Senior Manager, Network Engineering

The Role

We are seeking a hands-on Network Manager to lead the architecture, design, implementation, and day-to-day operation of Mach's enterprise and operational technology (OT) networks across all sites.

The successful candidate will be responsible for building and maintaining secure, reliable, and scalable network infrastructure, including implementing network segmentation to protect systems and data subject to CUI and ITAR requirements. This role combines technical leadership with hands-on engineering, overseeing network operations while developing and mentoring a small network team.

The Network Manager will also lead network infrastructure planning and deployment for two upcoming site openings and own network-related security controls and evidence supporting NIST SP 800-171 and CMMC Level 2 compliance.

Key Responsibilities

• Own network architecture and standards for all sites: LAN/WLAN, WAN/SD-WAN, firewalls, VPN/ZTNA, DNS/DHCP/IPAM, and out-of-band management.
• Design and deliver the network for the two planned sites, from site survey and cabling spec through cutover.
• Enforce segmentation - CUI enclave, ITAR zones, guest/BYOD, lab/test, and OT on the Purdue model - and own the firewall rulebase and its change process.
• Own the network-side NIST SP 800-171 / CMMC Level 2 controls and produce the evidence; feed network telemetry to Security's detection platform.
• Run network operations: monitoring, capacity, firmware and patch lifecycle, vendor support, outage response, and on-call.
• Lead the network dependencies of the Microsoft 365 GCC High migration and the Okta device-binding rollout.
• Manage network vendors and carriers; own the network capex/opex line.
• Hire and develop the network engineers and set the documentation standard (as-builts, diagrams, configs under version control, runbooks).

Required Qualifications

• 8+ years in network engineering, including 2+ years leading a network team in a hands-on role.
• Previous experience designing and delivering networks for multiple sites, including at least one greenfield site build.
• Expert in enterprise routing/switching, wireless, next-generation firewalls, SD-WAN, and VPN/ZTNA on at least two major platforms (Cisco, Arista, Juniper, Palo Alto, Fortinet, Meraki, or similar).
• Network security and segmentation design; has met NIST SP 800-171 boundary-protection and remote-access requirements or an equivalent framework.
• Budget ownership and vendor/carrier management.

Preferred Qualifications

• Experience supporting network environments within the defense, aerospace, or cleared-facility industries.
• Familiarity with OT/ICS networking, including the Purdue Model and IEC 62443 standards.
• Experience implementing zero-trust network architectures and Secure Access Service Edge (SASE) solutions.
• Experience with Microsoft 365 Government Community Cloud High (GCC High).
• Relevant industry certifications, such as CCNP, CCIE, PCNSE, or NSE 7.

Additional Requirements

• Available to work extended hours and weekends as needed.
• Willingness to travel around 25-30% as needed during new site development.

ITAR Requirements

To conform to U.S. Government export regulations, applicant must be a (i) U.S. citizen or national, (ii) U.S. lawful, permanent resident (aka green card holder), (iii) Refugee under 8 U.S.C. § 1157, or (iv) Asylee under 8 U.S.C. § 1158, or be eligible to obtain the required authorizations from the U.S. Department of State. Learn more about the ITAR here.

Pay Range $140,000 - $180,000 USD

At Mach, we believe that compensation is more than just a paycheck. It's a comprehensive package designed to reward the time, skills, and expertise you bring to our team. We are committed to offering competitive compensation that is equitable, transparent, and aligned with market trends.

Key Elements of Our Compensation Philosophy

• Competitive Salaries: We continuously research market rates to ensure our salaries are competitive with those in our industry and geographic location.
• Performance-Based Incentives: Our bonus structure is tied to both individual and company performance, creating a win-win scenario that motivates our team members to excel.
• Equity Participation: We offer stock options or equity to employees, ensuring that you share in the success and growth of the company.
• Benefit Packages: Our benefits include healthcare, dental and vision plans, retirement savings, and paid time off, because we understand that your well-being extends beyond the office.
• Professional Development: We allocate funds for continuing education, training, and career growth.
• Transparency: We are committed to openness about our compensation tiers and how decisions are made, ensuring trust and mutual respect.

By joining Mach, you're not just accepting a job-you're becoming a key part of a team that values your contributions and invests in your growth. Together, we aim to create a rewarding environment that sets the stage for long-term success.

Data Privacy

Disclosures

This position may require access to information protected under U.S. export control laws and regulations, including the Export Administration Regulations (EAR) and the International Traffic in Arms Regulations (ITAR). Please note that any offer for employment may be conditioned on authorization to receive software or technology controlled under these U.S. export control laws and regulations without sponsorship for an export license.

The salary range for this role is an estimate based on a wide range of compensation factors, inclusive of base salary only. Actual salary offers may vary based on (but not limited to) work experience, education and training, critical skills, and business considerations. Highly competitive equity grants are included in most offers and are considered part of Mach's total compensation package. Mach offers benefits such as health insurance, retirement plans, and opportunities for professional development.