Senior Network Security Engineer

Gordon Food Service•Atlanta, GA

1d•Hybrid

About The Position

The Senior Network Security Engineer designs, architects, implements, and continuously improves the organization’s network security strategy across hybrid, cloud, and operational technology environments. Working across Security, Cloud, Infrastructure, and Network teams, this role advances identity-aware enforcement and Zero Trust principles, shifting from traditional IP-based security models toward access decisions informed by user identity, device posture, risk signals, and least privilege. The role serves as a technical authority for network security architecture standards, engineering patterns, and technology direction. It drives modernization, reduces operational silos, and establishes consistent network security policy enforcement across on-premises, cloud, and third-party environments. The position also provides senior technical leadership during network-related cybersecurity incidents, supports enterprise architecture initiatives, and mentors engineers and partner teams. The schedule is Monday through Friday, 8:00 a.m. to 5:00 p.m., with a hybrid arrangement of four days in the office and one day working from home. Participation in a rotating 24/7 on-call schedule is required, approximately one week every three weeks.

Requirements

Five or more years of experience designing, implementing, and supporting enterprise-scale security architectures.
Bachelor’s degree in Information Security, Computer Science, Engineering, Information Technology, or a related field; an equivalent combination of education and experience may be considered.
Expert-level knowledge of physical and virtual NGFWs, SASE, ZTNA, micro-segmentation, and modern network security architectures.
Deep understanding of identity-centric security and integrating IAM attributes, device posture, contextual signals, and risk-based access controls into network policy enforcement.
Experience designing and securing multi-cloud environments, including AWS, Azure, and GCP, with knowledge of cloud-native networking, security services, transit architectures, and application delivery frameworks.
Strong knowledge of cloud transit architectures, security service edge technologies, software-defined networking, and hybrid connectivity solutions.
Deep understanding of NDR, network telemetry, traffic analytics, and threat detection methodologies.
Experience with IaC, automation frameworks, and policy-as-code solutions such as Terraform, Ansible, Python, GitOps, or equivalent platforms.
Strong understanding of enterprise PKI, certificate lifecycle management, encryption technologies, and secure communications protocols.
Knowledge of OT and ICS security principles, segmentation strategies, and risk mitigation approaches.
Demonstrated ability to analyze and troubleshoot complex cross-domain networking, security, cloud, and identity-related challenges.
Strategic thinking and ability to eliminate operational silos, establish standards, and drive long-term architectural improvements.
Project leadership experience managing large-scale infrastructure transformations, security modernization initiatives, and cross-functional programs.
Excellent communication, presentation, and interpersonal skills, including the ability to explain technical concepts to technical and non-technical audiences.
Ability to influence architectural decisions and build consensus among diverse stakeholder groups.
Ability to manage multiple priorities, work independently, and deliver high-quality outcomes in a fast-paced environment.
Ability to develop innovative solutions to complex technical problems using industry best practices, established standards, and organizational objectives.
Ability to work Monday through Friday, 8:00 a.m. to 5:00 p.m., in a hybrid arrangement of four office days and one work-from-home day, and participate in a rotating 24/7 on-call schedule approximately one week every three weeks.

Responsibilities

Lead the design, implementation, and continuous improvement of enterprise security infrastructure, emphasizing governance, scalability, resiliency, and secure architecture in collaboration with other GTS teams.
Serve as the primary technical engineering lead for migration from legacy proxy and remote access technologies to SASE and ZTNA platforms.
Develop and maintain network security reference architectures, engineering standards, design patterns, and implementation roadmaps supporting Zero Trust, cloud adoption, regulatory compliance, and business objectives.
Collaborate with Cloud and On-Premise Network teams to ensure infrastructure, routing, SD-WAN, and connectivity services incorporate security-by-design while maintaining performance and reliability.
Partner with IAM teams to integrate identity attributes, device posture, risk signals, SAML, OIDC, and directory services into dynamic network access control and policy enforcement.
Contribute to the architecture, engineering, and operational management of the enterprise security transit layer to provide consistent policy enforcement across cloud providers, on-premises infrastructure, partner networks, and vendor-hosted environments.
Design and oversee a global unified segmentation strategy using NGFWs, micro-segmentation technologies, and cloud-native security controls across data centers and cloud environments.
Design and maintain secure segmentation architectures for OT and ICS environments that protect them from enterprise network threats while supporting operational requirements and business continuity.
Act as the primary technical stakeholder for NDR platforms, ensuring visibility, telemetry collection, threat detection, and integration with enterprise security monitoring solutions.
Lead engineering and security posture for infrastructure services including DNS security, WAF, DDoS protection, load balancing, and secure application delivery platforms.
Establish encryption standards, certificate lifecycle automation, secure communication protocols, and cryptographic best practices for data in transit.
Design and implement IaC, automation, and policy-as-code solutions to deploy, maintain, validate, and audit network security controls across hybrid environments.
Provide senior-level technical leadership during cybersecurity incidents involving network infrastructure, cloud connectivity, segmentation boundaries, access control systems, and network-based threats.
Define and monitor security engineering metrics related to network visibility, segmentation effectiveness, policy compliance, and Zero Trust maturity.
Evaluate emerging network security technologies, industry trends, and architectural approaches, and recommend options supporting modernization and roadmap initiatives.
Participate in the Cross-Functional Architecture Group, providing security expertise and influencing secure enterprise technology design.
Mentor engineers and provide technical guidance to Security, Cloud, Infrastructure, and Network teams on architecture, engineering standards, operational best practices, and technology adoption.
Perform other duties and responsibilities as assigned.