Senior Manager - Network and Information Security

About this Role:

This is a broad-responsibility, high-judgment team leader role within the IT team. The Senior Manager, Network and Information Security is a strategic leadership role responsible for architecting, building, and governing the enterprise network and security infrastructure across a high-tech manufacturing environment. This role blends deep technical expertise in network architecture, cloud networking, and cybersecurity with people management to build from the ground up and lead a small team of engineers and a bench of vendor and external resources to deliver secure, resilient, and scalable connectivity across all production and corporate sites. This is a hands-on leadership role: at hire, expect roughly 40% network architecture and management, 30% information security, and 30% people and department leadership.

This position serves as the principal authority on network and security, working cross-functionally with IT, engineering, and business stakeholders to align network capabilities with manufacturing operational goals.

This is a full-time, onsite position based in our Emeryville office (preferred) or Santa Clara office, with occasional work from the other office as needed.

What You’ll Do:

• Leadership, Team and Vendor Management
• Build the network and security function from the ground up, staying hands-on with technical implementation while hiring internal staff and building a bench of external resources.
• Directly supervise, mentor, and develop a very small team of network and security engineers, providing technical guidance, and career development for internal members.
• Set team priorities, manage workloads, and ensure 24/7 network operational coverage through effective on-call rotation and escalation protocols.
• Foster a culture of continuous improvement, knowledge sharing, and operational excellence within the network security team.
• Recruit, onboard, and retain top networking and security talent aligned with the organization's growth roadmap.
• Manage external network and security vendors, holding all parties accountable to defined SLAs, quality standards, and outcomes.
• Network Architecture and Design
• Lead and own the end-to-end enterprise network architecture strategy, including LAN/WAN, SD-WAN, wireless, interconnects, and OT/IT segmentation.
• Architect scalable, high-availability network solutions that support manufacturing operations, IoT devices, and enterprise applications.
• Evaluate and recommend emerging network technologies, vendors, and platforms to address capability gaps and future-state requirements.
• Develop and maintain comprehensive network architecture drawings, topology diagrams, standards documentation, and lifecycle roadmaps.
• Lead routing and switching design, including BGP, OSPF, VLAN segmentation, QoS, and equipment lifecycle management.
• Drive network automation and infrastructure-as-code (e.g., Terraform, Ansible, CloudFormation) in partnership with engineering teams.
• AWS Cloud Networking
• Design, implement, and manage AWS networking constructs including VPCs, Transit Gateways, Direct Connect, VPN connections, Security Groups, and NACLs.
• Architect hybrid connectivity between on-premises manufacturing sites and AWS cloud environments, ensuring low-latency, secure, and resilient integration.
• Partner with engineering and DevOps teams to define and enforce network guardrails, tagging standards, and AWS Organizations-level networking policies.
• Optimize AWS networking costs and performance through right-sizing, traffic engineering, and architectural reviews.
• Network Security
• Lead the design and enforcement of network security policies, including firewall rule management, zero-trust network access (ZTNA), network access control (NAC), and micro-segmentation.
• Secure production and OT environments (e.g., ICS/SCADA), applying frameworks such as IEC 62443 to segment production networks without disrupting operations.
• Oversee network vulnerability assessments and penetration test scoping; ensure timely remediation and deliver clear risk assessment reports to stakeholders.
• Manage the installation, configuration, and lifecycle of firewalls, IDS/IPS, proxies, and related security appliances.
• Support compliance activities (e.g., NIST, SOC 2, ISO 27001, etc.) through network controls documentation, audit evidence, and remediation execution.
• Create management processes to keep all network equipment current and hardened against known vulnerabilities.
• Work with team members to facilitate Purple Team and Table Top Exercises.
• Operations & Incident Management
• Lead day-to-day network operations, ensuring high availability, performance, and reliability across all enterprise and manufacturing network segments.
• Resolve break/fix incidents on network security systems, serving as the senior technical escalation point for both internal engineers and external vendors.
• Oversee network monitoring platforms (e.g., Grafana, Datadog, LogicMonitor, etc); define alerting thresholds, dashboards, and response runbooks.
• Lead incident response for high-severity network outages, serving as the escalation point from the 24/7 operational support team.
• Drive root cause analysis (RCA) investigations; author and publish detailed RCA reports and corrective action plans for senior leadership.
• Manage ticketing workflows, ensuring SLA adherence for network-related work orders and user-reported issues.
• Stakeholder Collaboration & Governance
• Act as the primary network engineering liaison to IT leadership, OT engineering, manufacturing operations, and engineering teams.
• Participate in capacity planning, capital expenditure budgeting, and vendor contract negotiations for network infrastructure.
• Present network strategy, risk posture, and project updates to IT leadership and business stakeholders.

What You’ll Need:

• 10+ years of progressive network engineering experience, with at least 3 years leading network and security functions as a people manager or technical lead.
• Demonstrated experience architecting enterprise-grade network solutions in a manufacturing, industrial, or highly regulated environment, including OT/IT segmentation, NAC, and Zero Trust.
• 5+ years of hands-on experience with AWS networking services (VPC, Transit Gateway, Direct Connect, Route 53, WAF, Security Groups).
• Proven experience in network security device management including NGFWs (Palo Alto, Fortinet, Cisco), IDS/IPS, NAC, CASB/SASE, and Web Filtering platforms.
• Strong background in routing and switching protocols: BGP, OSPF, EIGRP, MSTP, VLANs, and QoS.
• Experience with wireless network design and management (Cisco Meraki, Aruba, or equivalent) across large, distributed campuses.
• Bachelor's degree in Computer Science, Information Technology, Network Engineering, or related field. Equivalent experience considered.

Nice to Have:

• Built a network and security function from scratch at a fast-growing manufacturing or hardware company, using internal staff, external resources, or both.
• Manufacturing OT security experience (ICS/SCADA, IEC 62443, segmentation of production networks).
• Network automation and infrastructure-as-code (e.g., Terraform, Ansible, CloudFormation, or similar).
• Compliance (NIST, SOC 2, ISO 27001), incident response, and root cause analysis ownership.
• Certifications such as CCNP or CCIE, AWS Certified Advanced Networking – Specialty, CISSP or CISM, or Palo Alto PCNSE.

Technical Skills:

• Network platforms Cisco (IOS-XE/XR/NX-OS), Palo Alto, Juniper, Meraki, Fortinet
• Cloud Networking: AWS VPC, Transit Gateway, Direct Connect, VPN, WAF, Security Groups, NACLs
• Security Tools: Firewalls, IDS/IPS, SIEM (Rapid7/Splunk/Palo Alto), NAC (Cisco ISE/Aruba ClearPass), Vulnerability Scanners
• Protocols: BGP, OSPF, EIGRP, STP/MSTP, VXLAN, DMVPN, MPLS, 802.1x, QoS
• Wireless: Enterprise Wi-Fi 6/6E, WPA3, WLAN controllers, RF design and site surveys

Atomic Machines is an equal opportunity employer that values diversity and does not discriminate based on characteristics protected by applicable law. We are committed to an inclusive interview experience, including for individuals with disabilities. To request an accommodation, contact [email protected]. To help our recruiting team manage application volume and respond to candidates more efficiently, Atomic Machines may use AI-assisted tools.