IT Engineer,Networking,Intermediate

Keysight is a mission-critical design enablement partner for organizations solving the world’s most complex engineering challenges. With deep engineering expertise and leading design, emulation, and test solutions, our ~16,800 employees help customers in over 100 countries accelerate innovation across communications, automotive, energy, quantum, aerospace and defense, semiconductor, and artificial intelligence markets. Learn more about what we do.

At Keysight, people come together to explore new ideas, challenge what's possible, and advance the technologies defining the future. Here, you'll find opportunities to do your best work, take your career further, and thrive in an award-winningculture.Learn more about our benefits.

Responsibilities

Netskope SASE Support and Operations:

• Operate, support and maintain Keysight’s global Netskope platform - Secure Web Gateway (SWG), Cloud Access Security Broker (CASB) and Zero Trust Network Access (NPA/ZTNA) - as part of the global network operations team in a “follow the sun” model (APAC, EMEA & Americas).
• Serve as an escalation point and subject matter expert for Netskope incidents, troubleshooting client steering, tunnel/connector, authentication, DNS, certificate and application access issues across user, branch and cloud traffic paths.
• Monitor Netskope tenant health, Publisher/connector status, NewEdge POP connectivity and user experience; proactively identify and eliminate performance bottlenecks and steadily improve service availability.
• Manage day-to-day policy and configuration changes - web/URL filtering, real-time protection and DLP policies, SaaS/IaaS CASB controls, private application onboarding, TLS inspection and certificate bypass exceptions - through established change management processes.
• Administer Netskope Client deployment and lifecycle across Windows, macOS and mobile endpoints, including steering configuration, upgrades and troubleshooting.
• Partner with the Information Security team to tune CASB and DLP policies, review alerts and participate in security incident response as the Netskope and network SME.
• Manage vendor relationships - open and drive Netskope support cases, validate fixes, and track service-level performance.
• Continuous improvement - participate in Problem Management, post-mortems and root cause analysis; develop runbooks, knowledge articles and automation to reduce incident volume and speed resolution.

Qualifications

Job Qualifications

We’re looking for a diversely skilled, experienced network and security engineer with these qualifications:

• BS in Engineering, Computer Science or Information Technology or equivalent certification and/or experience.
• 2+ years of hands-on network and/or network security experience, including supporting a production SASE/SSE, proxy or cloud security platform.
• Strong understanding of TCP/IP, DNS, TLS/PKI, proxy and firewall concepts, and zero trust principles.
• Strong troubleshooting skills and comfort working incidents in a 24x7 global operations environment.
• Netskope certification (e.g., NCSA, NCSE, NCSP) is a plus; other security or networking certification (e.g., CCNP, PCNSA/PCNSE, Security+, CISSP) and/or security specialization is a plus.
• An ideal candidate will have experience or certification with some or all of the following technologies:

Required:

• Hands-on experience administering Netskope (SWG, CASB and/or Private Access/ZTNA) or a comparable SSE platform (e.g., Zscaler, Prisma Access)
• Web proxy/SWG, URL filtering and TLS inspection concepts
• Enterprise network fundamentals (LAN/WAN, routing, DNS)

Desirable Skills:

• Data loss prevention (DLP) policy design and tuning
• SaaS and IaaS security (Microsoft 365, Google Workspace, Salesforce, AWS, Azure)
• Identity and access integrations (Entra ID/Azure AD, Okta, SAML/SCIM)
• Endpoint deployment tools (Intune, Jamf, SCCM)
• Palo Alto Networks and Fortinet firewalls
• SIEM integration and security incident response processes
• Python, PowerShell, Terraform or REST API automation
• ITIL-based incident, problem and change management; ServiceNow

Careers Privacy Statement ***Keysight is an Equal Opportunity Employer.***

Netskope SASE Support and Operations:

• Operate, support and maintain Keysight’s global Netskope platform - Secure Web Gateway (SWG), Cloud Access Security Broker (CASB) and Zero Trust Network Access (NPA/ZTNA) - as part of the global network operations team in a “follow the sun” model (APAC, EMEA & Americas).
• Serve as an escalation point and subject matter expert for Netskope incidents, troubleshooting client steering, tunnel/connector, authentication, DNS, certificate and application access issues across user, branch and cloud traffic paths.
• Monitor Netskope tenant health, Publisher/connector status, NewEdge POP connectivity and user experience; proactively identify and eliminate performance bottlenecks and steadily improve service availability.
• Manage day-to-day policy and configuration changes - web/URL filtering, real-time protection and DLP policies, SaaS/IaaS CASB controls, private application onboarding, TLS inspection and certificate bypass exceptions - through established change management processes.
• Administer Netskope Client deployment and lifecycle across Windows, macOS and mobile endpoints, including steering configuration, upgrades and troubleshooting.
• Partner with the Information Security team to tune CASB and DLP policies, review alerts and participate in security incident response as the Netskope and network SME.
• Manage vendor relationships - open and drive Netskope support cases, validate fixes, and track service-level performance.
• Continuous improvement - participate in Problem Management, post-mortems and root cause analysis; develop runbooks, knowledge articles and automation to reduce incident volume and speed resolution.

Job Qualifications

We’re looking for a diversely skilled, experienced network and security engineer with these qualifications:

• BS in Engineering, Computer Science or Information Technology or equivalent certification and/or experience.
• 2+ years of hands-on network and/or network security experience, including supporting a production SASE/SSE, proxy or cloud security platform.
• Strong understanding of TCP/IP, DNS, TLS/PKI, proxy and firewall concepts, and zero trust principles.
• Strong troubleshooting skills and comfort working incidents in a 24x7 global operations environment.
• Netskope certification (e.g., NCSA, NCSE, NCSP) is a plus; other security or networking certification (e.g., CCNP, PCNSA/PCNSE, Security+, CISSP) and/or security specialization is a plus.
• An ideal candidate will have experience or certification with some or all of the following technologies:

Required:

• Hands-on experience administering Netskope (SWG, CASB and/or Private Access/ZTNA) or a comparable SSE platform (e.g., Zscaler, Prisma Access)
• Web proxy/SWG, URL filtering and TLS inspection concepts
• Enterprise network fundamentals (LAN/WAN, routing, DNS)

Desirable Skills:

• Data loss prevention (DLP) policy design and tuning
• SaaS and IaaS security (Microsoft 365, Google Workspace, Salesforce, AWS, Azure)
• Identity and access integrations (Entra ID/Azure AD, Okta, SAML/SCIM)
• Endpoint deployment tools (Intune, Jamf, SCCM)
• Palo Alto Networks and Fortinet firewalls
• SIEM integration and security incident response processes
• Python, PowerShell, Terraform or REST API automation
• ITIL-based incident, problem and change management; ServiceNow

Careers Privacy Statement ***Keysight is an Equal Opportunity Employer.***