Position SummaryThe Lead, Network Engineering is responsible for designing, securing, and operating the enterprise connectivity fabric that enables all business and mission systems. This role ensures reliable, compliant, and high-performance connectivity across cloud, corporate, and secure environments.This is a working leadership role in a lean IT organization. You will set direction, define architecture, and execute hands-on network engineering while coordinating closely with Platform Engineering, Cybersecurity, and Digital & AI Engineering to ensure secure and integrated delivery.Essential Duties and ResponsibilitiesNetwork Architecture & StrategyDefine and maintain the enterprise network architecture across LAN/WAN, VPN, SD-WAN, and hybrid cloud environmentsDesign Azure connectivity (ExpressRoute, site-to-site VPN, virtual network architecture) aligned to GCCH constraintsEstablish network segmentation and boundary enforcement consistent with Zero Trust principles and CMMC requirementsMaintain documentation of network topology, boundaries, and system interconnections for audit and compliance purposesSecure Connectivity & OperationsOwn enterprise connectivity across physical sites, remote workforce, and cloud environmentsDesign and maintain firewall policies, routing configurations, and secure access controlsEnable secure remote access for distributed and mobile usersSupport SCIF and secure facility network requirements, including design, documentation, and compliance alignmentPerformance & ReliabilityMonitor network performance, availability, and capacity across all locationsIdentify and resolve performance bottlenecks impacting application and data workloadsEstablish and track SLAs for network uptime and recovery objectivesLead incident response efforts related to connectivity and network disruptionsSecurity & Compliance AlignmentPartner with Cybersecurity to implement and validate network security controls and segmentationEnsure transport-layer security meets FIPS 140-2/140-3 requirementsMaintain network boundary documentation and evidence required for CMMC assessmentSupport vulnerability remediation and security incident containment at the network layerIntegration & Cross-Pillar CoordinationPartner with Platform Engineering on cloud networking, private endpoints, and identity-aware accessSupport Digital & AI Engineering by designing data paths and connectivity for application and AI workloadsParticipate in CAB and ARB forums to assess network impact of changes and new designsSecondary ResponsibilitiesContribute to System Security Plan (SSP) documentation related to network architecture and boundariesSupport CMMC audit readiness activities, including documentation and evidence collectionParticipate in vendor evaluation and selection for networking hardware, services, and connectivity solutionsMentor junior engineers and contribute to hiring and onboarding effortsRequirementsExperience8–12+ years of experience in network engineering, infrastructure engineering, or cloud networkingExperience designing and operating enterprise network architectures across hybrid environmentsHands-on experience with Azure networking (or equivalent cloud platform)Experience supporting geographically distributed organizations with multiple sites and remote usersExperience working in regulated environments (CMMC, NIST, ISO, or equivalent)Technical SkillsExperience with Network technologies: routing, switching, VPN, SD-WAN, firewall configurationExperience with Cloud networking: Azure virtual networks, ExpressRoute, private endpointsExperience with Security: Zero Trust architecture, segmentation, encryption standardsExperience with Monitoring and troubleshooting tools for network performance and availabilityExperience with Documentation and diagramming of enterprise network architecturesLeadership & CommunicationAbility to operate as a technical leader and domain owner in a lean organizationStrong cross-functional collaboration skillsAbility to communicate technical concepts to both engineering teams and leadershipExperience coordinating work across multiple teams without direct authorityPreferred QualificationsExperience supporting SCIF or secure facility network environmentsFamiliarity with CMMC Level 2 requirements and audit expectationsExperience with network automation and infrastructure-as-code approachesExperience in a GovCon or similarly regulated environmentAttained industry recognized certifications such as CCNP, CCNA or some subset of those certifications (Cisco routing and switching for example).Experience or familiarity with the FortiNet suite of products and solutions.Security & Compliance RequirementsU.S. Citizenship requiredMust be eligible for security clearanceMust comply with all enterprise security and data handling policiesMust adhere to CMMC-mandated practices and training requirementsSpecial NoteWhat Makes You Successful HereYou think in terms of systems and connectivity, not just devices and configurationsYou understand that network design is foundational to security and performanceYou operate comfortably as both architect and operatorYou prioritize clarity, documentation, and repeatability in your workYou are effective in a lean environment, where ownership is broad and resources are limitedOrganizational Fit & Role ContextThis role is one of five pillar leadership positions within Enterprise IT. The team operates with shared accountability and a strong emphasis on cross-functional execution. The Lead, Network Engineering is responsible for ensuring that connectivity is never a constraint to business operations or technology delivery.Benefits and CompensationAt MAG Aerospace, we value your contributions providing our employees with a robust Total Rewards package that supports your total well-being. Full-time and part-time employees working at least 30 hours a week on a regular basis are eligible to participate in MAG's Total Rewards programs. Our offerings include health, life, disability, financial, and retirement benefits as well as paid leave, professional development, and tuition assistance. Individuals that do not meet the threshold are only eligible for select offerings not inclusive of health benefits. We encourage you to learn more about our Total Rewards Program by visiting the Resource page on our Careers site: https://www.magaero.com/benefits/. Salary at MAG Aerospace is determined by various factors including but not limited to location, the particular combination of education, knowledge, skills, competencies, and experience as well as contract-specific affordability and organizational requirements. The projected compensation range for this position is $165,000 to $175,000 (annualized USD). The estimate displayed represents the typical salary range for this position and is just one component of MAG's total compensation package for employees.
