{"id":3831376,"url":"https://alion.io/job/compass-group-usa-senior-network-security-engineer-remote","title":"SENIOR NETWORK SECURITY ENGINEER-(REMOTE)","company":{"id":1827105,"name":"Compass Group USA","domain":"compass-usa.com","url":"https://alion.io/company/compass-usa","size_band":"5000+","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"SuccessFactors","truth_index":{"grade":"A","score":100,"open_postings":297,"ghost_share":0,"stale_share":0,"repost_share":0,"time_to_fill_p50_days":4,"computed_at":"2026-11-08T05:47:12Z"}},"role":"Security","role_family":"Security","seniority":"senior","employment_type":null,"work_mode":"remote","remote_scope":"stated_countries","remote_scope_basis":"board_field","remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["United States"],"countries":["US"],"hiring_countries":["US"],"hiring_countries_total":1,"salary":{"min":120000,"max":140000,"currency":"USD","period":"year","gross":null,"usd_annual":140000},"salary_estimate":null,"experience_years_min":5,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AWS","optional":false},{"name":"AWS WAF","optional":false},{"name":"DHCP","optional":false},{"name":"DLP","optional":false},{"name":"DNS","optional":false},{"name":"ITIL","optional":false},{"name":"Least Privilege","optional":false},{"name":"Microsoft Entra ID","optional":false},{"name":"PowerShell","optional":false},{"name":"Python","optional":false},{"name":"TCP/IP","optional":false},{"name":"Terraform","optional":false},{"name":"Zero Trust","optional":false},{"name":"Zscaler","optional":false}],"status":"closed","first_seen_at":"2026-11-05T19:31:15Z","employer_posted_date":"2026-11-05","last_verified_at":"2026-11-08T10:52:08Z","board_verified":false,"closed_at":"2026-11-08T10:52:08Z","days_open":2,"trust":{"level":"not_scored","repost_count":null,"flags":[],"days_open":2},"description":"Salary: $120,000-$140,000\nCompass Technology is a dedicated internal team for Compass Group delivering enterprise-wide initiatives that support our diverse customer base and enhance our business operations. Our domain encompasses a vast spectrum of opportunities, from hands-on desk support to Cybersecurity, Cloud Engineering, AI, and Modern Application development. We are committed to building robust IT infrastructures, driving digital transformation, and much more.\n Job Summary\nThe Network Services team is responsible for building, supporting, and optimizing the Compass North American network in all on-premises and cloud environments. The Network Services team works hand in hand with all technology teams within the Enterprise Architecture and Shared Services Technology (EASST) division to support the goals of Compass Technology and Compass Group.\nThe Sr. Network Security Engineer is responsible for the design, deployment, and support of the organization’s secure network access and zero trust architecture across cloud and on-premises environments. This individual should be familiar with and leverage industry best practices when designing, deploying, configuring, and maintaining secure access solutions that protect users, applications, and data.\nThe Sr. Network Security Engineer is a technical leader within the Network Services team and is charged to understand the goals/objectives of that team and how it supports those of the Enterprise Architecture and Shared Services Technology division.\nThis role leads the design, deployment, and operations of the organization’s zero trust architecture, with primary ownership of the Zscaler suite (ZIA, ZPA, and ZTNA) across on-premises and AWS cloud environments. The Sr. Network Security Engineer partners with Cyber Security and Cloud teams to expand the ZPA footprint and advance zero trust access for private applications. An initial focus is a proof of concept evaluating Zscaler’s Zero Trust Exchange as a path to modernize private application connectivity in AWS.\n Job Responsibilities\nProvide inter-team / inter-technology research, collaboration, design, troubleshooting, and response supporting Compass on-prem and cloud environments\nLead platform optimization and long-term issue resolution efforts\nPerform backup and restore testing/validation weekly/monthly/quarterly\nProvide tier 3 support for incidents related to any technology owned and supported by the Network Services group \nServe as subject matter expert for the Zscaler Zero Trust Exchange - ZIA, ZPA, Zscaler Client Connector (ZCC), and ZDX - including tenant configuration, policy design, and lifecycle management\nDeploy, validate, and maintain ZPA App Connectors across AWS, on-premises, and branch environments to broker least-privilege, per-application access\nDesign and fine-tune granular access policies, including application segmentation, URL filtering, SSL/TLS inspection, cloud firewall, sandboxing, and data loss prevention (DLP)\nConfigure and maintain forwarding profiles, SSL inspection, and secure web gateway controls, tuning for security posture and user experience\nLead a proof of concept evaluating Zscaler’s Zero Trust Exchange for private application access in AWS, and, based on results, help define the roadmap for modernizing connectivity\nMonitor tenant health, security events, and digital experience using ZDX; troubleshoot client connectivity, authentication, and policy-enforcement issues using logs, packet captures, and HAR files\nIntegrate Zscaler with identity providers (Microsoft Entra ID) using SAML and OIDC for SSO, MFA, and conditional access, and support Zscaler Client Connector (ZCC) deployment via endpoint management tools such as Intune\nParticipate in incident, problem, and change management within CAB-controlled processes, and author runbooks, standard operating procedures, and network diagrams\n Experience, Skills & Qualications\n5+ years of experience in network security, cybersecurity engineering, or network engineering with a strong security emphasis\nHands-on experience administering Zscaler ZIA and ZPA at scale, including policy creation, Client Connector deployment, and App Connector hosting\nPractical understanding of Zero Trust Network Access (ZTNA) principles and least-privilege, per-application access models\nWorking knowledge of AWS cloud networking (VPCs, route tables, security groups, Transit Gateway, and PrivateLink)\nStrong