{"id":3409415,"url":"https://alion.io/job/keysight-sase-architect-it-engineering","title":"SASE Architect (IT Engineering)","company":{"id":53596,"name":"Keysight","domain":"keysight.com","url":"https://alion.io/company/keysight","size_band":"5000+","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Jibe","truth_index":{"grade":"A","score":95,"open_postings":3,"ghost_share":0,"stale_share":0,"repost_share":0,"time_to_fill_p50_days":109,"computed_at":"2026-10-31T05:58:55Z"}},"role":"Support","role_family":"Support","seniority":"staff","employment_type":null,"work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Colorado Springs, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":110600,"max":184330,"currency":"USD","period":"year","gross":null,"usd_annual":184330},"salary_estimate":null,"experience_years_min":8,"visa_sponsorship":false,"relocation_package":false,"has_equity":true,"technologies":[{"name":"DLP","optional":false},{"name":"DNS","optional":false},{"name":"Microsoft Entra ID","optional":false},{"name":"Okta","optional":false},{"name":"PKI","optional":false},{"name":"Python","optional":false},{"name":"SIEM","optional":false},{"name":"SLI/SLO/SLA","optional":false},{"name":"TCP/IP","optional":false},{"name":"Terraform","optional":false},{"name":"VPN","optional":false},{"name":"Zero Trust","optional":false},{"name":"Zscaler","optional":false},{"name":"AWS","optional":true},{"name":"Azure","optional":true},{"name":"Crowdstrike","optional":true},{"name":"GCP","optional":true},{"name":"Google Workspace","optional":true},{"name":"ITIL","optional":true},{"name":"Microsoft Defender","optional":true},{"name":"PowerShell","optional":true},{"name":"Rest API","optional":true},{"name":"ServiceNow","optional":true}],"status":"live","first_seen_at":"2026-10-28T16:20:00Z","employer_posted_date":"2026-10-28","last_verified_at":"2026-11-01T02:29:43Z","board_verified":true,"closed_at":null,"days_open":3,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":3},"description":"OverviewKeysight is at the forefront of technology innovation, delivering breakthroughs and trusted insights in electronic design, simulation, prototyping, test, manufacturing, and optimization. Our ~15,000 employees create world-class solutions in communications, 5G, automotive, energy, quantum, aerospace, defense, and semiconductor markets for customers in over 100 countries. Learn more about what we do.\nOuraward-winning culture embraces a bold vision of where technology can take us and a passion for tackling challenging problems with industry-first solutions. We believe that when people feel a sense of belonging, they can be more creative, innovative, and thrive at all points in their careers.\nLead the evolution of Keysight's global Secure Access Service Edge (SASE) strategy and architecture. As a senior technical leader, you will drive the design and implementation of Zero Trust security solutions that support a global workforce and complex enterprise environment. This role offers the opportunity to influence long-term security strategy, partner with senior leadership, and help define the future state of secure access across Keysight.\nIn this highly visible role, you will serve as a trusted technical leader responsible for advancing Keysight's global secure access architecture. You'll define technology standards, guide strategic initiatives, and partner with cross-functional teams to deliver innovative security solutions that enable business growth while protecting critical assets. Working with cutting-edge cloud, network, and security technologies, you'll help drive the transformation of secure access across the enterprise and influence the direction of cybersecurity for years to come.\nResponsibilities\nSASE Architecture & Strategy\nDefine and own Keysight's global Secure Access Service Edge (SASE) and Security Service Edge (SSE) architecture, with Netskope Secure Web Gateway (SWG), Cloud Access Security Broker (CASB), and Zero Trust Network Access (Private Access/ZTNA) as the core platform.\nDevelop and maintain the SASE technology roadmap, reference architectures, design standards, and policy frameworks that support secure web access, SaaS and cloud services, and private application access across 130+ global sites and a hybrid workforce.\nLead architecture and technical decision-making for major initiatives, including migration from legacy VPN, proxy, and firewall-based access solutions to Netskope, cloud and SaaS adoption, M&A integrations, and strategic security enhancements.\nDesign and oversee integrations between Netskope and identity, endpoint, cloud, and security platforms, including SSO, MFA, Conditional Access, SIEM/SOAR, DLP, and cloud-native services, to deliver consistent end-to-end security.\nEvaluate emerging technologies, vendor roadmap developments, licensing strategies, and cost optimization opportunities; develop architecture decision records, recommendations, and business cases for leadership.\nPartner closely with Information Security, Identity, Cloud, Endpoint, Infrastructure, and Application teams to ensure solutions align with security, compliance, privacy, and business requirements.