Job description

Welcome to Gordon Food Service! We are excited that you are thinking about opportunities with us, and we have an amazing story to share. See below for a quick glance of who we are and the impact you could have on the food service industry. There s a seat at our table for you... Position Summary: The Senior Network Security Engineer responsible for the design, architecture, implementation, and continuous improvement of the organization s network security strategy across hybrid, cloud, and operational technology (OT) environments. Acting as a strategic collaborator between Security, Cloud, Infrastructure, and Network teams, the Senior Engineer transforms the network into an identity-aware enforcement fabric that enables Zero Trust principles across the enterprise. This role focuses on advancing the organization from traditional IP-based security models toward identity-driven access controls based on user identity, device posture, risk signals, and least-privilege principles. The Senior Engineer serves as the technical authority for network security architecture standards, engineering patterns, and strategic technology direction, creating a unified and scalable security framework across all environments. This position is responsible for driving modernization initiatives, eliminating operational silos, and establishing a single source of truth for network security policy enforcement across on-premises, cloud, and third-party platforms. What you will do: Lead the design, implementation, and continuous improvement of the enterprise security infrastructure while maintaining an engineering focus on governance, scalability, resiliency, and secure architecture principles in collaboration with other GTS team. Serve as the primary technical engineering lead for the migration from legacy proxy and remote access technologies to modern Secure Access Service Edge (SASE) and Zero Trust Network Access (ZTNA) platforms. Develop and maintain network security reference architectures, engineering standards, design patterns, and implementation roadmaps supporting Zero Trust, cloud adoption, regulatory compliance, and business objectives. Collaborate closely with Cloud and On-Premise Network teams to ensure infrastructure, routing, SD-WAN, and connectivity services are designed and deployed with security-by-design principles while maintaining performance and reliability. Partner with Identity and Access Management (IAM) teams to integrate identity attributes, device posture, risk signals, SAML, OIDC, and directory services into dynamic network access control and policy enforcement decisions. Contribute to the architecture, engineering, and operational management of the enterprise security transit layer to ensure consistent policy enforcement across cloud providers, on-premises infrastructure, partner networks, and vendor-hosted environments. Design and oversee the implementation of a global unified segmentation strategy utilizing Next-Generation Firewalls (NGFWs), micro-segmentation technologies, and cloud-native security controls across data centers and cloud environments. Design and maintain secure segmentation architectures protecting Operational Technology (OT) and Industrial Control System (ICS) environments from enterprise network threats while supporting operational requirements and business continuity. Act as the primary technical stakeholder for Network Detection and Response (NDR) platforms, ensuring comprehensive visibility, telemetry collection, threat detection capabilities, and integration with enterprise security monitoring solutions. Lead the engineering and security posture for enterprise infrastructure services including DNS security, Web Application Firewalls (WAF), DDoS protection, load balancing technologies, and secure application delivery platforms. Manage the security of data-in-transit by establishing encryption standards, certificate lifecycle automation, secure communication protocols, and cryptographic best practices. Design and implement Infrastructure as Code (IaC), automation, and policy-as-code solutions to deploy, maintain, validate, and audit network security controls across hybrid environments. Provide senior-level technical leadership during cybersecurity incidents involving network infrastructure, cloud connectivity, segmentation boundaries, access control systems, and network-based threat activity. Define and monitor key security engineering metrics related to network visibility, segmentation effectiveness, policy compliance, and Zero Trust maturity. Evaluate emerging network security technologies, industry trends, and architectural approaches, providing recommendations that support strategic modernization and roadmap initiatives. Participate in the Cross-Functional Architecture Group to provide technical security expertise and influence the secure design of enterprise technology initiatives. Mentor engineers and provide technical guidance to Security, Cloud, Infrastructure, and Network teams regarding architecture, engineering standards, operational best practices, and technology adoption. Other duties and responsibilities as assigned. Your Work Schedule: Hours: Monday through Friday, 8:00 AM - 5:00 PM (Standard Business Hours). Modern Hybrid Model: Enjoy the best of both worlds with a flexible schedule: 4 days in the office, 1 day working from home. On-Call Responsibilities: Participation in a rotating 24/7 on-call schedule (approximately one week every three weeks) to support critical system issues and incidents. What you bring to the table: Five or more years of experience designing, implementing, and supporting enterprise-scale security architectures. Bachelor Degree in Information Security, Computer Science, Engineering, Information Technology, or a related field; equivalent combination of education and experience may be considered. Strong technical acumen and a passion for continuous learning with expertise in Network Security, Zero Trust Architecture, Cloud Security, and Enterprise Infrastructure. Expert-level knowledge of Next-Generation Firewalls (physical and virtual), SASE, ZTNA, micro-segmentation, and modern network security architectures. Deep understanding of identity-centric security models and the integration of IAM attributes, device posture, contextual signals, and risk-based access controls into network policy enforcement. Experience designing and securing multi-cloud environments including AWS, Azure, and GCP, with knowledge of cloud-native networking, security services, transit architectures, and application delivery frameworks. Strong knowledge of cloud transit architectures, security service edge technologies, software-defined networking, and hybrid connectivity solutions. Deep understanding of Network Detection and Response (NDR), network telemetry, traffic analytics, and threat detection methodologies. Experience with Infrastructure as Code (IaC), automation frameworks, and policy-as-code solutions utilizing technologies such as Terraform, Ansible, Python, GitOps, or equivalent platforms. Strong understanding of enterprise PKI, certificate lifecycle management, encryption technologies, and secure communications protocols. Knowledge of Operational Technology (OT) and Industrial Control System (ICS) security principles, segmentation strategies, and risk mitigation approaches. Demonstrated ability to analyze and troubleshoot complex cross-domain networking, security, cloud, and identity-related challenges. Strategic thinking skills with the ability to eliminate operational silos, establish standards, and drive long-term architectural improvements. Strong project leadership skills with experience managing large-scale infrastructure transformations, security modernization initiatives, and cross-functional programs. Excellent communication, presentation, and interpersonal skills with the ability to communicate technical concepts effectively to technical and non-technical audiences. Ability to influence architectural decisions and build consensus among diverse stakeholder groups. Ability to manage multiple priorities, work independently, and deliver high-quality outcomes in a fast-paced environment. Ability to develop innovative solutions to complex technical problems while leveraging industry best practices, established standards, and organizational objectives. BE PART OF AN AMAZING CULTURE WHERE WHAT MATTERS TO YOU, MATTERS TO US! Gordon Food Service values our customers and understands that their success is largely dependent upon their workforce. To demonstrate our commitment to our partnership, we will require any candidate who works for a Gordon Food Service customer to provide a letter of support from their management if they are selected for the interview process. Equal Employment Opportunity is a matter of policy at Gordon Food Service, Inc. and we are committed to a work environment in which all individuals are treated with respect and dignity. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, status as a protected veteran, or status as a qualified individual with disability. If you require reasonable accommodation for any part of the application or hiring process due to a disability, please submit your request to talent gfs.com and use the words “Accommodation Request” in your subject line. All Gordon Food Service locations are tobacco-free. Gordon Food Service is a drug-free workplace and conducts pre-employment drug tests.

