Senior Network Security Engineer Hybrid, Zero Trust & Cloud

Ahold Delhaize USA; Chicago (IL); Hybrid; USD 125,000 - 188,000; Full time

Benefits offered by this job

Incentive bonus

Job summary

Ahold Delhaize USA seeks a Sr. Network Security Engineer to lead the engineering, delivery, and operations of network security platforms across data centers, cloud environments, retail locations, and offices.

The role focuses on zero-trust architecture, next-gen firewalls, and secure connectivity, driving multi-year strategy and ensuring PCI-DSS, HIPAA, SOX compliance while coordinating with SOC and risk teams.

Qualifications

• Bachelor's degree or equivalent years of work experience.
• 5+ years of progressive network security engineering experience.
• Deep hands-on firewall experience (Palo Alto, Fortinet).
• Strong knowledge of Zscaler ZIA/ZPA and cloud security.
• Experience with PCI-DSS and HIPAA compliance requirements.

Responsibilities

• Lead design, engineering, and operations of network security platforms.
• Architect zero-trust frameworks and define micro-segmentation policies.
• Manage firewall rules, NATs, and VPN infrastructure across platforms.
• Oversee Zscaler administration, URL filtering, and SSL inspection.
• Drive PCI-DSS, HIPAA, and SOX compliance initiatives and audits.
• Assist in incident response, forensics, and containment activities.
• Develop network security automation for provisioning and reporting.
• Maintain documentation, SOPs, and runbooks for audit readiness.

Skills

Network security engineering

Palo Alto Networks

Fortinet FortiGate

Zscaler ZIA/ZPA

Zero trust architecture

VPN technologies

SIEM tooling

Automation/scripting

Networking fundamentals

Cloud security

Education

Bachelor's degree or equivalent

Tools

Panorama

FortiManager

FortiAnalyzer

SolarWinds

Zscaler ZIA/ZPA

Job description

Ahold Delhaize USA seeks a Sr. Network Security Engineer to lead the engineering, delivery, and operations of network security platforms across data centers, cloud environments, retail locations, and offices.

The role focuses on zero-trust architecture, next-gen firewalls, and secure connectivity, driving multi-year strategy and ensuring PCI-DSS, HIPAA, SOX compliance while coordinating with SOC and risk teams.