> Markdown version of [/jobs/ext/2548133-principal-network-engineer](https://www.wearedevelopers.com/jobs/ext/2548133-principal-network-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Principal Network Engineer - **Company:** VOTAW PRECISION TECHNOLOGIES LLC - **Location:** Santa Fe Springs, CA, United States - **Experience:** Expert - **Salary:** $135,000.0 - $165,000.0 - **Contract:** Permanent contract - **Skills:** Amazon Web Services, Cloud Engineering, Dynamic Host Configuration Protocol, Domain Name System (DNS), Virtual Private Networks (VPN), Network Security, Network Architecture, Network Control, Network Monitoring, Network Segmentation, Network Service, Remote Access Technology, Wide Area Networks, Computer Networking Systems, Load Balancing, Connectivity Problems, Firewalls (Computer Science), Juniper, Fortinet, Cisco - **Published:** August 8, 2026 - **Apply:** https://www.indeed.com/viewjob?jk=3eb6f35e63089489 ## About the Role * 10+ years of network engineering experience, including multi-site enterprise networks. * Deep hands-on expertise with enterprise routing, switching, and next-generation firewalls (e.g., Cisco, Juniper, Arista, Palo Alto, Fortinet, or similar). * Proven experience designing segmented networks and OT/IT separation in manufacturing, industrial, or regulated environments. * Working knowledge of network security controls - boundary protection, segmentation, and encryption in transit (NIST SP 800-171 / CMMC familiarity a plus). * Strong command of core network services (DNS, DHCP, IPAM), load balancing, VPN at scale, and network monitoring. * Experience standing up network infrastructure for new facilities from the ground up., * Aerospace, defense, or other regulated precision-manufacturing experience. * Hands-on OT/ICS networking and familiarity with the Purdue model. * Experience with industrial/plant-floor wireless and ruggedized environments. * Experience mentoring engineers or leading a small network team. * Experience connecting on-prem environments to AWS GovCloud. * Relevant certifications a plus (e.g., CCNP/CCIE, JNCIP, PCNSE, or equivalent). * Bachelors in a technical field or equivalent hands-on experience., * Highly self-motivated and directed. * Keen attention to detail. * Ability to effectively prioritize and execute tasks in a high-pressure environment. * Ability to work both independently and in a team-oriented, collaborative environment. Work Conditions * Ability to work onsite, including hours outside of a normal working day, to meet critical deadlines. * This position operates within a precision manufacturing environment supporting the production of mission-critical aerospace and defense components. Success requires a high sense of urgency, attention to detail, proactive problem-solving, and the ability to coordinate effectively across multiple departments to ensure uninterrupted manufacturing operations and customer delivery commitments. * Ability to work safely in a manufacturing environment, including walking the production floor, climbing stairs or ladders, occasionally lifting up to 25 pounds, and wearing required personal protective equipment (PPE). Additional Requirements * This position requires the use of information or access to hardware subject to the International Traffic in Arms Regulations (ITAR). All applicants must be U.S. persons as defined by ITAR. * Able to obtain and maintain a U.S. security clearance. ## Description The Principal Network Engineer will be the senior technical owner of Vela's network, responsible for designing, building, and securing connectivity across existing sites and new facility standups. This hands-on, high-autonomy role will architect and mature a segmented, multi-site network designed to meet CMMC Level 2 requirements. What You Will Own (Essential Functions) * Design and deliver the platform network across all Vela sites, including new facility standups - LAN/WAN, SD-WAN, firewalls, switching, and wireless. * Establish network segmentation and isolation of shop-floor OT from enterprise IT in line with CMMC Level 2 / NIST SP 800-171 and a defense-in-depth (Purdue-model) architecture. * Remediate site connectivity problems- assess current-state connectivity, resolve reliability issues, and evaluate options (including any satellite/Starlink proposal) against ITAR/CUI data-handling requirements before adoption. * Stand up new facilities with standardized, repeatable network architecture that supports a fast acquisition-integration playbook. * Own boundary protection (next-generation firewalls and secure remote access, including jump/bastion hosts into controlled environments). Palo Alto, Fortinet, or similar a plus. * Partner with cloud engineering to secure connectivity between on-prem sites and AWS GovCloud (Direct Connect / VPN). * Own foundational network services - including plant-floor wireless, core services (DNS/DHCP/IPAM), load balancing, and site-to-site VPN across the platform. * Establish visibility - stand up network monitoring/NMS and maintain current network documentation and diagrams (also serving as CMMC audit evidence). * Sustain reliability - supporting a 24/7 manufacturing operation, including participation in an escalation/on-call rotation to protect production uptime. * Provide technical direction and mentorship to junior network engineers as the team grows., * Maintain 99.9%+ network availability supporting 24/7 manufacturing operations. * Maintain CMMC Level 2 / NIST 800-171 network security and audit readiness. * Implement effective IT/OT and CUI segmentation across all sites. * Deliver standardized, secure network infrastructure for new facilities and acquisitions. * Maintain current network monitoring, documentation, and configuration standards. * Resolve critical network issues within established SLA and production-impact targets. * Build scalable network standards and mentor the growing engineering team. ## Related Videos - [How Cisco embraced a DevOps culture within its network engineering team](https://www.wearedevelopers.com/videos/99-how-cisco-embraced-a-devops-culture-within-its-network-engineering-team) - [WeAreDevelopers LIVE - Back to CODE100](https://www.wearedevelopers.com/videos/1909-wearedevelopers-live-back-to-code100) - [Remote Driving on Plant Grounds with State-of-the-Art Cloud Technologies](https://www.wearedevelopers.com/videos/251-remote-driving-on-plant-grounds-with-state-of-the-art-cloud-technologies) - [Your Infrastructure Is Not a Playground: AI Agents for Infra Done Right](https://www.wearedevelopers.com/videos/2084-your-infrastructure-is-not-a-playground-ai-agents-for-infra-done-right) - [What makes Cybersecurity different for critical infrastructure?](https://www.wearedevelopers.com/videos/571-what-makes-cybersecurity-different-for-critical-infrastructure) - [Computer Vision from the Edge to the Cloud done easy](https://www.wearedevelopers.com/videos/263-computer-vision-from-the-edge-to-the-cloud-done-easy) ## Related Articles - [How We Built a Worry-Free System That Runs for 10+ Years – And What We’d Do Again](https://www.wearedevelopers.com/magazine/751-how-we-built-a-worry-free-system-that-runs-for-10-years-and-what-we-d-do-again) - [Highest Paying Tech Companies for Developers](https://www.wearedevelopers.com/magazine/220-highest-paying-tech-companies-for-developers) - [Is Software Engineering Over-Saturated?](https://www.wearedevelopers.com/magazine/418-is-software-engineering-over-saturated) - [Best Paying Jobs in Technology](https://www.wearedevelopers.com/magazine/256-best-paying-jobs-in-technology) - [Fully Remote Software Engineer Jobs](https://www.wearedevelopers.com/magazine/447-fully-remote-software-engineer-jobs) - [Best US AI Conferences for CTOs in 2026: Build vs. Buy, Vendor Evaluation, and Peer Intelligence](https://www.wearedevelopers.com/magazine/736-best-us-ai-conferences-for-ctos-in-2026-build-vs-buy-vendor-evaluation-and-peer-intelligence)