{"id":1203146,"url":"https://alion.io/job/cargill-senior-network-security-engineer-sase","title":"Senior Network Security Engineer - SASE","company":{"id":452956,"name":"Cargill","domain":"cargill.com","url":"https://alion.io/company/cargill-3","size_band":"5000+","is_staffing_agency":false,"is_intermediary":false,"listed_via":null,"ats_vendor":"SuccessFactors","truth_index":null},"role":"Security","role_family":"Security","seniority":"senior","employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Atlanta, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":107000,"max_usd":214000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":659},"experience_years_min":5,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Agile","optional":false},{"name":"Ansible","optional":false},{"name":"AWS","optional":false},{"name":"Azure","optional":false},{"name":"Configuration Management","optional":false},{"name":"DHCP","optional":false},{"name":"DLP","optional":false},{"name":"DNS","optional":false},{"name":"GCP","optional":false},{"name":"GitHub","optional":false},{"name":"Microsoft Entra ID","optional":false},{"name":"Okta","optional":false},{"name":"Ping Identity","optional":false},{"name":"PowerShell","optional":false},{"name":"Python","optional":false},{"name":"Rest API","optional":false},{"name":"SIEM","optional":false},{"name":"TCP/IP","optional":false},{"name":"Terraform","optional":false},{"name":"VPN","optional":false},{"name":"Zero Trust","optional":false},{"name":"Zscaler","optional":false}],"status":"live","first_seen_at":"2026-09-05T02:00:00Z","employer_posted_date":"2026-09-05","last_verified_at":"2026-09-24T23:53:39Z","board_verified":true,"closed_at":null,"days_open":19,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":19},"description":"Cargill is committed to providing food and agricultural solutions to nourish the world in a safe, responsible, and sustainable way. Sitting at the heart of the supply chain, we partner with farmers and customers to source, make and deliver products that are vital for living.\nOur 155,000 team members innovate with purpose, providing customers with life’s essentials so businesses can grow, communities prosper, and consumers live well. With over 160 years of experience as a family company, we look ahead while remaining true to our values. We put people first. We reach higher. We do the right thing-today and for generations to come.\nJob Purpose and Impact\nThe Senior Network Engineer - SASE will lead the design, deployment, automation, operation, and continuous improvement of Cargill's global Secure Access Service Edge (SASE) and Security Service Edge (SSE) capabilities. This role will help transform secure connectivity by migrating legacy web proxy and remote-access technologies to cloud-delivered security services, including Secure Web Gateway (SWG), Zero Trust Network Access (ZTNA), Cloud Access Security Broker (CASB), Data Loss Prevention (DLP), and threat protection. The engineer will provide technical leadership across network, security, identity, cloud, endpoint, and application teams to deliver reliable, scalable, and policy-driven access for users, sites, and applications.\nKey Accountabilities\nNETWORK SOLUTIONS: Designs, implements and maintains network solutions to meet organizational needs, including creating network diagrams and blueprints.\nNETWORK DEVICES CONFIGURATION: Sets up and configures various complex network devices such as routers, switches, firewalls, virtual private networks and software defined networking to maintain optimal performance and security.\nTROUBLESHOOTING & DIAGNOSTICS: Performs complex troubleshooting and diagnostics to resolve network issues, ensuring minimal downtime and maintaining network reliability.\nNETWORK MAINTENANCE: Leads routine maintenance and updates on network systems, including applying patches, service packs and security configurations.\nPERFORMANCE MONITORING & OPTIMIZATION: Monitors network performance, maintains system availability and reliability, and makes necessary adjustments to optimize performance.\nSECURITY MEASURES: Sustains network security by leading the implementation of appropriate measures such as firewalls, intrusion detection systems and encryption technologies.\nDISASTER RECOVERY PLANNING: Develops and implements disaster recovery plans to ensure business continuity in case of network failures.\nNETWORK AUTOMATION: Develops and implements automation and tools to streamline network operations, including configuration management, device provisioning and software updates.\nQualifications\nMinimum requirement of 4 years of relevant work experience. Typically reflects 5 years or more of relevant experience.\nMinimum of 5 years of relevant experience in network engineering, network security, or cybersecurity engineering.\nHands-on experience implementing and supporting SASE or SSE solutions in an enterprise environment.\nExperience deploying and managing SWG and ZTNA technologies.\nStrong understanding of enterprise networking fundamentals, including TCP/IP, routing, switching, DNS, DHCP, VPNs, SSL/TLS, certificates, and network security principles.\nExperience troubleshooting complex connectivity, authentication, and application-access issues across hybrid and cloud environments.\nPreferred:\nExperience implementing and administering one or more leading SASE/SSE platforms, such as Netskope, Palo Alto Prisma Access, Zscaler Internet Access (ZIA), or Zscaler Private Access (ZPA).\nExperience designing, implementing, and supporting enterprise firewall platforms, such as Check Point, Palo Alto Networks, or Fortinet, including security policy management, network segmentation, NAT, VPN connectivity, and integration with SASE architectures.\nDeep understanding of SWG capabilities, including URL filtering, SSL/TLS inspection, cloud application visibility and control, malware protection, DLP, threat prevention, and policy enforcement.\nExperience designing ZTNA solutions for secure access to private applications and reducing reliance on traditional VPN technologies.\nExperience with SASE traffic steering and service components, including endpoint clients, GRE/IPsec tunnels, private access connectors or publishers, dedicated egress, and high-availability designs.\nStrong understanding of identity-driven security and integration with Microsoft Entra ID, Okta, Ping Identity, or similar identity providers using SAML, OAuth, OIDC, and SCIM.\nExperience integrating SASE platforms with endpoint security, SIEM, XDR, and security operations workflows.\nKnowledge of cloud networking and security architectures across AWS, Azure, and Google Cloud Platform.\nExperience with policy lifecycle management, security posture assessments, exception governance, and change control for cloud-delivered security services.\nExperience with automation and scripting using Python, PowerShell, REST APIs, Terraform, Ansible, GitHub, or similar tools.\nExperience with network, security, and digital-experience observability tools used to monitor user experience, application performance, and security events.\nAbility to develop technical architecture documentation, low-level design artifacts, implementation plans, operational runbooks, and support models for SASE deployments.\nExperience working within Agile engineering teams using modern engineering and DevSecOps practices.\nDemonstrated ability to provide technical leadership, mentor engineers, and collaborate across network, security, identity, cloud, endpoint, and application teams.\nEqual Opportunity Employer, including Disability/Vet.","description_format":"text","description_chars":5791,"description_truncated":false,"requirements":{"experience_years_min":5,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Network Security","Artificial Intelligence","Food & Beverages","Natural Resources"],"lifecycle":[{"event":"open","at":"2026-09-24T22:17:27Z"}],"liveness":{"score":54,"band":"ok","label":"Likely open","p_open":1,"p_active":0.724,"p_room":0.75,"age_days":19,"expected_fill_days":22,"reasons":["conf:2","win:late","comp:brand"],"computed_at":"2026-09-25T01:54:21Z"},"pay":null,"html_url":"https://alion.io/job/cargill-senior-network-security-engineer-sase","json_url":"https://alion.io/job/cargill-senior-network-security-engineer-sase.json","meta":{"generated_at":"2026-09-25T01:54:21Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","usage":{"tier":"crawler","counted_by":"address","units_charged":1,"used_today":1925,"day_limit":5000,"remaining_today":3075,"minute_limit":60,"resets_at":"2026-09-26T00:00:00Z"}}}