{"id":1496252,"url":"https://alion.io/job/gordon-food-service-senior-network-security-engineer","title":"Senior Network Security Engineer","company":{"id":7430,"name":"Gordon Food Service","domain":"gfs.com","url":"https://alion.io/company/gfs","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workday","truth_index":{"grade":"B","score":79,"open_postings":89,"ghost_share":0,"stale_share":0.843,"repost_share":0,"time_to_fill_p50_days":24,"computed_at":"2026-10-20T05:45:00Z"}},"role":"Security","role_family":"Security","seniority":"senior","employment_type":"full_time","work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":81000,"max_usd":156000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":1306},"experience_years_min":5,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Ansible","optional":false},{"name":"AWS","optional":false},{"name":"Azure","optional":false},{"name":"DNS","optional":false},{"name":"GCP","optional":false},{"name":"GitOps","optional":false},{"name":"IAM","optional":false},{"name":"Least Privilege","optional":false},{"name":"PKI","optional":false},{"name":"Python","optional":false},{"name":"Terraform","optional":false},{"name":"Zero Trust","optional":false}],"status":"live","first_seen_at":"2026-09-29T00:00:00Z","employer_posted_date":"2026-09-29","last_verified_at":"2026-10-20T16:45:59Z","board_verified":true,"closed_at":null,"days_open":21,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":21},"description":"Welcome to Gordon Food Service! We are excited that you are thinking about opportunities with us, and we have an amazing story to share. See below for a quick glance of who we are and the impact you could have on the food service industry. There's a seat at our table for you...\nPosition Summary:\nThe Senior Network Security Engineer responsible for the design, architecture, implementation, and continuous improvement of the organization's network security strategy across hybrid, cloud, and operational technology (OT) environments. Acting as a strategic collaborator between Security, Cloud, Infrastructure, and Network teams, the Senior Engineer transforms the network into an identity-aware enforcement fabric that enables Zero Trust principles across the enterprise.\nThis role focuses on advancing the organization from traditional IP-based security models toward identity-driven access controls based on user identity, device posture, risk signals, and least-privilege principles. The Senior Engineer serves as the technical authority for network security architecture standards, engineering patterns, and strategic technology direction, creating a unified and scalable security framework across all environments. This position is responsible for driving modernization initiatives, eliminating operational silos, and establishing a single source of truth for network security policy enforcement across on-premises, cloud, and third-party platforms.\nWhat you will do:\nLead the design, implementation, and continuous improvement of the enterprise security infrastructure while maintaining an engineering focus on governance, scalability, resiliency, and secure architecture principles in collaboration with other GTS team.\nServe as the primary technical engineering lead for the migration from legacy proxy and remote access technologies to modern Secure Access Service Edge (SASE) and Zero Trust Network Access (ZTNA) platforms.\nDevelop and maintain network security reference architectures, engineering standards, design patterns, and implementation roadmaps supporting Zero Trust, cloud adoption, regulatory compliance, and business objectives.\nCollaborate closely with Cloud and On-Premise Network teams to ensure infrastructure, routing, SD-WAN, and connectivity services are designed and deployed with security-by-design principles while maintaining performance and reliability.\nPartner with Identity and Access Management (IAM) teams to integrate identity attributes, device posture, risk signals, SAML, OIDC, and directory services into dynamic network access control and policy enforcement decisions.\nContribute to the architecture, engineering, and operational management of the enterprise security transit layer to ensure consistent policy enforcement across cloud providers, on-premises infrastructure, partner networks, and vendor-hosted environments.\nDesign and oversee the implementation of a global unified segmentation strategy utilizing Next-Generation Firewalls (NGFWs), micro-segmentation technologies, and cloud-native security controls across data centers and cloud environments.\nDesign and maintain secure segmentation architectures protecting Operational Technology (OT) and Industrial Control System (ICS) environments from enterprise network threats while supporting operational requirements and business continuity.\nAct as the primary technical stakeholder for Network Detection and Response (NDR) platforms, ensuring comprehensive visibility, telemetry collection, threat detection capabilities, and integration with enterprise security monitoring solutions.\nLead the engineering and security posture for enterprise infrastructure services including DNS security, Web Application Firewalls (WAF), DDoS protection, load balancing technologies, and secure application delivery platforms.\nManage the security of data-in-transit by establishing encryption standards, certificate lifecycle automation, secure communication protocols, and cryptographic best practices.\nDesign and implement Infrastructure as Code (IaC), automation, and policy-as-code solutions to deploy, maintain, validate, and audit network security controls across hybrid environments.\nProvide senior-level technical leadership during cybersecurity incidents involving network infrastructure, cloud connectivity, segmentation boundaries, access control systems, and network-based threat activity.\nDefine and monitor key security engineering metrics related to network visibility, segmentation effectiveness, policy compliance, and Zero Trust maturity.\nEvaluate emerging network security technologies, industry trends, and architectural approaches, providing recommendations that support strategic modernization and roadmap initiatives.\nParticipate in the Cross-Functional Architecture Group to provide technical security expertise and influence the secure design of enterprise technology initiatives.\nMentor engineers and provide technical guidance to Security, Cloud, Infrastructure, and Network teams regarding architecture, engineering standards, operational best practices, and technology adoption.