Senior Network Security Engineer — Hybrid, Zero-Trust & Cloud

Ahold Delhaize USA; Chicago (IL); Hybrid; USD 125,000 - 188,000; Full time

Job summary

Ahold Delhaize USA is seeking a Sr. Network Security Engineer to lead the design, implementation, and operations of enterprise network security across data centers, cloud, and retail locations.

The role focuses on zero trust, next-generation firewalls (Palo Alto, Fortinet), and secure connectivity with compliance to PCI-DSS and HIPAA. You will drive multi-year strategy and manage policies, while collaborating with SOC, risk, and architecture teams.

Qualifications

• Bachelor's degree or equivalent years of work experience.
• 5+ years of progressive experience in network security engineering.
• Deep hands-on expertise in enterprise firewall platforms (Palo Alto Networks, Fortinet FortiGate).
• Strong experience with Zscaler cloud security platforms (ZIA, ZPA) including deployment and policy management.
• Demonstrated experience designing and implementing zero trust network architectures in large enterprises.
• Knowledge of PCI-DSS and HIPAA compliance requirements for network security.
• Experience with DMZ design, segmentation, VPNs (IPSec/SSL), and secure remote access.
• Experience with SIEM and monitoring tools (Panorama, FortiManager, FortiAnalyzer, SolarWinds).
• Automation and scripting for network security management.
• Cloud security architectures including AWS/Azure.

Responsibilities

• Lead design, engineering, and operations of ADUSA's network security platforms (NGFWs, secure web gateways, cloud security).
• Architect and enforce zero trust networks with micro-segmentation and least-privilege policies.
• Manage firewall rules, security policies, NAT, and VPN infrastructure across platforms.
• Oversee Zscaler administration (ZIA/ZPA), URL filtering, SSL inspection, and DLP policies.
• Drive PCI-DSS/HIPAA compliance through security controls and audit readiness.
• Act as SME in network security design, evaluate threats, and advise architecture teams.
• Participate in incident response with SOC, threat intel, and risk teams.
• Develop network security automation for provisioning, policy deployment, and reporting.

Skills

Zero Trust

Firewall Engineering

VPN Technologies

SIEM & Monitoring

Automation & Scripting

Cloud Security

CCNA/CCNP

Education

Bachelor's degree or equivalent

Tools

Palo Alto Networks

Fortinet FortiGate

Zscaler ZIA/ZPA

Panorama

FortiManager

FortiAnalyzer

SolarWinds

Job description

Ahold Delhaize USA is seeking a Sr. Network Security Engineer to lead the design, implementation, and operations of enterprise network security across data centers, cloud, and retail locations.

The role focuses on zero trust, next-generation firewalls (Palo Alto, Fortinet), and secure connectivity with compliance to PCI-DSS and HIPAA. You will drive multi-year strategy and manage policies, while collaborating with SOC, risk, and architecture teams.