Principal Network Engineer
$135,000–$165,000 year
On-siteSanta Fe Springs, California, United States
Job Summary
Design and deliver the platform network across all Vela sites, including new facility standups, covering LAN/WAN, SD-WAN, firewalls, switching, and wireless. Establish network segmentation and isolation of shop-floor OT from enterprise IT in line with CMMC Level 2 and NIST SP 800-171 requirements. Remediate site connectivity problems by assessing current-state issues and evaluating options against ITAR/CUI data-handling requirements. Stand up new facilities with standardized, repeatable architecture and partner with cloud engineering to secure connectivity between on-prem sites and AWS GovCloud. Own foundational network services, including plant-floor wireless, core services, load balancing, and site-to-site VPN, while establishing visibility through monitoring and documentation. Sustain reliability by supporting a 24/7 manufacturing operation via an escalation/on-call rotation and provide technical direction to junior engineers.
Required Qualifications
- 10+ years of network engineering experience, including multi-site enterprise networks
- Deep hands-on expertise with enterprise routing, switching, and next-generation firewalls (e.g., Cisco, Juniper, Arista, Palo Alto, Fortinet, or similar)
- Proven experience designing segmented networks and OT/IT separation in manufacturing, industrial, or regulated environments
- Working knowledge of network security controls — boundary protection, segmentation, and encryption in transit (NIST SP 800-171 / CMMC familiarity a plus)
- Strong command of core network services (DNS, DHCP, IPAM), load balancing, VPN at scale, and network monitoring
- Experience standing up network infrastructure for new facilities from the ground up
- Ability to work onsite, including hours outside of a normal working day, to meet critical deadlines
- Ability to work safely in a manufacturing environment, including walking the production floor, climbing stairs or ladders, occasionally lifting up to 25 pounds, and wearing required personal protective equipment (PPE)
- This position requires the use of information or access to hardware subject to the International Traffic in Arms Regulations (ITAR). All applicants must be U.S. persons as defined by ITAR
- Able to obtain and maintain a U.S. security clearance
Desired Qualifications
- Palo Alto, Fortinet, or similar a plus
- Aerospace, defense, or other regulated precision-manufacturing experience
- Hands-on OT/ICS networking and familiarity with the Purdue model
- Experience with industrial/plant-floor wireless and ruggedized environments
- Experience mentoring engineers or leading a small network team
- Experience connecting on-prem environments to AWS GovCloud
- Relevant certifications a plus (e.g., CCNP/CCIE, JNCIP, PCNSE, or equivalent)
- Bachelors in a technical field or equivalent hands-on experience
Hiring someone like this?
Get your role in front of qualified candidates on Sorce.