What You'll Do
Leadership, Team and Vendor Management
- Lead, mentor, and develop a small team of network and security engineers, providing technical guidance and career development.
- Set team priorities, manage workloads, and ensure 24/7 operational coverage through on-call rotations and escalation protocols.
- Manage external vendors, holding all parties accountable to defined SLAs, quality standards, and outcomes.
Network Architecture and Design
- Own end-to-end enterprise network architecture, including LAN/WAN, SD-WAN, wireless, and OT/IT segmentation.
- Architect scalable, high-availability solutions supporting manufacturing operations, IoT devices, and enterprise applications.
- Lead routing and switching design (BGP, OSPF, VLAN segmentation, QoS) and manage equipment lifecycle.
- Maintain network architecture diagrams, standards documentation, and lifecycle roadmaps; evaluate emerging technologies and vendors to address capability gaps.
Cloud Networking
- Design, implement, and manage networking constructs including VPCs, Transit Gateways, Direct Connect, VPN, Security Groups, and NACLs.
- Architect hybrid connectivity between on-premises sites and cloud services, ensuring low-latency, secure, and resilient integration.
- Partner with engineering and DevOps teams to define network guardrails, tagging standards, and organization-level policies.
- Optimize cloud networking costs and performance through right-sizing and architectural reviews.
Network Security
- Lead design and enforcement of network security policies, including firewall rule management, ZTNA, NAC, and micro-segmentation.
- Manage firewalls, IDS/IPS, proxies, and related security appliances through their full lifecycle.
- Oversee vulnerability assessments and penetration test scoping; ensure timely remediation and report risk to stakeholders.
- Support compliance activities (NIST, SOC 2, ISO 27001, etc.) through controls documentation, audit evidence, and remediation execution.
Operations & Incident Management
- Lead day-to-day network operations, ensuring high availability and performance across enterprise and manufacturing segments.
- Serve as the senior escalation point for network and security incidents, both internal and vendor-related.
- Oversee network monitoring platforms (e.g. Grafana, Datadog, LogicMonitor, etc.); define alerting thresholds, dashboards, and response runbooks.
- Drive root cause analysis (RCA) investigations and publish findings and corrective action plans for senior leadership.
- Manage ticketing workflows, ensuring SLA adherence for network-related work orders.
Stakeholder Collaboration & Governance
- Act as the primary network engineering liaison to IT leadership, OT engineering, manufacturing operations, and engineering teams.
- Participate in capacity planning, capital budgeting, and vendor contract negotiations.
- Present network strategy, risk posture, and project updates to IT leadership and business stakeholders.
What You’ll Need
- Bachelor's degree in Computer Science, Information Technology, Network Engineering, or related field. Equivalent experience considered.
- 10+ years of progressive network engineering experience, with at least 3 years in a people management or technical lead role.
- Demonstrated experience architecting enterprise-grade network solutions in a manufacturing, industrial, or highly regulated environment.
- 5+ years of hands-on experience with AWS networking services (VPC, Transit Gateway, Direct Connect, Route 53, WAF, Security Groups).
- Proven experience in network security device management including NGFWs (Palo Alto, Fortinet, Cisco), IDS/IPS, NAC, CASB/SASE, and Web Filtering platforms.
- Strong background in routing and switching protocols: BGP, OSPF, EIGRP, MSTP, VLANs, and QoS.
- Experience with wireless network design and management (Cisco Meraki, Aruba, or equivalent) across large, distributed campuses.
- Certification(s) in CCNP Enterprise or CCIE, AWS Certified Advanced Networking – Specialty, CISSP or CISM, Palo Alto PCNSE, AWS Solutions Architect – Professional, ITIL v4 Foundation, etc.
Technical Skills
- Network platforms: Cisco (IOS-XE/XR/NX-OS), Palo Alto, Juniper, Meraki, Fortinet
- Cloud Networking: AWS VPC, Transit Gateway, Direct Connect, VPN, WAF, Security Groups, NACLs
- Security Tools: Firewalls, IDS/IPS, SIEM (Rapid7/Splunk/Palo Alto), NAC (Cisco ISE/Aruba ClearPass), Vulnerability Scanners
- Protocols: BGP, OSPF, EIGRP, STP/MSTP, VXLAN, DMVPN, MPLS, 802.1x, QoS
- Wireless: Enterprise Wi-Fi 6/6E, WPA3, WLAN controllers, RF design and site surveys
Compensation: Salary Range $200,000—$280,000 USD, plus equity and benefits.
AtomicmachinesEmeryville, CA