\nTechnical Leadership & Operational Excellence\nServe as the senior technical authority and Tier 3 escalation point for the Netskope platform, providing guidance on complex incidents, troubleshooting, root cause analysis, and long-term corrective actions.\nMentor and coach engineers while promoting best practices, operational excellence, automation, infrastructure-as-code, and scalable support models.\nDrive adoption of APIs, Python, Terraform, and other automation technologies to improve reliability, consistency, operational efficiency, and service scalability.\nDefine monitoring standards, service-level objectives (SLOs), capacity planning, resiliency requirements, failover strategies, and business continuity designs for SASE services.\nEstablish architectural and operational standards that reduce risk, improve user experience, and support long-term platform growth.\nCross-Functional Collaboration & Vendor Leadership\nCollaborate with business and IT stakeholders to translate business requirements into scalable security architectures and communicate design decisions, trade-offs, and recommendations to both technical and non-technical audiences.\nManage strategic relationships with Netskope and other technology partners, including roadmap discussions, escalations, proof-of-concept evaluations, and technical reviews.\nInfluence enterprise security strategy by guiding technology direction and supporting the adoption of modern Zero Trust and secure access capabilities across the organization.\nQualifications\nWe're looking for a highly skilled security and network architect with deep expertise in modern secure access technologies and a proven ability to lead enterprise-scale security initiatives.\nBasic Qualifications\nBachelor's degree in Engineering, Computer Science, Information Technology, or an equivalent combination of certifications and experience.\n8+ years of hands-on network and/or network security experience, including 3+ years architecting and deploying SASE/SSE, cloud proxy, or Zero Trust solutions in a large enterprise environment.\nDeep expertise in Zero Trust architecture, Secure Web Gateway (SWG), Cloud Access Security Broker (CASB), and Zero Trust Network Access (ZTNA) design, including TLS inspection, Data Loss Prevention (DLP), and traffic steering strategies.\nStrong understanding of TCP/IP, DNS, TLS/PKI, identity federation technologies (SAML, OIDC, SCIM), and cloud networking and security concepts.\nProven ability to lead complex cross-functional initiatives and communicate architecture, strategy, and technical recommendations to both executives and engineering teams.\nPreferred Certifications\nNetskope certifications such as NCSE, NCSP, or NCSA.\nSecurity and architecture certifications such as CISSP, CCSP, CCNP Security, SABSA, TOGAF, or similar credentials.\n\nRequired Technical Experience\nHands-on architecture and administration experience with Netskope (SWG, CASB, and Private Access/ZTNA) or an equivalent enterprise Security Service Edge (SSE) platform such as Zscaler or Prisma Access.\nExperience designing and implementing identity and conditional access solutions using platforms such as Entra ID and Okta.\nStrong understanding of enterprise networking fundamentals, including LAN/WAN, routing, and DNS.\nDesired Technical Skills\nExperience with several of the technologies below is highly desirable:\nData Loss Prevention (DLP) program development, policy design, and tuning.\nSaaS and IaaS security posture management across Microsoft 365, Google Workspace, Salesforce, AWS, Azure, and GCP environments.\nEndpoint management, endpoint security, and EDR integrations, including Intune, Jamf, CrowdStrike, and Microsoft Defender.\nSIEM/SOAR integrations and security incident response processes.\nPalo Alto Networks and Fortinet firewall technologies.\nAutomation and Infrastructure-as-Code using Python, PowerShell, Terraform, and REST APIs.\nITIL-based incident, problem, and change management practices, including ServiceNow.\nEnterprise architecture frameworks, technical standards development, architecture governance, and technical documentation.\nAdditional Requirements\nWillingness to work flexible hours, including occasional weekend and holiday support for critical projects, deployments, or incident response activities.\nAbility to travel occasionally to support global deployments, architecture reviews, and stakeholder engagement.\nCareers Privacy Statement\nKeysight is an Equal Opportunity Employer\nKeysight Technologies Inc. is an equal opportunity employer. Qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, protected veteran status, disability or any other protected categories under all applicable laws.\nPay Transparency\nThe level of role will be based on applicable experience, education, and skills. Most offers will be between the minimum and the midpoint of the Salary Range listed below.\nColorado Pay Range: Minimum $110,600 - Maximum $184,330\nNote: For other locations, pay ranges will vary by region\nUS Employees may be eligible for the following benefits:\nMedical, dental and vision\nHealth Savings Account\nHealth Care and Dependent Care Flexible Spending Accounts\nLife, Accident, Disability insurance\nBusiness Travel Accident and Business Travel Health\n401(k) Plan\nFlexible Time Off, Paid Holidays\nPaid Family Leave\nDiscounts, Perks\nTuition Reimbursement\nAdoption Assistance\nIncentive Programs\nESPP (Employee Stock Purchase Plan)\nSASE Architecture & Strategy\nDefine and own Keysight's global Secure Access Service Edge (SASE) and Security Service Edge (SSE) architecture, with Netskope Secure Web Gateway (SWG), Cloud Access Security Broker (CASB), and Zero Trust Network Access (Private Access/ZTNA) as the core platform.