\nOther duties and responsibilities as assigned.\nYour Work Schedule:\n Hours: Monday through Friday, 8:00 AM - 5:00 PM (Standard Business Hours).\nModern Hybrid Model: Enjoy the best of both worlds with a flexible schedule: 4 days in the office, 1 day working from home.\n On-Call Responsibilities: Participation in a rotating 24/7 on-call schedule (approximately one week every three weeks) to support critical system issues and incidents.\nWhat you bring to the table:\nFive or more years of experience designing, implementing, and supporting enterprise-scale security architectures.\nBachelor Degree in Information Security, Computer Science, Engineering, Information Technology, or a related field; equivalent combination of education and experience may be considered.\nStrong technical acumen and a passion for continuous learning with expertise in Network Security, Zero Trust Architecture, Cloud Security, and Enterprise Infrastructure.\nExpert-level knowledge of Next-Generation Firewalls (physical and virtual), SASE, ZTNA, micro-segmentation, and modern network security architectures.\nDeep understanding of identity-centric security models and the integration of IAM attributes, device posture, contextual signals, and risk-based access controls into network policy enforcement.\nExperience designing and securing multi-cloud environments including AWS, Azure, and GCP, with knowledge of cloud-native networking, security services, transit architectures, and application delivery frameworks.\nStrong knowledge of cloud transit architectures, security service edge technologies, software-defined networking, and hybrid connectivity solutions.\nDeep understanding of Network Detection and Response (NDR), network telemetry, traffic analytics, and threat detection methodologies.\nExperience with Infrastructure as Code (IaC), automation frameworks, and policy-as-code solutions utilizing technologies such as Terraform, Ansible, Python, GitOps, or equivalent platforms.\nStrong understanding of enterprise PKI, certificate lifecycle management, encryption technologies, and secure communications protocols.\nKnowledge of Operational Technology (OT) and Industrial Control System (ICS) security principles, segmentation strategies, and risk mitigation approaches.\nDemonstrated ability to analyze and troubleshoot complex cross-domain networking, security, cloud, and identity-related challenges.\nStrategic thinking skills with the ability to eliminate operational silos, establish standards, and drive long-term architectural improvements.\nStrong project leadership skills with experience managing large-scale infrastructure transformations, security modernization initiatives, and cross-functional programs.\nExcellent communication, presentation, and interpersonal skills with the ability to communicate technical concepts effectively to technical and non-technical audiences.\nAbility to influence architectural decisions and build consensus among diverse stakeholder groups.\nAbility to manage multiple priorities, work independently, and deliver high-quality outcomes in a fast-paced environment.\nAbility to develop innovative solutions to complex technical problems while leveraging industry best practices, established standards, and organizational objectives.\nBE PART OF AN AMAZING CULTURE WHERE WHAT MATTERS TO YOU, MATTERS TO US!\nGordon Food Service values our customers and understands that their success is largely dependent upon their workforce. To demonstrate our commitment to our partnership, we will require any candidate who works for a Gordon Food Service customer to provide a letter of support from their management if they are selected for the interview process.\nEqual Employment Opportunity is a matter of policy at Gordon Food Service, Inc. and we are committed to a work environment in which all individuals are treated with respect and dignity.\nAll qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, status as a protected veteran, or status as a qualified individual with disability. If you require reasonable accommodation for any part of the application or hiring process due to a disability, please submit your request to  and use the words “Accommodation Request” in your subject line.\nAll Gordon Food Service locations are tobacco-free.\nGordon Food Service is a drug-free workplace and conducts pre-employment drug tests.","description_format":"text","description_chars":9572,"description_truncated":false,"requirements":{"experience_years_min":5,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["Continuous learning","Flexible schedule"],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Network Security","Wholesale","Food Logistics"],"lifecycle":[{"event":"open","at":"2026-09-30T02:16:00Z"}],"visa":[{"country":"US","licensed_sponsor":true,"evidence":"H-1B filings in 12 months: 13 · green card filings: 3","filings_12m":13,"filings_prev_12m":18,"green_card_filings_12m":3,"median_offered_wage_usd":129688,"route":null,"cap_exempt":false,"checked_at":"2026-10-15T11:24:14+00:00","sources":["US Department of Labor: LCA disclosure data (H-1B, H-1B1, E-3)","US Department of Labor: PERM disclosure data (green cards)"],"filings_for_role_12m":0}],"liveness":{"score":41,"band":"fade","label":"Fading","p_open":1,"p_active":0.545,"p_room":0.75,"age_days":21,"expected_fill_days":24,"reasons":["conf:5","stale_co","velocity","win:late","comp:brand"],"computed_at":"2026-10-20T05:45:00Z"},"pay":null,"html_url":"https://alion.io/job/gordon-food-service-senior-network-security-engineer","json_url":"https://alion.io/job/gordon-food-service-senior-network-security-engineer.json","meta":{"generated_at":"2026-10-20T17:21:26Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":19869,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-21T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":7430},"rest":"https://alion.io/mcp/rest/get_company?id=7430"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fgordon-food-service-senior-network-security-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fgordon-food-service-senior-network-security-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fgordon-food-service-senior-network-security-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/gordon-food-service-senior-network-security-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fgordon-food-service-senior-network-security-engineer"}]}