Network Engineer

Loyalty360; Milford Terrace (NC); Hybrid; USD 125,000 - 188,000; Full time

Benefits offered by this job

Incentive bonus

Hybrid work schedule

Job summary

Ahold Delhaize USA is seeking a Sr. Network Security Engineer to lead the engineering, delivery, and operations of our network security platforms with a focus on zero trust and next‑generation firewalls. This role covers data centers, cloud, retail locations, and distribution centers.

You will drive the multi-year strategy to transform the network security posture, align with PCI-DSS, HIPAA, and other frameworks, and ensure secure connectivity and threat mitigation across all brands.

Qualifications

• Bachelor's degree or equivalent years of work experience.
• 5+ years of progressive experience in network security engineering with firewall platforms (Palo Alto, Fortinet).
• Strong experience with Zscaler (ZIA/ZPA) deployment and policy management.
• Design and implement zero trust architectures in large-scale environments.
• Knowledge of PCI-DSS and HIPAA in relation to network security controls.
• Experience with DMZ design, segmentation, VPNs, and secure remote access.

Responsibilities

• Lead design, engineering, and operations of network security platforms (firewalls, secure web gateways, cloud security).
• Architect zero trust frameworks with micro-segmentation and least-privilege access.
• Manage firewall rules, policies, NAT, and VPN across Palo Alto and Fortinet.
• Administer Zscaler platform (ZIA/ZPA), URL filtering, SSL inspection, DLP, cloud firewall rules.
• Drive PCI-DSS, HIPAA, SOX compliance initiatives and audit readiness.
• Act as SME for security design and architecture, evaluate threats and recommend improvements.
• Participate in incident response with SOC and risk teams; contain breaches and deploy controls.
• Develop automation for provisioning, policy deployment, and compliance reporting.
• Maintain documentation and runbooks, audit-ready standards.
• Escalate to MSPs and internal teams during incidents and problem reviews.
• Lifecycle management for security devices including firmware and licenses.
• Align security solutions with business requirements and risk tolerance.

Skills

Zero trust concepts

Network security design

Threat assessment

Incident response

Security policy enforcement

Security governance

Education

Bachelor's degree or equivalent

Tools

Palo Alto Networks

Fortinet FortiGate

Zscaler ZIA/ZPA

SIEM & monitoring tools (Panorama, FortiManager, FortiAnalyzer, SolarWinds)

Job description

Category/Area of Expertise: IT & Technology

Job Requisition: 544632

Address: USA-NC-Salisbury-2110 Executive Drive

Store Code: Infrastructure - Network (5118708)

Ahold Delhaize USA, a division of global food retailer Ahold Delhaize, is part of the U.S. family of brands, which includes five leading omnichannel grocery brands - Food Lion, Giant Food, The GIANT Company, Hannaford and Stop & Shop. Our associates support the brands with a wide range of services, including Finance, Legal, Sustainability, Commercial, Digital and E-commerce, Technology and more.

Primary Purpose

The Sr. Network Security Engineer will lead the engineering, delivery, and operations of ADUSA's network security platforms with a key focus on zero trust architecture, next-generation firewalls, and secure connectivity across the enterprise. This role is responsible for the technical design, implementation, and management of mission-critical network security infrastructure spanning ADUSA's data centers, cloud environments, retail locations, corporate offices, and distribution centers.

The Sr. Network Security Engineer will drive the multi-year strategy to transform ADUSA's network security posture, championing zero trust principles and ensuring all network traffic is inspected, segmented, and secured in alignment with PCI-DSS, HIPAA, and other regulatory compliance frameworks. This role has overall responsibility for the delivery of secure connectivity, threat mitigation, incident response coordination, firewall and proxy platform management, and policy enforcement across all brands.

Our flexible/hybrid work schedule includes 3 in-person days at one of our core locations and 2 remote days. Our core office location is Salisbury, NC and Chicago,IL.

Applicants must be currently authorized to work in the United States on a full-time basis.

