Senior Network Security Engineer

Gordon Food Service•Atlanta, GA

2d•Hybrid

About The Position

The Senior Network Security Engineer designs, architects, implements, and continuously improves the organization’s network security strategy across hybrid, cloud, and operational technology (OT) environments. Working across Security, Cloud, Infrastructure, and Network teams, the role advances identity-aware security enforcement and Zero Trust principles throughout the enterprise. The engineer serves as the technical authority for network security architecture standards, engineering patterns, and strategic technology direction. The position leads modernization from traditional IP-based security models toward identity-driven access controls informed by user identity, device posture, risk signals, and least-privilege principles. It also drives a unified and scalable approach to security policy enforcement across on-premises, cloud, partner, and third-party environments. The role includes technical leadership for SASE and ZTNA migration, enterprise segmentation, OT and ICS protection, network detection and response, infrastructure security services, encryption, and automation. It also provides senior technical guidance during cybersecurity incidents, mentors engineers and partner teams, and supports enterprise architecture initiatives. The regular schedule is Monday through Friday, 8:00 AM to 5:00 PM. The position follows a hybrid model with four days in the office and one day working from home. Participation in a rotating 24/7 on-call schedule is required, approximately one week every three weeks.

Requirements

Five or more years of experience designing, implementing, and supporting enterprise-scale security architectures.
Bachelor’s degree in Information Security, Computer Science, Engineering, Information Technology, or a related field; an equivalent combination of education and experience may be considered.
Expertise in network security, Zero Trust architecture, cloud security, and enterprise infrastructure.
Expert-level knowledge of physical and virtual NGFWs, SASE, ZTNA, micro-segmentation, and modern network security architectures.
Deep understanding of identity-centric security and integration of IAM attributes, device posture, contextual signals, and risk-based access controls into network policy enforcement.
Experience designing and securing multi-cloud environments, including AWS, Azure, and GCP, with knowledge of cloud-native networking, security services, transit architectures, and application delivery frameworks.
Strong knowledge of cloud transit architectures, security service edge technologies, software-defined networking, and hybrid connectivity solutions.
Deep understanding of NDR, network telemetry, traffic analytics, and threat detection methodologies.
Experience with IaC, automation frameworks, and policy-as-code solutions such as Terraform, Ansible, Python, GitOps, or equivalent platforms.
Strong understanding of enterprise PKI, certificate lifecycle management, encryption technologies, and secure communications protocols.
Knowledge of OT and ICS security principles, segmentation strategies, and risk mitigation approaches.
Demonstrated ability to analyze and troubleshoot complex networking, security, cloud, and identity challenges across domains.
Strategic thinking skills and the ability to eliminate operational silos, establish standards, and drive long-term architectural improvements.
Project leadership experience managing large-scale infrastructure transformations, security modernization initiatives, and cross-functional programs.
Excellent communication, presentation, and interpersonal skills, including the ability to explain technical concepts to technical and non-technical audiences.
Ability to influence architectural decisions and build consensus among diverse stakeholders.
Ability to manage multiple priorities, work independently, and deliver high-quality outcomes in a fast-paced environment.
Ability to develop innovative solutions to complex technical problems while applying industry best practices, established standards, and organizational objectives.

Responsibilities

Lead the design, implementation, and continuous improvement of enterprise security infrastructure, emphasizing governance, scalability, resiliency, and secure architecture.
Lead the technical engineering effort to migrate from legacy proxy and remote access technologies to SASE and ZTNA platforms.
Develop and maintain network security reference architectures, engineering standards, design patterns, and implementation roadmaps.
Collaborate with Cloud and On-Premise Network teams to ensure infrastructure, routing, SD-WAN, and connectivity services follow security-by-design principles while maintaining performance and reliability.
Partner with IAM teams to integrate identity attributes, device posture, risk signals, SAML, OIDC, and directory services into network access controls and policy decisions.
Contribute to the architecture, engineering, and operational management of the enterprise security transit layer across cloud providers, on-premises infrastructure, partner networks, and vendor-hosted environments.
Design and oversee a global unified segmentation strategy using NGFWs, micro-segmentation, and cloud-native security controls.
Design and maintain secure segmentation architectures for OT and ICS environments while supporting operational requirements and business continuity.
Act as the primary technical stakeholder for NDR platforms, supporting visibility, telemetry collection, threat detection, and integration with enterprise security monitoring.
Lead the engineering and security posture for DNS security, WAF, DDoS protection, load balancing, and secure application delivery services.
Establish encryption standards, certificate lifecycle automation, secure communication protocols, and cryptographic best practices for data in transit.
Design and implement IaC, automation, and policy-as-code solutions to deploy, maintain, validate, and audit network security controls across hybrid environments.
Provide senior technical leadership during cybersecurity incidents involving network infrastructure, cloud connectivity, segmentation, access controls, and network-based threats.
Define and monitor security engineering metrics for network visibility, segmentation effectiveness, policy compliance, and Zero Trust maturity.
Evaluate emerging network security technologies, industry trends, and architectural approaches, and recommend strategic modernization initiatives.
Participate in the Cross-Functional Architecture Group and provide security expertise for enterprise technology initiatives.
Mentor engineers and guide Security, Cloud, Infrastructure, and Network teams on architecture, engineering standards, operational practices, and technology adoption.
Perform other duties and responsibilities as assigned.