Senior Network Security Engineer

## Senior Network Security Engineer Apply:
Wyoming, Michigan:
Full time:
Posted Today:
R-57617

Welcome to Gordon Food Service! We are excited that you are thinking about opportunities with us, and we have an amazing story to share. See below for a quick glance of who we are and the impact you could have on the food service industry. There's a seat at our table for you...
*
* Position Summary:

** The
** Senior Network Security Engineer
** responsible for the design, architecture, implementation, and continuous improvement of the organization's network security strategy across hybrid, cloud, and operational technology (OT) environments. Acting as a strategic collaborator between Security, Cloud, Infrastructure, and Network teams, the Senior Engineer transforms the network into an identity-aware enforcement fabric that enables Zero Trust principles across the enterprise.

This role focuses on advancing the organization from traditional IP-based security models toward identity-driven access controls based on user identity, device posture, risk signals, and least-privilege principles. The Senior Engineer serves as the technical authority for network security architecture standards, engineering patterns, and strategic technology direction, creating a unified and scalable security framework across all environments. This position is responsible for driving modernization initiatives, eliminating operational silos, and establishing a single source of truth for network security policy enforcement across on-premises, cloud, and third-party platforms.

*
* What you will do:

*** Lead the design, implementation, and continuous improvement of the enterprise security infrastructure while maintaining an engineering focus on governance, scalability, resiliency, and secure architecture principles in collaboration with other GTS team.
* Serve as the primary technical engineering lead for the migration from legacy proxy and remote access technologies to modern Secure Access Service Edge (SASE) and Zero Trust Network Access (ZTNA) platforms.
* Develop and maintain network security reference architectures, engineering standards, design patterns, and implementation roadmaps supporting Zero Trust, cloud adoption, regulatory compliance, and business objectives.
* Collaborate closely with Cloud and On-Premise Network teams to ensure infrastructure, routing, SD-WAN, and connectivity services are designed and deployed with security-by-design principles while maintaining performance and reliability.
* Partner with Identity and Access Management (IAM) teams to integrate identity attributes, device posture, risk signals, SAML, OIDC, and directory services into dynamic network access control and policy enforcement decisions.
* Contribute to the architecture, engineering, and operational management of the enterprise security transit layer to ensure consistent policy enforcement across cloud providers, on-premises infrastructure, partner networks, and vendor-hosted environments.
* Design and oversee the implementation of a global unified segmentation strategy utilizing Next-Generation Firewalls (NGFWs), micro-segmentation technologies, and cloud-native security controls across data centers and cloud environments.
* Design and maintain secure segmentation architectures protecting Operational Technology (OT) and Industrial Control System (ICS) environments from enterprise network threats while supporting operational requirements and business continuity.
* Act as the primary technical stakeholder for Network Detection and Response (NDR) platforms, ensuring comprehensive visibility, telemetry collection, threat detection capabilities, and integration with enterprise security monitoring solutions.
* Lead the engineering and security posture for…