Network Security Engineer - SASE

Salary: $70,000 - 100,000 per year Requirements:

• At least 2 years of relevant work experience; the posting typically reflects 3 or more years.
• 3 years of experience in network engineering, network security, cybersecurity engineering, or infrastructure operations.
• Hands-on experience supporting enterprise network or security technologies, with exposure to SASE, SSE, SWG, ZTNA, cloud security, or secure remote-access solutions.
• Strong knowledge of enterprise networking fundamentals, including TCP/IP, routing, switching, DNS, DHCP, VPNs, SSL/TLS, certificates, and network security principles.
• Experience troubleshooting connectivity, authentication, and application-access issues in enterprise environments.
• Ability to produce clear technical documentation and collaborate effectively with geographically distributed engineering and operations teams.
• Preferred: 5 or more years supporting enterprise network or security solutions in a large-scale, distributed IT environment.
• Preferred: Hands-on experience with SASE/SSE platforms such as Netskope, Palo Alto Prisma Access, Zscaler Internet Access (ZIA), or Zscaler Private Access (ZPA).
• Preferred: Experience administering SWG capabilities, including URL filtering, SSL/TLS inspection, cloud application controls, malware protection, DLP, threat prevention, and policy enforcement.
• Preferred: Experience configuring ZTNA access to private applications and supporting efforts to reduce reliance on traditional VPN technologies.
• Preferred: Familiarity with endpoint traffic steering, GRE/IPsec tunnels, private access connectors or publishers, dedicated egress, and high-availability designs.
• Preferred: Knowledge of identity-driven security and integration with Microsoft Entra ID, Okta, Ping Identity, or similar providers using SAML, OAuth, OIDC, or SCIM.
• Preferred: Experience integrating or operating security services with endpoint security, SIEM, XDR, or security operations workflows.
• Preferred: Knowledge of cloud networking and security across AWS, Azure, or Google Cloud Platform.
• Preferred: Familiarity with automation and scripting tools such as Python, PowerShell, REST APIs, Terraform, Ansible, or GitHub.
• Preferred: Experience using network, security, or digital-experience observability tools to investigate user experience, application performance, and security events.
• Preferred: Experience creating low-level design documentation, implementation and test plans, and operational runbooks.
• Preferred: Experience working in Agile engineering teams and with modern engineering or DevSecOps practices.
• Preferred: Industry certifications such as CCNA/CCNP Security, PCNSE, Netskope or Zscaler certifications, or equivalent.

• Implement, operate, automate, and continuously improve our global SASE and SSE services.
• Support migration from legacy web proxy and remote-access technologies to cloud-delivered security services.
• Configure capabilities including SWG, ZTNA, CASB, DLP, and threat protection within established architecture, collaborating with senior engineers and partner teams.
• Help design and implement network solutions to meet organizational needs, including preparing network diagrams and blueprints.
• Configure network devices such as routers, switches, firewalls, VPNs, and software-defined networking components to maintain performance and security.
• Troubleshoot network issues and connectivity problems to minimize downtime and maintain reliability.
• Perform routine network maintenance and updates, including patches, service packs, and security configurations.
• Monitor network performance and availability, using tools to identify and recommend optimizations.
• Maintain network security by implementing measures such as firewalls, intrusion detection systems, and encryption.
• Help develop and implement disaster recovery plans to support business continuity during network failures.
• Develop and implement automation and tools for network operations, including configuration management, device provisioning, and software updates.

• AWS
• Ansible
• Azure
• Cloud
• DevSecOps
• GitHub
• Support
• Network
• OAuth
• PowerShell
• Prisma
• Python
• REST
• SAML
• Security
• TCP/IP
• Terraform
• VPN
• Web

More:

We are Cargill, a family company with more than 160 years of experience, working with farmers and customers to source, make, and deliver essential food and agricultural products. Our 155,000 team members focus on nourishing the world safely and sustainably, guided by values that put people first, encourage us to reach higher, and call on us to do the right thing. This Network Engineer - SASE role supports reliable, secure access for users, sites, and applications. We are an equal opportunity employer, including for people with disabilities and veterans.

last updated 41 week of 2026