Senior Manager, Network Engineering

Mach Industries; Huntington Beach (CA); On-site; USD 140,000 - 180,000; Full time

Job summary

Mach Industries is seeking a hands-on Network Manager to lead architecture, design, and day-to-day operation of our enterprise and OT networks across sites. You will build secure, scalable infrastructure, enforce segmentation for CUI/ITAR, and drive NIST SP 800-171 and CMMC Level 2 controls.

You will oversee network planning for two upcoming site openings, mentor a small team, manage vendor relationships, and own the firewall rulebase and change processes.

Qualifications

• 8+ years in network engineering with hands-on leadership experience.
• Experience designing and delivering networks for multiple sites, including greenfield builds.
• Expert in enterprise routing/switching, wireless, NGFW, SD-WAN, VPN/ZTNA on major platforms.

Responsibilities

• Own network architecture and standards for all sites: LAN/WLAN, WAN/SD-WAN, firewalls, VPN/ZTNA, DNS/DHCP/IPAM, and out-of-band management.
• Design and deliver the network for two planned sites from survey through cutover.
• Enforce segmentation for CUI ITAR zones and OT on the Purdue model; manage firewall rulebase & changes.
• Own network-side NIST SP 800-171 / CMMC Level 2 controls and produce evidence.
• Run network operations: monitoring, capacity, patch lifecycle, vendor support, outages, on-call.
• Lead network dependencies of Microsoft 365 GCC High migration & Okta device-binding rollout.
• Manage network vendors and capex/opex; hire and mentor engineers; maintain documentation standards.
• Keep runbooks and diagrams under version control.

Skills

8+ years network engineering

2+ years leading a network team

Multi-site network design

Enterprise routing/switching

Wireless, next-gen firewalls, SD-WAN

VPN/ZTNA across platforms

Network security & segmentation

Budget ownership & vendor management

Tools

Cisco

Arista

Juniper

Palo Alto

Fortinet

Meraki

Job description

About Mach Industries

Founded in 2023, Mach Industries is a rapidly growing defense technology company focused on developing next-generation autonomous defense platforms. At the core of our mission is the commitment to delivering scalable, decentralized defense systems that enhance the strategic capabilities of the United States and its allies. With a workforce of approximately 350 employees, we operate with startup agility and ambition.

Our vision is to redefine the future of warfare through cutting-edge manufacturing, innovation at speed, and unwavering focus on national security. We are dedicated to solving the next generation of warfare with lethal systems that deter kinetic conflict and protect global security.

About Mach Industries

Founded in 2023, Mach Industries is a rapidly growing defense technology company focused on developing next-generation autonomous defense platforms. At the core of our mission is the commitment to delivering scalable, decentralized defense systems that enhance the strategic capabilities of the United States and its allies. With a workforce of approximately 350 employees, we operate with startup agility and ambition.

Our vision is to redefine the future of warfare through cutting-edge manufacturing, innovation at speed, and unwavering focus on national security. We are dedicated to solving the next generation of warfare with lethal systems that deter kinetic conflict and protect global security.

The Role

We are seeking a hands‑on Network Manager to lead the architecture, design, implementation, and day‑to‑day operation of Mach's enterprise and operational technology (OT) networks across all sites. The successful candidate will be responsible for building and maintaining secure, reliable, and scalable network infrastructure, including implementing network segmentation to protect systems and data subject to CUI and ITAR requirements. This role combines technical leadership with hands‑on engineering, overseeing network operations while developing and mentoring a small network team. The Network Manager will also lead network infrastructure planning and deployment for two upcoming site openings and own network‑related security controls and evidence supporting NIST SP 800‑171 and CMMC Level 2 compliance.

Key Responsibilities

• Own network architecture and standards for all sites: LAN/WLAN, WAN/SD-WAN, firewalls, VPN/ZTNA, DNS/DHCP/IPAM, and out-of-band management.
• Design and deliver the network for the two planned sites, from site survey and cabling spec through cutover.
• Enforce segmentation — CUI enclave, ITAR zones, guest/BYOD, lab/test, and OT on the Purdue model — and own the firewall rulebase and its change process.
• Own the network-side NIST SP 800-171 / CMMC Level 2 controls and produce the evidence; feed network telemetry to Security's detection platform.
• Run network operations: monitoring, capacity, firmware and patch lifecycle, vendor support, outage response, and on-call.
• Lead the network dependencies of the Microsoft 365 GCC High migration and the Okta device-binding rollout.
• Manage network vendors and carriers; own the network capex/opex line.
• Hire and develop the network engineers and set the documentation standard (as-builts, diagrams, configs under version control, runbooks).

