IT Engineer, Networking, Intermediate

Responsibilities:

• Operate, support and maintain Keysight's global Netskope platform - Secure Web Gateway (SWG), Cloud Access Security Broker (CASB) and Zero Trust Network Access (NPA/ZTNA) - as part of the global network operations team in a "follow the sun" model (APAC, EMEA & Americas).
• Serve as an escalation point and subject matter expert for Netskope incidents, troubleshooting client steering, tunnel/connector, authentication, DNS, certificate and application access issues across user, branch and cloud traffic paths.
• Monitor Netskope tenant health, Publisher/connector status, NewEdge POP connectivity and user experience; proactively identify and eliminate performance bottlenecks and steadily improve service availability.
• Manage day-to-day policy and configuration changes - web/URL filtering, real-time protection and DLP policies, SaaS/IaaS CASB controls, private application onboarding, TLS inspection and certificate bypass exceptions - through established change management processes.
• Administer Netskope Client deployment and lifecycle across Windows, macOS and mobile endpoints, including steering configuration, upgrades and troubleshooting.
• Partner with the Information Security team to tune CASB and DLP policies, review alerts and participate in security incident response as the Netskope and network SME.
• Manage vendor relationships - open and drive Netskope support cases, validate fixes, and track service-level performance.
• Continuous improvement - participate in Problem Management, post-mortems and root cause analysis; develop runbooks, knowledge articles and automation to reduce incident volume and speed resolution.

Qualifications:

Job Qualifications

We're looking for a diversely skilled, experienced network and security engineer with these qualifications:

• BS in Engineering, Computer Science or Information Technology or equivalent certification and/or experience.
• 2+ years of hands-on network and/or network security experience, including supporting a production SASE/SSE, proxy or cloud security platform.
• Strong understanding of TCP/IP, DNS, TLS/PKI, proxy and firewall concepts, and zero trust principles.
• Strong troubleshooting skills and comfort working incidents in a 24x7 global operations environment.
• Netskope certification (e.g., NCSA, NCSE, NCSP) is a plus; other security or networking certification (e.g., CCNP, PCNSA/PCNSE, Security+, CISSP) and/or security specialization is a plus.

An ideal candidate will have experience or certification with some or all of the following technologies:

• Required: Hands-on experience administering Netskope (SWG, CASB and/or Private Access/ZTNA) or a comparable SSE platform (e.g., Zscaler, Prisma Access)
• Required: Web proxy/SWG, URL filtering and TLS inspection concepts
• Required: Enterprise network fundamentals (LAN/WAN, routing, DNS)
• Desirable Skills: Data loss prevention (DLP) policy design and tuning
• Desirable Skills: SaaS and IaaS security (Microsoft 365, Google Workspace, Salesforce, AWS, Azure)
• Desirable Skills: Identity and access integrations (Entra ID/Azure AD, Okta, SAML/SCIM)
• Desirable Skills: Endpoint deployment tools (Intune, Jamf, SCCM)
• Desirable Skills: Palo Alto Networks and Fortinet firewalls
• Desirable Skills: SIEM integration and security incident response processes
• Desirable Skills: Python, PowerShell, Terraform or REST API automation
• Desirable Skills: ITIL-based incident, problem and change management; ServiceNow

Skills

CASB, DNS, Netskope, PKI, Prisma Access, SWG, TLS, ZTNA, Zscaler