Principal Network Engineer

Votaw Precision Technologies LLC; Santa Fe Springs (CA); On-site; USD 170,000 - 210,000; Full time

Job summary

Votaw Precision Technologies, LLC, a defense-focused precision manufacturer, seeks a Principal Network Engineer to own the network across multiple sites, design secure connectivity, and ensure 24/7 production uptime.

You will implement segmented OT/IT networks compliant with CMMC Level 2 and NIST SP 800-171, mentor engineers, and collaborate with cloud and facilities teams to stand up new facilities.

Qualifications

• 10+ years of network engineering experience in multi-site enterprises.
• Hands-on expertise with enterprise routing, switching, and next-generation firewalls (Cisco/Juniper/Arista/Palo Alto/Fortinet).
• Experience designing OT/IT separated networks in manufacturing or regulated environments.
• Knowledge of core services: DNS, DHCP, IPAM, load balancing, VPN at scale, and network monitoring.
• Experience standing up network infrastructure for new facilities.

Responsibilities

• Design and deliver the platform network across all sites, including LAN/WAN, SD-WAN, firewalls, switching, and wireless.
• Establish network segmentation and isolation between OT and IT per CMMC Level 2 / NIST SP 800-171.
• Remediate site connectivity problems and evaluate options for new technologies under ITAR/CUI requirements.
• Stand up new facilities with repeatable network architecture for fast acquisitions.
• Own boundary protection with next-gen firewalls and secure remote access.
• Partner with cloud engineering to secure AWS GovCloud connectivity.
• Own foundational network services: DNS/DHCP/IPAM, load balancing, site-to-site VPN.
• Establish visibility via network monitoring and documentation for audits.
• Sustain 24/7 reliability with on-call rotation.
• Provide direction and mentorship to junior network engineers.

Skills

Network engineering

Routing & switching

Next-gen firewalls

OT/IT separation

Network security controls

DNS/DHCP/IPAM

VPN at scale

Education

Bachelor's degree in a technical field

Tools

Cisco

Juniper

Arista

Palo Alto

Fortinet

Job description

Description

Company Background and Summary

Vaylent is a Cerberus-backed aerospace and defense manufacturing platform building the enterprise infrastructure, capabilities, and operational foundation to support a growing network of manufacturing companies, including Votaw Precision Technologies. Through its operating companies, Vaylent supports demanding aerospace, defense, and industrial programs by combining advanced manufacturing expertise with scalable business and technology infrastructure.

The Principal Network Engineer will be the senior technical owner of Vaylent's network, responsible for designing, building, and securing connectivity across existing sites and new facility standups. This hands-on, high-autonomy role will architect and mature a segmented, multi-site network designed to meet CMMC Level 2 requirements.

What You Will Own (Essential Functions)

• Design and deliver the platform network across all Vela sites, including new facility standups — LAN/WAN, SD-WAN, firewalls, switching, and wireless.
• Establish network segmentation and isolation of shop-floor OT from enterprise IT in line with CMMC Level 2 / NIST SP 800-171 and a defense-in-depth (Purdue-model) architecture.
• Remediate site connectivity problems— assess current-state connectivity, resolve reliability issues, and evaluate options (including any satellite/Starlink proposal) against ITAR/CUI data-handling requirements before adoption.
• Stand up new facilities with standardized, repeatable network architecture that supports a fast acquisition-integration playbook.
• Own boundary protection (next-generation firewalls and secure remote access, including jump/bastion hosts into controlled environments). Palo Alto, Fortinet, or similar a plus.
• Partner with cloud engineering to secure connectivity between on-prem sites and AWS GovCloud (Direct Connect / VPN).
• Own foundational network services — including plant-floor wireless, core services (DNS/DHCP/IPAM), load balancing, and site-to-site VPN across the platform.
• Establish visibility — stand up network monitoring/NMS and maintain current network documentation and diagrams (also serving as CMMC audit evidence).
• Sustain reliability — supporting a 24/7 manufacturing operation, including participation in an escalation/on-call rotation to protect production uptime.
• Provide technical direction and mentorship to junior network engineers as the team grows.

Requirements

Qualifications and Skills

Education & Experience

• 10+ years of network engineering experience, including multi-site enterprise networks.
• Deep hands-on expertise with enterprise routing, switching, and next-generation firewalls (e.g., Cisco, Juniper, Arista, Palo Alto, Fortinet, or similar).
• Proven experience designing segmented networks and OT/IT separation in manufacturing, industrial, or regulated environments.
• Working knowledge of network security controls — boundary protection, segmentation, and encryption in transit (NIST SP 800-171 / CMMC familiarity a plus).
• Strong command of core network services (DNS, DHCP, IPAM), load balancing, VPN at scale, and network monitoring.
• Experience standing up network infrastructure for new facilities from the ground up.

Preferred Qualifications

• Aerospace, defense, or other regulated precision-manufacturing experience.
• Hands-on OT/ICS networking and familiarity with the Purdue model.
• Experience with industrial/plant-floor wireless and ruggedized environments.
• Experience mentoring engineers or leading a small network team.
• Experience connecting on-prem environments to AWS GovCloud.
• Relevant certifications a plus (e.g., CCNP/CCIE, JNCIP, PCNSE, or equivalent).
• Bachelors in a technical field or equivalent hands-on experience.

Key Performance Indicators

• Maintain 99.9%+ network availability supporting 24/7 manufacturing operations.
• Maintain CMMC Level 2 / NIST 800-171 network security and audit readiness.
• Implement effective IT/OT and CUI segmentation across all sites.
• Deliver standardized, secure network infrastructure for new facilities and acquisitions.
• Maintain current network monitoring, documentation, and configuration standards.
• Resolve critical network issues within established SLA and production-impact targets.
• Build scalable network standards and mentor the growing engineering team.

Personal Attributes

• Highly self-motivated and directed.
• Keen attention to detail.
• Ability to effectively prioritize and execute tasks in a high-pressure environment.
• Ability to work both independently and in a team-oriented, collaborative environment.

Work Conditions

• Ability to work onsite, including hours outside of a normal working day, to meet critical deadlines.
• This position operates within a precision manufacturing environment supporting the production of mission-critical aerospace and defense components. Success requires a high sense of urgency, attention to detail, proactive problem-solving, and the ability to coordinate effectively across multiple departments to ensure uninterrupted manufacturing operations and customer delivery commitments.
• Ability to work safely in a manufacturing environment, including walking the production floor, climbing stairs or ladders, occasionally lifting up to 25 pounds, and wearing required personal protective equipment (PPE).

Additional Requirements

• This position requires the use of information or access to hardware subject to the International Traffic in Arms Regulations (ITAR). All applicants must be U.S. persons as defined by ITAR.
• Able to obtain and maintain a U.S. security clearance.

Your actual level and base salary will be determined on a case-by-case basis and may vary based on the following considerations: job-related knowledge, skills, education, and experience.

Votaw Precision Technologies, LLC is an Equal Opportunity Employer including Disability/Vets.