Senior Zero Trust Network Security Architect

Gordon Food Service; Wyoming (MI); Hybrid; USD 120,000 - 160,000; Full time

Job summary

Gordon Food Service is seeking a Senior Network Security Engineer to design, implement, and continuously improve a scalable Zero Trust security framework across on‑premises, cloud, and OT environments. You will champion secure architecture, drive modernization, and collaborate with IAM, Cloud, Infrastructure, and Network teams to enforce identity‑driven access controls and policy enforcement.

Ideal candidates bring 5+ years of enterprise security experience, deep knowledge of NGFWs, SASE/ZTNA,

Qualifications

• Bachelor's degree in Information Security, Computer Science, Engineering, or IT or an equivalent combination of education and experience.
• 5+ years designing and implementing enterprise security architectures.
• Deep expertise in Zero Trust, IAM integration, and cloud/security service edge technologies.

Responsibilities

• Design and implement enterprise security infrastructure with governance, scalability, and secure architecture.
• Lead migration to SASE/ZTNA platforms and secure access models.
• Develop reference architectures and roadmaps for Zero Trust across multi-cloud and OT/ICS environments.
• Collaborate with IAM, Cloud, and Network teams to ensure secure-by-design networking and policy enforcement.
• Mentor engineers and guide security modernization initiatives across the org.

Skills

Network Security

Zero Trust

Cloud Security

NDR

IaC

PKI

OT/ICS Security

SASE

ZTNA

Identity-centric security

Education

Bachelor's degree in Information Security or related field

Tools

Terraform

Ansible

Python

GitOps

NGFWs

Job description

Gordon Food Service is seeking a Senior Network Security Engineer to design, implement, and continuously improve a scalable Zero Trust security framework across on‑premises, cloud, and OT environments. You will champion secure architecture, drive modernization, and collaborate with IAM, Cloud, Infrastructure, and Network teams to enforce identity‑driven access controls and policy enforcement.

Ideal candidates bring 5+ years of enterprise security experience, deep knowledge of NGFWs, SASE/ZTNA,