\nDevelop and maintain the SASE technology roadmap, reference architectures, design standards, and policy frameworks that support secure web access, SaaS and cloud services, and private application access across 130+ global sites and a hybrid workforce.\nLead architecture and technical decision-making for major initiatives, including migration from legacy VPN, proxy, and firewall-based access solutions to Netskope, cloud and SaaS adoption, M&A integrations, and strategic security enhancements.\nDesign and oversee integrations between Netskope and identity, endpoint, cloud, and security platforms, including SSO, MFA, Conditional Access, SIEM/SOAR, DLP, and cloud-native services, to deliver consistent end-to-end security.\nEvaluate emerging technologies, vendor roadmap developments, licensing strategies, and cost optimization opportunities; develop architecture decision records, recommendations, and business cases for leadership.\nPartner closely with Information Security, Identity, Cloud, Endpoint, Infrastructure, and Application teams to ensure solutions align with security, compliance, privacy, and business requirements.\nTechnical Leadership & Operational Excellence\nServe as the senior technical authority and Tier 3 escalation point for the Netskope platform, providing guidance on complex incidents, troubleshooting, root cause analysis, and long-term corrective actions.\nMentor and coach engineers while promoting best practices, operational excellence, automation, infrastructure-as-code, and scalable support models.\nDrive adoption of APIs, Python, Terraform, and other automation technologies to improve reliability, consistency, operational efficiency, and service scalability.\nDefine monitoring standards, service-level objectives (SLOs), capacity planning, resiliency requirements, failover strategies, and business continuity designs for SASE services.\nEstablish architectural and operational standards that reduce risk, improve user experience, and support long-term platform growth.\nCross-Functional Collaboration & Vendor Leadership\nCollaborate with business and IT stakeholders to translate business requirements into scalable security architectures and communicate design decisions, trade-offs, and recommendations to both technical and non-technical audiences.\nManage strategic relationships with Netskope and other technology partners, including roadmap discussions, escalations, proof-of-concept evaluations, and technical reviews.\nInfluence enterprise security strategy by guiding technology direction and supporting the adoption of modern Zero Trust and secure access capabilities across the organization.\nWe're looking for a highly skilled security and network architect with deep expertise in modern secure access technologies and a proven ability to lead enterprise-scale security initiatives.\nBasic Qualifications\nBachelor's degree in Engineering, Computer Science, Information Technology, or an equivalent combination of certifications and experience.\n8+ years of hands-on network and/o...","description_format":"text","description_chars":15611,"description_truncated":true,"requirements":{"experience_years_min":8,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":true},"security_clearance":false,"languages":[]},"benefits":["Flexible time off","Parental leave"],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Network Security","EDA Software","Simulation & Digital Twin Software","Test & Measurement Instruments"],"lifecycle":[{"event":"open","at":"2026-10-28T17:14:45Z"}],"visa":[],"liveness":{"score":90,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.903,"p_room":1,"age_days":2,"expected_fill_days":109,"reasons":["conf:0","velocity","win:early","comp:brand"],"computed_at":"2026-10-31T05:58:55Z"},"pay":{"stated_usd_annual":184330,"is_top_pay":true},"html_url":"https://alion.io/job/keysight-sase-architect-it-engineering","json_url":"https://alion.io/job/keysight-sase-architect-it-engineering.json","meta":{"generated_at":"2026-11-01T03:05:23Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":4756,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-02T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":53596},"rest":"https://alion.io/mcp/rest/get_company?id=53596"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fkeysight-sase-architect-it-engineering"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fkeysight-sase-architect-it-engineering"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fkeysight-sase-architect-it-engineering"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/keysight-sase-architect-it-engineering\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fkeysight-sase-architect-it-engineering"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3409415}},{"tool":"search_jobs","arguments":{"company":"keysight.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3409415},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}