Duties and Responsibilities

• Lead the design, engineering, and operations of ADUSA's network security platforms including next-generation firewalls (Palo Alto, Fortinet), secure web gateways, and cloud security solutions (Zscaler ZIA/ZPA), ensuring high availability, performance, and compliance across all environments.
• Architect and implement zero trust network security frameworks across the enterprise, defining and enforcing micro-segmentation, least-privilege access policies, identity-based authentication, and continuous verification strategies to minimize the attack surface.
• Manage and maintain firewall rule sets, security policies, NAT configurations, and VPN infrastructure across Palo Alto and Fortinet platforms, ensuring policies are optimized, documented, and aligned with PCI-DSS, HIPAA, and corporate security standards.
• Oversee Zscaler cloud security platform administration including ZIA (Zscaler Internet Access) and ZPA (Zscaler Private Access), managing URL filtering, SSL inspection, DLP policies, cloud firewall rules, and application access policies for all users and locations.
• Drive compliance initiatives by implementing and maintaining network security controls required for PCI-DSS, HIPAA, SOX, and other regulatory frameworks; lead audit preparation activities, evidence collection, and remediation of security findings.
• Act as a subject matter expert in network security design and architecture, evaluating emerging threats and technologies, and providing recommendations to the Network Architecture team for continuous improvement of the security posture.
• Participate in security incident response and forensic analysis, working with the SOC, threat intelligence, and risk teams to investigate network-based threats, contain breaches, and implement preventive controls.
• Develop and maintain network security automation to streamline firewall provisioning, policy deployment, configuration compliance checks, and security reporting across all platforms.
• Review and establish security documentation, standard operating procedures, and runbooks; ensure these standards are maintained and audit-ready at all times.
• Act as a point of escalation to external ADUSA managed service providers and internal teams in the incident management process, assisting in reviewing security incident and problem data, performing root cause analysis, and driving continuous improvement.
• Monitor and manage the security device lifecycle, including firmware maintenance, certificate management, and license compliance for all firewalls, proxies, IDS/IPS, and related network security infrastructure.
• Manage and influence analysis of business requirements to ensure that network security solutions meet established policies, risk tolerance, and compliance controls while enabling business agility.

Required Qualifications

• Bachelor's degree or equivalent years of work experience.
• 5+ years of progressive experience in network security engineering, with deep hands-on expertise in enterprise firewall platforms (Palo Alto Networks, Fortinet FortiGate)
• Strong experience with Zscaler cloud security platforms (ZIA, ZPA) including deployment, policy management, SSL inspection, and troubleshooting
• Demonstrated experience designing and implementing zero trust network architectures in large-scale enterprise environments
• Knowledge of PCI-DSS and HIPAA compliance requirements as they relate to network security controls, segmentation, and audit readiness
• Strong experience in network security design and architecture including DMZ design, network segmentation, micro-segmentation, VPN technologies (IPSec, SSL), and secure remote access solutions
• Experience with security information and event management (SIEM) platforms, and network monitoring tools such as Panorama, FortiManager, FortiAnalyzer, and SolarWinds
• Proficiency in automation and scripting for network security device management, policy deployment, and compliance reporting
• Solid technical foundation in networking (CCNA/CCNP level equivalent) with strong knowledge of L2/L3 technologies, routing protocols (BGP, OSPF), and switching
• Experience with cloud security architectures including AWS, Azure, cloud-based firewalls, and hybrid connectivity security

Preferred Qualifications

• Holds one or more industry certifications: PCNSE (Palo Alto Networks), NSE 7/8 (Fortinet), ZCCA/ZCCP (Zscaler), CISSP, CCNP Security, CCIE Security
• Experience with network access control (NAC), 802.1X, and identity-based network segmentation solutions
• Experience with IDS/IPS platforms, DDoS mitigation, and advanced threat protection technologies
• Experience working in an Agile (SAFe) environment
• Familiarity with DevSecOps practices and integrating network security into CI/CD pipelines
• Experience with Infoblox DDI, F5 load balancers, and Arista/Cisco ACI in the context of security policy enforcement and micro-segmentation.

Salary Range: $125,040 - $187,560

All ADUSA job offers take multiple factors into consideration including, but not limited to salary range, internal equity, a candidate's qualifications, geographic region, job-related knowledge and skills.

This position is eligible for an incentive bonus based on company performance as provided by the plan terms and governing documents.

#LI-Hybrid #LI-SC1

At Ahold Delhaize USA, we provide services to one of the largest portfolios of grocery companies in the nation, and we're actively seeking top talent.

Our team shares a common motivation to drive change, take ownership and enable our brands to better care for their customers. We thrive on supporting great local grocery brands and their strategies.

Our associates are the heartbeat of our organization. We are committed to offering a welcoming work environment where all associates can succeed and thrive. Guided by our values of courage, care, teamwork, integrity (and even a little humor), we are dedicated to being a great place to work.

We believe in collaboration, curiosity, and continuous learning in all that we think, create and do. While building a culture where personal and professional growth are just as important as business growth, we invest in our people, empowering them to learn, grow and deliver at all levels of the business.