familiarity with identity and SSO technologies (SAML 2.0, OIDC, Microsoft Entra ID, MFA, and conditional access)\nSolid foundation in core networking: TCP/IP, DNS, DHCP, routing, and SSL/TLS certificates\nComfortable reading logs, packet captures, and HAR files to isolate and resolve faults \nHighly knowledgeable of security concepts and protocols such as IPSec, SSL/TLS, IDS/IPS, WAF and DDoS protection \nKnowledgeable of cloud and hybrid cloud networks especially AWS networking design principles\nBachelor’s degree in computer science, or a combination of education and experienceExcellent verbal and written communication skills\nExcellent critical thinking and problem-solving skills\nPositive attitude and solutions-oriented thinking\nAbility to communicate technical concepts to both technical and non-technical audiences\nPreferred\nAWS WAF and AWS Firewall Manager experience an asset\nAviatrix experience an asset\nScripting and automation with PowerShell, Python, or Terraform (including the Zscaler providers) an asset\nAWS or equivalent cloud certification (AWS-Practitioner) \nZscaler certification such as ZIA Certified Administrator, ZPA Professional, Zscaler Digital Transformation Administrator (ZDTA), or Zscaler Digital Experience Administrator (ZDXA)\nAWS Advanced Networking Specialty certification\nSecurity certification such as CompTIA Security+ or SANS/GIAC\nITIL v3 Foundation’s desirable\nApply to Compass Group today!\nClick here to Learn More about the Compass Story\nCompass Group is an equal opportunity employer. At Compass, we are committed to treating all Applicants and Associates fairly based on their abilities, achievements, and experience without regard to race, national origin, sex, age, disability, veteran status, sexual orientation, gender identity, or any other classification protected by law.\nQualified candidates must be able to perform the essential functions of this position satisfactorily with or without a reasonable accommodation. Disclaimer: this job post is not necessarily an exhaustive list of all essential responsibilities, skills, tasks, or requirements associated with this position. While this is intended to be an accurate reflection of the position posted, the Company reserves the right to modify or change the essential functions of the job based on business necessity. We will consider for employment all qualified applicants, including those with a criminal history (including relevant driving history), in a manner consistent with all applicable federal, state, and local laws, including the City of Los Angeles’ Fair Chance Initiative for Hiring Ordinance, the San Francisco Fair Chance Ordinance, and the New York Fair Chance Act.\nCompass Technology maintains a drug-free workplace.\nApplications are accepted on an ongoing basis.\nAssociates at Corporate are offered many fantastic benefits.\nMedical\nDental\nVision\nLife Insurance/ AD\nDisability Insurance\nRetirement Plan\nPaid Time Off\nHoliday Time Off (varies by site/state)\nAssociate Shopping Program\nHealth and Wellness Programs\nDiscount Marketplace\nIdentity Theft Protection\nPet Insurance\nCommuter Benefits\nEmployee Assistance Program\nFlexible Spending Accounts (FSAs)\nPaid Parental Leave\nPersonal Leave\nAssociates may also be eligible for paid and/or unpaid time off benefits in accordance with applicable federal, state, and local laws. For positions in Washington State, Maryland, or to be p formed Remotely,click here or copy/paste the link below for paid time off benefits information.\nhttps://www.compass-usa.com/wp-content/uploads/2023/08/2023_WageTransparency_CorpAndFoodbuy.pdf\nCertain positions may require Florida Level 2 background screening. Details: https://info.flclearinghouse.com/\nReq ID: 1587706\nCompass Technology\nMARY DICKSON","description_format":"text","description_chars":8181,"description_truncated":false,"requirements":{"experience_years_min":5,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":["Life insurance","Parental leave","Retirement plans","Wellness"],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Network Security","Catering & Food Services","Facilities Management"],"lifecycle":[{"event":"open","at":"2026-11-05T19:31:15Z"},{"event":"close","at":"2026-11-08T10:52:08Z"}],"visa":[{"country":"US","licensed_sponsor":true,"adverts_offering_sponsorship_24m":0,"sanctioned_now":false,"evidence":"H-1B filings in 12 months: 57 · green card filings: 16","filings_12m":57,"filings_prev_12m":52,"green_card_filings_12m":16,"median_offered_wage_usd":107774,"route":null,"cap_exempt":false,"checked_at":"2026-11-08T10:45:15+00:00","sources":["US Department of Labor: LCA disclosure data (H-1B, H-1B1, E-3)","US Department of Labor: PERM disclosure data (green cards)"],"filings_for_role_12m":8}],"liveness":null,"pay":{"stated_usd_annual":140000,"is_top_pay":false},"html_url":"https://alion.io/job/compass-group-usa-senior-network-security-engineer-remote","json_url":"https://alion.io/job/compass-group-usa-senior-network-security-engineer-remote.json","meta":{"generated_at":"2026-11-08T18:16:31Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":38338,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-09T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.1,"usd":0.01,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":1827105},"rest":"https://alion.io/mcp/rest/get_company?id=1827105"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fcompass-group-usa-senior-network-security-engineer-remote"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":2,"usd":0.2},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fcompass-group-usa-senior-network-security-engineer-remote"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.1,"usd":0.01},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fcompass-group-usa-senior-network-security-engineer-remote"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/compass-group-usa-senior-network-security-engineer-remote\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fcompass-group-usa-senior-network-security-engineer-remote"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3831376}},{"tool":"search_jobs","arguments":{"company":"compass-usa.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3831376},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}