrams (also serving as CMMC audit evidence).
• Sustain reliability — supporting a 24/7 manufacturing operation, including participation in an escalation/on-call rotation to protect production uptime.
• Provide technical direction and mentorship to junior network engineers as the team grows.

Requirements

Qualifications and Skills

Education & Experience

• 10+ years of network engineering experience, including multi-site enterprise networks.
• Deep hands-on expertise with enterprise routing, switching, and next-generation firewalls (e.g., Cisco, Juniper, Arista, Palo Alto, Fortinet, or similar).
• Proven experience designing segmented networks and OT/IT separation in manufacturing, industrial, or regulated environments.
• Working knowledge of network security controls — boundary protection, segmentation, and encryption in transit (NIST SP 800-171 / CMMC familiarity a plus).
• Strong command of core network services (DNS, DHCP, IPAM), load balancing, VPN at scale, and network monitoring.
• Experience standing up network infrastructure for new facilities from the ground up.

Preferred Qualifications

• Aerospace, defense, or other regulated precision-manufacturing experience.
• Hands-on OT/ICS networking and familiarity with the Purdue model.
• Experience with industrial/plant-floor wireless and ruggedized environments.
• Experience mentoring engineers or leading a small network team.
• Experience connecting on-prem environments to AWS GovCloud.
• Relevant certifications a plus (e.g., CCNP/CCIE, JNCIP, PCNSE, or equivalent).
• Bachelors in a technical field or equivalent hands-on experience.

Key Performance Indicators

• Maintain 99.9%+ network availability supporting 24/7 manufacturing operations.
• Maintain CMMC Level 2 / NIST 800-171 network security and audit readiness.
• Implement effective IT/OT and CUI segmentation across all sites.
• Deliver standardized, secure network infrastructure for new facilities and acquisitions.
• Maintain current network monitoring, documentation, and configuration standards.
• Resolve critical network issues within established SLA and production-impact targets.
• Build scalable network standards and mentor the growing engineering team.

Personal Attributes

• Highly self-motivated and directed.
• Keen attention to detail.
• Ability to effectively prioritize and execute tasks in a high-pressure environment.
• Ability to work both independently and in a team-oriented, collaborative environment.

Work Conditions

• Ability to work onsite, including hours outside of a normal working day, to meet critical deadlines.
• This position operates within a precision manufacturing environment supporting the production of mission-critical aerospace and defense components. Success requires a high sense of urgency, attention to detail, proactive problem-solving, and the ability to coordinate effectively across multiple departments to ensure uninterrupted manufacturing operations and customer delivery commitments.
• Ability to work safely in a manufacturing environment, including walking the production floor, climbing stairs or ladders, occasionally lifting up to 25 pounds, and wearing required personal protective equipment (PPE).

Additional Requirements

• This position requires the use of information or access to hardware subject to the International Traffic in Arms Regulations (ITAR). All applicants must be U.S. persons as defined by ITAR.
• Able to obtain and maintain a U.S. security clearance.

Your actual level and base salary will be determined on a case-by-case basis and may vary based on the following considerations: job-related knowledge, skills, education, and experience.

Votaw Precision Technologies, LLC is an Equal Opportunity Employer including Disability/Vets.