Principal Network Engineer

Cambridge, MA USA · Alewife, Cambridge · USD 204,000-272,000 · 10+ years experience · Remote · Posted Oct 19, 2026

At a glance

LILA Sciences is seeking a Principal Network Engineer to act as the senior technical owner of their fast-growing, multi-site network spanning corporate offices, autonomous labs, and OT/robotics environments.
This is a hands-on, senior IC role focused on building in-house engineering capability to design, secure, and scale global networks while increasing the value of managed service provider relationships.
The role offers real influence over network architecture decisions that determine how quickly and safely new labs and AI Science Factories come online.

Own the architecture, design, and roadmap for Lila’s global network, including SD-WAN/SASE, enterprise firewalls, and secure remote access.
Lead VLAN, subnet, and segmentation design across corporate IT, lab, and OT environments.
Design IT/OT convergence patterns that keep production labs safe, segmented, observable, and reliable.
Drive network infrastructure migration and hardening, including firewall-to-SASE cutovers and maintenance windows.
Build network visibility, monitoring, and telemetry to detect issues before they affect scientists or lab operations.
Establish scalable standards for DNS, IP addressing, and naming conventions across labs, buildings, and geographies.
Serve as the senior escalation point for complex network incidents, and create runbooks that help the broader IT team self-serve.
Manage network-focused MSPs and vendors while insourcing the highest-value engineering work over time.
Mentor other network engineers and represent network engineering in planning for lab buildouts and facility expansions.
Advise leadership on network architecture tradeoffs across security, cost, reliability, and delivery speed.

Typically 10+ years of progressive network engineering experience, or equivalent depth in designing and operating multi-site networks.
Deep hands-on expertise with SD-WAN/SASE platforms such as Cato Networks or similar.
Strong experience with enterprise firewalls, routing platforms, switching, VLAN segmentation, and subnetting at scale.
Experience securing and connecting both corporate IT and OT, industrial, or lab-instrumentation networks.
Practical experience implementing network segmentation, zero-trust concepts, and secure remote access.
Proven ability to manage MSPs and vendors while improving technical outcomes and accountability.
Strong troubleshooting skills and comfort serving as the senior escalation point for production-impacting network issues.
Excellent communication skills, including translating network architecture decisions for technical and non-technical stakeholders.

Experience in life sciences, biotech, pharma, or advanced manufacturing environments with lab automation or robotics on the network.
Industry certifications such as CCNP/CCIE, JNCIP/JNCIE, or equivalent.
Cloud networking experience with AWS VPC, Transit Gateway, Direct Connect, or similar.
Experience with infrastructure-as-code for network configuration, such as Terraform, Ansible, or similar.
Familiarity with identity and access patterns, such as SSO/IdP, Keycloak, or similar, as they intersect with network and remote access design.
Experience operating in SOC 2 or similarly regulated security environments.
Prior experience building an internal network engineering function that reduced reliance on outside vendors or MSPs.

Competitive base compensation with bonus potential and generous early-stage equity
Medical, dental, and vision coverage
Employer-paid life and disability insurance
Flexible time off with generous company wide holidays
Paid parental leave
Educational assistance program
Commuter benefits, including bike share memberships for office based employees
Company subsidized lunch program