About Mach Industries
Founded in 2023, Mach Industries is a rapidly growing defense technology company focused on developing next-generation autonomous defense platforms. At the core of our mission is the commitment to delivering scalable, decentralized defense systems that enhance the strategic capabilities of the United States and its allies. With a workforce of approximately 350 employees, we operate with startup agility and ambition.
Our vision is to redefine the future of warfare through cutting-edge manufacturing, innovation at speed, and unwavering focus on national security. We are dedicated to solving the next generation of warfare with lethal systems that deter kinetic conflict and protect global security.
The Role
We are seeking a hands-on Network Manager to lead the architecture, design, implementation, and day-to-day operation of Mach's enterprise and operational technology (OT) networks across all sites. The successful candidate will be responsible for building and maintaining secure, reliable, and scalable network infrastructure, including implementing network segmentation to protect systems and data subject to CUI and ITAR requirements. This role combines technical leadership with hands-on engineering, overseeing network operations while developing and mentoring a small network team. The Network Manager will also lead network infrastructure planning and deployment for two upcoming site openings and own network-related security controls and evidence supporting NIST SP 800-171 and CMMC Level 2 compliance.
Key Responsibilities
Own network architecture and standards for all sites: LAN/WLAN, WAN/SD-WAN, firewalls, VPN/ZTNA, DNS/DHCP/IPAM, and out-of-band management.
Design and deliver the network for the two planned sites, from site survey and cabling spec through cutover.
Enforce segmentation — CUI enclave, ITAR zones, guest/BYOD, lab/test, and OT on the Purdue model — and own the firewall rulebase and its change process.
Own the network-side NIST SP 800-171 / CMMC Level 2 controls and produce the evidence; feed network telemetry to Security's detection platform.
Run network operations: monitoring, capacity, firmware and patch lifecycle, vendor support, outage response, and on-call.
Lead the network dependencies of the Microsoft 365 GCC High migration and the Okta device-binding rollout.
Manage network vendors and carriers; own the network capex/opex line.
Hire and develop the network engineers and set the documentation standard (as-builts, diagrams, configs under version control, runbooks).
Required Qualifications
8+ years in network engineering, including 2+ years leading a network team in a hands-on role.
Previous experience designing and delivering networks for multiple sites, including at least one greenfield site build.
Expert in enterprise routing/switching, wireless, next-generation firewalls, SD-WAN, and VPN/ZTNA on at least two major platforms (Cisco, Arista, Juniper, Palo Alto, Fortinet, Meraki, or similar).
Network security and segmentation design; has met NIST SP 800-171 boundary-protection and remote-access requirements or an equivalent framework.
Budget ownership and vendor/carrier management.
Preferred Qualifications
Experience supporting network environments within the defense, aerospace, or cleared-facility industries.
Familiarity with OT/ICS networking, including the Purdue Model and IEC 62443 standards.
Experience implementing zero-trust network architectures and Secure Access Service Edge (SASE) solutions.
Experience with Microsoft 365 Government Community Cloud High (GCC High).
Relevant industry certifications, such as CCNP, CCIE, PCNSE, or NSE 7.
Additional Requirements
Available to work extended hours and weekends as needed.
Willingness to travel around 25-30% as needed during new site development.
ITAR Requirements
To conform to U.S. Government export regulations, applicant must be a (i) U.S. citizen or national, (ii) U.S. lawful, permanent resident (aka green card holder), (iii) Refugee…