Required Qualifications

• 8+ years in network engineering, including 2+ years leading a network team in a hands‑on role.
• Previous experience designing and delivering networks for multiple sites, including at least one greenfield site build.
• Expert in enterprise routing/switching, wireless, next‑generation firewalls, SD‑WAN, and VPN/ZTNA on at least two major platforms (Cisco, Arista, Juniper, Palo Alto, Fortinet, Meraki, or similar).
• Network security and segmentation design; has met NIST SP 800‑171 boundary‑protection and remote‑access requirements or an equivalent framework.
• Budget ownership and vendor/cARRIER management.

Preferred Qualifications

• Experience supporting network environments within the defense, aerospace, or cleared‑facility industries.
• Familiarity with OT/ICS networking, including the Purdue Model and IEC 62443 standards.
• Experience implementing zero‑trust network architectures and Secure Access Service Edge (SASE) solutions.
• Experience with Microsoft 365 Government Community Cloud High (GCC High).
• Relevant industry certifications, such as CCNP, CCIE, PCNSE, or NSE 7.

Additional Requirements

• Available to work extended hours and weekends as needed.
• Willingness to travel around 25‑30% as needed during new site development.

ITAR Requirements

To conform to U.S. Government export regulations, applicant must be a (i) U.S. citizen or national, (ii) U.S. lawful, permanent resident (aka green card holder), (iii) Refugee under 8 U.S.C.1157, or (iv) Asylee under 8 U.S.C.1158, or be eligible to obtain the required authorizations from the U.S. Department of State. Learn more about the ITAR here.

• 1157, or (iv) Asylee under 8 U.S.C.
• 1158, or be eligible to obtain the required authorizations from the U.S. Department of State. Learn more about the ITAR here.

Pay Range

$140,000—$180,000 USD

At Mach, we believe that compensation is more than just a paycheck. It's a comprehensive package designed to reward the time, skills, and expertise you bring to our team. We are committed to offering competitive compensation that is equitable, transparent, and aligned with market trends.

Key Elements Of Our Compensation Philosophy

• Competitive Salaries: We continuously research market rates to ensure our salaries are competitive with those in our industry and geographic location.
• Performance‑Based Incentives: Our bonus structure is tied to both individual and company performance, creating a win‑win scenario that motivates our team members to excel.
• Equity Participation: We offer stock options or equity to employees, ensuring that you share in the success and growth of the company.
• Benefit Packages: Our benefits include healthcare, dental and vision plans, retirement savings, and paid time off, because we understand that your well‑being extends beyond the office.
• Professional Development: We allocate funds for continuing education, training, and career growth.
• Transparency: We are committed to openness about our compensation tiers and how decisions are made, ensuring trust and mutual respect.

By joining Mach, you’re not just accepting a job—you’re becoming a key part of a team that values your contributions and invests in your growth. Together, we aim to create a rewarding environment that sets the stage for long‑term success.

Data Privacy

To view Mach Industries candidate data privacy policy, please visit https://machindustries.com/privacy-policy.

Disclosures

This position may require access to information protected under U.S. export control laws and regulations, including the Export Administration Regulations (EAR) and the International Traffic in Arms Regulations (ITAR). Please note that any offer for employment may be conditioned on authorization to receive software or technology controlled under these U.S. export control laws and regulations without sponsorship for an export license.

Mach participates in E‑Verify and will provide the federal government with your Form I‑9 information to confirm that you are authorized to work in the U.S.

The salary range for this role is an estimate based on a wide range of compensation factors, inclusive of base salary only. Actual salary offers may vary based on (but not limited to) work experience, education and training, critical skills, and business considerations. Highly competitive equity grants are included in most offers and are considered part of Mach’s total compensation package. Mach offers benefits such as health insurance, retirement plans, and opportunities for professional development.

Mach is an equal opportunity employer committed to creating a diverse and inclusive workplace. All qualified applicants will be treated with respect and receive equal consideration for employment without regard to race, color, creed, religion, sex, gender identity, sexual orientation, national origin, disability, uniform service, Veteran status, age, or any other protected characteristic per federal, state, or local law, including those with a criminal history, in a manner consistent with the requirements of applicable state and local laws. If you’d like to defend the American way of life, please reach out!