Senior Network Security Engineer - SASE

Requirements:

• At least 4 years of relevant work experience; the posting typically reflects 5 or more years.
• At least 5 years of experience in network engineering, network security, or cybersecurity engineering.
• Hands-on experience implementing and supporting enterprise SASE or SSE solutions.
• Experience deploying and managing Secure Web Gateway (SWG) and Zero Trust Network Access (ZTNA) technologies.
• Strong knowledge of enterprise networking fundamentals, including TCP/IP, routing, switching, DNS, DHCP, VPNs, SSL/TLS, certificates, and network security principles.
• Experience resolving complex connectivity, authentication, and application-access issues in hybrid and cloud environments.
• Preferred: Experience implementing or administering leading SASE/SSE platforms such as Netskope, Palo Alto Prisma Access, Zscaler Internet Access, or Zscaler Private Access.
• Preferred: Experience designing, implementing, and supporting enterprise firewalls, including security policy management, segmentation, NAT, VPN connectivity, and SASE integration.
• Preferred: In-depth knowledge of SWG capabilities, including URL filtering, SSL/TLS inspection, cloud application visibility and control, malware protection, DLP, threat prevention, and policy enforcement.
• Preferred: Experience designing ZTNA solutions for private application access and reducing dependence on traditional VPNs.
• Preferred: Experience with SASE traffic steering and components such as endpoint clients, GRE/IPsec tunnels, private-access connectors or publishers, dedicated egress, and high-availability designs.
• Preferred: Knowledge of identity-based security and integration with Microsoft Entra ID, Okta, Ping Identity, or similar providers using SAML, OAuth, OIDC, and SCIM.
• Preferred: Experience integrating SASE platforms with endpoint security, SIEM, XDR, and security operations workflows.
• Preferred: Knowledge of cloud networking and security architectures across AWS, Azure, and Google Cloud Platform.
• Preferred: Experience with policy lifecycle management, security posture assessments, exception governance, and change control for cloud-delivered security services.
• Preferred: Experience with automation and scripting tools such as Python, PowerShell, REST APIs, Terraform, Ansible, and GitHub, or comparable technologies.
• Preferred: Experience using network, security, and digital-experience observability tools to monitor user experience, application performance, and security events.
• Preferred: Ability to create technical architecture documentation, low-level designs, implementation plans, operational runbooks, and support models for SASE deployments.
• Preferred: Experience in Agile engineering teams using modern engineering and DevSecOps practices.
• Preferred: Demonstrated technical leadership, mentoring, and cross-functional collaboration with network, security, identity, cloud, endpoint, and application teams.

Responsibilities:

• Lead the design, deployment, automation, operation, and ongoing improvement of our global SASE and SSE capabilities.
• Help migrate legacy web proxy and remote-access technologies to cloud-delivered security services, including SWG, ZTNA, CASB, DLP, and threat protection.
• Provide technical leadership across network, security, identity, cloud, endpoint, and application teams to deliver reliable, scalable, policy-driven access for users, sites, and applications.
• Design, implement, and maintain network solutions that meet organizational needs, including network diagrams and blueprints.
• Configure complex network devices and technologies, including routers, switches, firewalls, VPNs, and software-defined networking, to support performance and security.
• Diagnose and resolve complex network issues while minimizing downtime and maintaining reliability.
• Lead routine network maintenance and updates, including patches, service packs, and security configurations.
• Monitor network performance and availability, and make adjustments to optimize reliability and service quality.
• Lead implementation of network security measures, including firewalls, intrusion detection systems, and encryption technologies.
• Develop and implement disaster recovery plans to support business continuity during network failures.
• Build automation and tools for network operations, including configuration management, device provisioning, and software updates.

Technologies:

• AWS
• Ansible
• Azure
• Cloud
• DevSecOps
• GitHub
• Support
• NAT
• Network
• OAuth
• PowerShell
• Prisma
• Python
• REST
• SAML
• Security
• TCP/IP
• Terraform
• VPN
• Web
• Firewall

More

We are Cargill, a family company with more than 160 years of experience, working across the supply chain with farmers and customers to source, make, and deliver essential products. Our 155,000 team members develop food and agricultural solutions intended to nourish the world safely and sustainably, guided by values that put people first, encourage us to reach higher, and call on us to do the right thing for generations to come. In this senior network engineering role, we are advancing secure global connectivity through cloud-delivered security services. We are an equal opportunity employer, including for people with disabilities and veterans.

last updated 44 week of 2026