Requirements

Must-haves

Serve as the primary technical engineering lead for the migration from legacy proxy and remote access technologies to modern Secure Access Service Edge (SASE) and Zero Trust Network Access (ZTNA) platforms.
Develop and maintain network security reference architectures, engineering standards, design patterns, and implementation roadmaps supporting Zero Trust, cloud adoption, regulatory compliance, and business objectives.
Manage the security of data-in-transit by establishing encryption standards, certificate lifecycle automation, secure communication protocols, and cryptographic best practices.
Design and implement Infrastructure as Code (IaC), automation, and policy-as-code solutions to deploy, maintain, validate, and audit network security controls across hybrid environments.
Provide senior-level technical leadership during cybersecurity incidents involving network infrastructure, cloud connectivity, segmentation boundaries, access control systems, and network-based threat activity.
Define and monitor key security engineering metrics related to network visibility, segmentation effectiveness, policy compliance, and Zero Trust maturity.
Evaluate emerging network security technologies, industry trends, and architectural approaches, providing recommendations that support strategic modernization and roadmap initiatives.
Participate in the Cross-Functional Architecture Group to provide technical security expertise and influence the secure design of enterprise technology initiatives.
Mentor engineers and provide technical guidance to Security, Cloud, Infrastructure, and Network teams regarding architecture, engineering standards, operational best practices, and technology adoption.
Other duties and responsibilities as assigned.
Hours: Monday through Friday, 8:00 AM - 5:00 PM (Standard Business Hours).
Modern Hybrid Model: Enjoy the best of both worlds with a flexible schedule: 4 days in the office, 1 day working from home.
On-Call Responsibilities: Participation in a rotating 24/7 on-call schedule (approximately one week every three weeks) to support critical system issues and incidents.
Five or more years of experience designing, implementing, and supporting enterprise-scale security architectures.
Bachelor Degree in Information Security, Computer Science, Engineering, Information Technology, or a related field; equivalent combination of education and experience may be considered.
Strong technical acumen and a passion for continuous learning with expertise in Network Security, Zero Trust Architecture, Cloud Security, and Enterprise Infrastructure.
Expert-level knowledge of Next-Generation Firewalls (physical and virtual), SASE, ZTNA, micro-segmentation, and modern network security architectures.
Deep understanding of identity-centric security models and the integration of IAM attributes, device posture, contextual signals, and risk-based access controls into network policy enforcement.
Experience designing and securing multi-cloud environments including AWS, Azure, and GCP, with knowledge of cloud-native networking, security services, transit architectures, and application delivery frameworks.
Strong knowledge of cloud transit architectures, security service edge technologies, software-defined networking, and hybrid connectivity solutions.
Deep understanding of Network Detection and Response (NDR), network telemetry, traffic analytics, and threat detection methodologies.
Experience with Infrastructure as Code (IaC), automation frameworks, and policy-as-code solutions utilizing technologies such as Terraform, Ansible, Python, GitOps, or equivalent platforms.
Strong understanding of enterprise PKI, certificate lifecycle management, encryption technologies, and secure communications protocols.
Knowledge of Operational Technology (OT) and Industrial Control System (ICS) security principles, segmentation strategies, and risk mitigation approaches.

Nice-to-haves

None flagged.

Application prep

Use the role’s language and application details while tailoring your materials.

Keywords to mirror

awsazuregcppython

Platform: workday
Effort: long

Benefits

Benefits detected in the listing.

Pto