Sr Principal Network Security Engineer

Primary Objective:

The Senior Principal Network Security Engineer is responsible for technical leadership, architecture,
design, implementation, and oversight of secure network infrastructures that protect organizational
systems and sensitive data, including Controlled Unclassified Information (CUI). This role serves as a
senior technical authority and subject matter expert (SME), providing strategic direction, hands-on
engineering, and mentorship while ensuring compliance with security frameworks and contractual
requirements.

Major Areas of Accountability:

Network Security Architecture & Engineering

• Design, implement, and maintain secure network architectures for on-premises, cloud, and
  hybrid environments
• Lead network segmentation, boundary protection, and zero-trust initiatives
• Design, document, and implement secure configurations for firewalls, routers, switches, VPNs,
  and load balancers
• Develop strategy to Ensure data inspection, encryption, and secure communications for all data
  movement (Inbound/outbound: Cloud, On-Prem, SaaS, PaaS, IOT)

Security Operations & Risk Management

• Identify, assess, and mitigate network-related security risks
• Review and approve network security designs and changes
• Support vulnerability management, penetration testing, and remediation efforts
• Analyze network security incidents and lead technical response efforts

Compliance & Governance

• Ensure network security controls align with NIST SP 800-171, CMMC Level 2, and CUI protection
  requirements
• Support audits, assessments, and security reviews by providing technical evidence and
  documentation
• Contribute to system security plans (SSPs), policies, procedures, and control implementations

Leadership & Collaboration

• Serve as a technical escalation point and SME for enterprise network security
• Mentor and guide network and security engineers
• Collaborate with IT, cloud, DevOps, and compliance teams
• Influence security strategy and roadmap development

Monitoring & Continuous Improvement

• Oversee network monitoring, logging, and alerting capabilities
• Evaluate and communicate emerging threats, technologies, and security best practices
• Recommend improvements to network security posture and resilience

Required Qualifications:

Education & Experience

• Bachelor's degree in computer science, Information Security, Engineering, or equivalent
  experience
• 8+ years of experience in network engineering, with significant focus on network security in a
  manufacturing environment
• Demonstrated experience designing and securing enterprise-scale networks (e.g., Palo
  Alto/Panorama SME)

Technical Skills

• Advanced knowledge of:
  
  
  
  • Firewalls (stateful, NGFW)
    
    
    
    • Palo Alto Networks
    
    
    
    
  • IDS/IPS
    
    
    
    • Palo Alto Networks
    
    
    
    
  • VPN technologies (IPsec, SSL/TLS)
    
    
    
    • Palo Alto Networks or Other
    
    
    
    
  • Network segmentation and access control in manufacturing (Purdue model)
  
  
  
  
• Experience with cloud network security (AWS, Azure, and/or GCP)
• Strong understanding of TCP/IP, routing, switching, and DNS
• Expert in threat remediation, including investigation, pen testing process, network monitoring
  and logging tools

Desired Qualifications:

• Enterprise scale Semiconductor and/or manufacturing experience
• Experience in federal contracting or regulated industries

Key Competencies:

• Technical leadership and decision-making
• Strong analytical and problem-solving skills
• Ability to communicate complex IT security concepts clearly
• Risk-based thinking and attention to detail
• Ability to work independently and influence across teams

The annual salary range for this role is $134,080 to 201,120. Pay offered is based on many factors including, but not limited to, the job-related experience, skills, education, and credentials of each candidate.

SkyWater offers an exciting environment where the brightest semiconductor minds come together to achieve exceptional results. We offer competitive salary and an opportunity to participate in incentive plans as well other employee financial benefits including 401k match, life insurance and opportunities to purchase SkyWater stock at a discounted rate.

Additionally, SkyWater offers a comprehensive benefits package which promotes a healthy life. This includes benefit eligibility day one, medical, dental, mental health benefits, vision, legal planning, short- and long-term disability, paid time off, paid holidays, an on-site fitness facility, and an on-site self-serve market.

SkyWater complies with federal and state disability laws and makes reasonable accommodations for applicants and employees with disabilities unless doing so would cause an undue hardship. Alternative methods of applying for employment are available to individuals unable to submit an application through this site because of a disability. To request reasonable accommodations, to participate in the job application or interview process, to perform essential job functions, and/or to receive other benefits and privileges of employment, please contact Human Resources at 952-851-5200 or Recruiting@SkyWatertechnology.com.

EOE, including disability/vets