Proxy Engineer

Location: Alpharetta, GA
Work Model: Hybrid – 3 days onsite per week
Job Type: Contract
Duration: 6 months
Experience: 8–10 years
Interview: Face-to-face required

JOB SUMMARY

We are seeking a highly experienced L3 Proxy Security Engineer with strong expertise in Netskope Security Cloud, Secure Web Gateway (SWG), Cloud Access Security Broker (CASB), and Zero Trust Network Access (ZTNA).

The successful candidate will serve as a senior technical escalation point responsible for designing, implementing, troubleshooting, optimizing, and maintaining enterprise proxy and cloud security solutions. The role requires strong hands-on experience with Netskope, traffic steering, security policies, SSL/TLS inspection, DLP, cloud migrations, and security automation.

PRIMARY SKILLS

• Netskope Security Cloud

• Netskope SWG

• Netskope CASB

• Netskope Private Access / ZTNA

• Secure Web Gateway

• Cloud Access Security Broker

• Zero Trust Network Access

• Proxy Security

• Cloud Security

• Security Services Edge (SSE)

• SSL/TLS Decryption

• Data Loss Prevention (DLP)

• Traffic Steering

• L3 Troubleshooting

SECONDARY SKILLS

• GRE Tunnels

• IPsec Tunnels

• Explicit Proxy

• PAC Files

• WCCP

• Python

• PowerShell

• REST APIs

• SIEM Integration

• Log Analysis

• Security Automation

• Root Cause Analysis

• Incident Management

• Forcepoint

• BlueCoat

• Symantec/Broadcom Proxy

• ForgeRock Access Management

• Application Security

KEY RESPONSIBILITIES

• Act as the L3 technical escalation point for complex proxy, cloud security, and traffic-steering issues.

• Perform advanced troubleshooting, root cause analysis, and permanent resolution of production incidents.

• Lead vendor escalations and collaborate with Netskope technical support.

• Design, configure, deploy, and maintain Netskope SWG, CASB, and Private Access/ZTNA solutions.

• Develop and maintain security policies for SSE, real-time threat protection, SSL/TLS inspection, and DLP.

• Design and optimize traffic steering using Netskope Client, GRE/IPsec tunnels, explicit proxy, PAC files, and WCCP.

• Lead or support migrations from legacy on-premises proxy platforms to cloud-native Netskope environments.

• Support migrations involving platforms such as Symantec/Broadcom, BlueCoat, and Forcepoint.

• Perform Netskope platform maintenance, upgrades, and operational readiness activities.

• Review cloud platform release notes and assess their impact on enterprise environments.

• Develop automation using Python, PowerShell, and REST APIs.

• Automate policy management, tenant monitoring, and security log extraction.

• Integrate Netskope and proxy logs with enterprise SIEM platforms.

• Monitor security events, application performance, and user connectivity.

• Collaborate with Network, Security, Infrastructure, and Application teams.

• Maintain technical documentation, troubleshooting procedures, and operational runbooks.

REQUIRED QUALIFICATIONS

• Strong hands-on experience with Netskope Security Cloud.

• Experience with Netskope SWG, CASB, and Private Access/ZTNA.

• Experience working in an L3 engineering or senior escalation role.

• Strong understanding of secure web gateway and cloud security architectures.

• Experience with SSL/TLS inspection and decryption.

• Strong knowledge of DLP and security policy management.

• Hands-on experience with GRE/IPsec tunnels and traffic steering.

• Experience with PAC files, explicit proxy, and WCCP.

• Experience migrating legacy proxy environments to cloud-based security platforms.

• Strong troubleshooting and root cause analysis experience.

• Experience with Python, PowerShell, and/or REST API automation.

• Experience integrating security platforms with SIEM solutions.

• Strong communication, documentation, and stakeholder-management skills.

NICE-TO-HAVE SKILLS

• ForgeRock Access Management

• Application Security

• Forcepoint

• BlueCoat

• Symantec/Broadcom Proxy

• Security Automation

• SIEM Platforms

• Python Automation

• PowerShell Automation

• REST API Integration