{"id":3547087,"url":"https://alion.io/job/optimum-solutions-senior-network-security-engineer-sase-and-secure-web-gateway","title":"Senior Network Security Engineer (SASE and Secure Web Gateway)","company":{"id":3800114,"name":"Optimum Solutions","domain":"theoptimum.net","url":"https://alion.io/company/optimum-infosystem","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"services","is_intermediary":false,"listed_via":null,"ats_vendor":null,"truth_index":null},"role":"Security","role_family":"Security","seniority":"senior","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Singapore"],"countries":["SG"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":7000,"max":10000,"currency":"SGD","period":"month","gross":true,"usd_annual":93948},"salary_estimate":null,"experience_years_min":8,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"DLP","optional":false},{"name":"DNS","optional":false},{"name":"ITIL","optional":false},{"name":"Microsoft Entra ID","optional":false},{"name":"Okta","optional":false},{"name":"PKI","optional":false},{"name":"Zero Trust","optional":false},{"name":"Zscaler","optional":false},{"name":"Python","optional":true},{"name":"SIEM","optional":true},{"name":"Splunk","optional":true},{"name":"Terraform","optional":true},{"name":"VPN","optional":true}],"status":"live","first_seen_at":"2026-10-30T20:28:30Z","employer_posted_date":null,"last_verified_at":"2026-10-30T20:28:30Z","board_verified":false,"closed_at":null,"days_open":5,"trust":{"level":"not_scored","repost_count":null,"flags":[],"days_open":5},"description":"About the Role\nWe are seeking a hands-on and analytical Senior Network Security Engineer to lead the architecture, engineering, and evolution of a cloud-delivered security edge for a leading banking environment. In this role, you will spearhead Secure Web Gateway (SWG), Secure Access Service Edge (SASE), and Zero Trust Network Access (ZTNA) transformations, ensuring robust, secure, and seamless network connectivity.\nResponsibilities\nSecure Web Gateway (SWG): Design and maintain web security policy architecture (URL filtering, cloud application control, cloud firewall, file-type/sandbox policies). Engineer SSL/TLS inspection strategies, exemption frameworks, and traffic steering via PAC files, explicit proxies, and GRE/IPsec tunnels. Lead the migration of legacy on-premises proxies to Cloud SWG.\nZero Trust & SASE: Design and build Zero Trust Network Access (ZTNA) to replace remote-access VPNs. Engineer identity integration with corporate IdPs (SAML, SCIM) and implement CASB, DLP, and data-protection controls for cloud and web traffic.\nPlatform Operations & Automation: Maintain platform-independent security policy baselines, perform technical vendor evaluations, and automate configuration management via APIs under version control.\nGovernance & Compliance: Deliver engineering runbooks for Change Advisory Board reviews and support rigorous regulatory audits (e.g., MAS TRM guidelines).\nRequirements\nDegree in Computer Science, Information Technology, or a related field.\n8 to 12 years of total experience in network or security engineering, with at least 4 years dedicated to designing and implementing enterprise SSE/SASE platforms (e.g., Zscaler, Netskope, Prisma Access, Cisco Secure Access) — hands-on engineering focus, not end-user support.\nMigration Expertise: Demonstrated success leading at least one complete migration from an on-premises proxy (e.g., Bluecoat/Symantec ProxySG, Cisco WSA, McAfee SWG) to a cloud SWG platform.\nZTNA Deployment: Proven experience designing and delivering ZTNA solutions to replace legacy remote-access VPNs.\nCore Networking & Security Fundamentals: Deep understanding of HTTP/S, TLS and PKI, proxy/PAC file behavior, DNS, and authentication workflows (SAML, Kerberos).\nIdentity & Edge Integration: Experience integrating identity providers (Microsoft Entra ID or Okta via SAML/SCIM) and working knowledge of enterprise firewalls (Palo Alto, Check Point) alongside GRE/IPsec tunneling.\nExperience operating under ITIL framework in a regulated environment; strong problem-solving skills and a collaborative, fast-learning mindset.\nGood-to-Have Skills\nHands-on design and implementation experience with Zscaler (ZIA/ZPA), Netskope, or Skyhigh Security SSE.\nExperience driving platform evaluations, proofs-of-concept (PoC), or platform-to-platform migrations.\nExpertise in digital experience monitoring, advanced DLP (EDM/IDM), and browser isolation.\nScripting and automation skills using Python or Terraform for SASE configurations, plus SIEM integration (Splunk).\nEndpoint management experience for agent deployments (Intune, SCCM, Jamf).\nPrior work experience within the Financial Services sector.\nProfessional certifications such as CISSP, CCSP, vendor-specific credentials (e.g., Netskope NCCSI/NSK200/300, Palo Alto Networks SSE Engineer, Zscaler ZDTA/ZDTE).\nSkills\nSAML, Implementation of ITIL procedures, Okta, Cloud Migration, DLP, Bluecoat, Network Access Control, Computer Science, Kerberos, Cybersecurity Engineering, Core Network, Platform Migration, Security Architecture Design, Network Security, VPN, CISSP, Security Platform","description_format":"text","description_chars":3597,"description_truncated":false,"requirements":{"experience_years_min":8,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Network Security"],"lifecycle":[{"event":"open","at":"2026-10-30T20:28:30Z"}],"visa":[],"liveness":{"score":51,"band":"ok","label":"Likely open","p_open":1,"p_active":0.54,"p_room":0.945,"age_days":5,"expected_fill_days":14,"reasons":["seen:5","agency","velocity","win:mid"],"computed_at":"2026-11-05T05:54:30Z"},"pay":{"stated_usd_annual":93948,"is_top_pay":false},"html_url":"https://alion.io/job/optimum-solutions-senior-network-security-engineer-sase-and-secure-web-gateway","json_url":"https://alion.io/job/optimum-solutions-senior-network-security-engineer-sase-and-secure-web-gateway.json","meta":{"generated_at":"2026-11-05T08:48:31Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":11231,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-06T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":3800114},"rest":"https://alion.io/mcp/rest/get_company?id=3800114"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Foptimum-solutions-senior-network-security-engineer-sase-and-secure-web-gateway"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Foptimum-solutions-senior-network-security-engineer-sase-and-secure-web-gateway"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Foptimum-solutions-senior-network-security-engineer-sase-and-secure-web-gateway"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/optimum-solutions-senior-network-security-engineer-sase-and-secure-web-gateway\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Foptimum-solutions-senior-network-security-engineer-sase-and-secure-web-gateway"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3547087}},{"tool":"search_jobs","arguments":{"company":"theoptimum.net","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3547087},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}