Why this role stands out
Leverage your deep expertise in Netskope, SWG, CASB, and ZTNA to design and implement cutting-edge enterprise proxy and cloud security solutions. This hybrid role offers a fantastic opportunity to advance your skills in a technically challenging environment with a reputable company. If you are a seasoned L3 Proxy Security Engineer ready to tackle complex security challenges, this is an excellent opportunity to apply your talents.
Quick overview
Job description
Location: Alpharetta, GA
Work Model: Hybrid – 3 days onsite per week
Job Type: Contract
Duration: 6 months
Experience: 8–10 years
Interview: Face-to-face required
JOB SUMMARY
We are seeking a highly experienced L3 Proxy Security Engineer with strong expertise in Netskope Security Cloud, Secure Web Gateway (SWG), Cloud Access Security Broker (CASB), and Zero Trust Network Access (ZTNA).
The successful candidate will serve as a senior technical escalation point responsible for designing, implementing, troubleshooting, optimizing, and maintaining enterprise proxy and cloud security solutions. The role requires strong hands-on experience with Netskope, traffic steering, security policies, SSL/TLS inspection, DLP, cloud migrations, and security automation.
PRIMARY SKILLS
-
Netskope Security Cloud
-
Netskope SWG
-
Netskope CASB
-
Netskope Private Access / ZTNA
-
Secure Web Gateway
-
Cloud Access Security Broker
-
Zero Trust Network Access
-
Proxy Security
-
Cloud Security
-
Security Services Edge (SSE)
-
SSL/TLS Decryption
-
Data Loss Prevention (DLP)
-
Traffic Steering
-
L3 Troubleshooting
SECONDARY SKILLS
-
GRE Tunnels
-
IPsec Tunnels
-
Explicit Proxy
-
PAC Files
-
WCCP
-
Python
-
PowerShell
-
REST APIs
-
SIEM Integration
-
Log Analysis
-
Security Automation
-
Root Cause Analysis
-
Incident Management
-
Forcepoint
-
BlueCoat
-
Symantec/Broadcom Proxy
-
ForgeRock Access Management
-
Application Security
KEY RESPONSIBILITIES
-
Act as the L3 technical escalation point for complex proxy, cloud security, and traffic-steering issues.
-
Perform advanced troubleshooting, root cause analysis, and permanent resolution of production incidents.
-
Lead vendor escalations and collaborate with Netskope technical support.
-
Design, configure, deploy, and maintain Netskope SWG, CASB, and Private Access/ZTNA solutions.
-
Develop and maintain security policies for SSE, real-time threat protection, SSL/TLS inspection, and DLP.
-
Design and optimize traffic steering using Netskope Client, GRE/IPsec tunnels, explicit proxy, PAC files, and WCCP.
-
Lead or support migrations from legacy on-premises proxy platforms to cloud-native Netskope environments.
-
Support migrations involving platforms such as Symantec/Broadcom, BlueCoat, and Forcepoint.
-
Perform Netskope platform maintenance, upgrades, and operational readiness activities.
-
Review cloud platform release notes and assess their impact on enterprise environments.
-
Develop automation using Python, PowerShell, and REST APIs.
-
Automate policy management, tenant monitoring, and security log extraction.
-
Integrate Netskope and proxy logs with enterprise SIEM platforms.
-
Monitor security events, application performance, and user connectivity.
-
Collaborate with Network, Security, Infrastructure, and Application teams.
-
Maintain technical documentation, troubleshooting procedures, and operational runbooks.
REQUIRED QUALIFICATIONS
-
Strong hands-on experience with Netskope Security Cloud.
-
Experience with Netskope SWG, CASB, and Private Access/ZTNA.
-
Experience working in an L3 engineering or senior escalation role.
-
Strong understanding of secure web gateway and cloud security architectures.
-
Experience with SSL/TLS inspection and decryption.
-
Strong knowledge of DLP and security policy management.
-
Hands-on experience with GRE/IPsec tunnels and traffic steering.
-
Experience with PAC files, explicit proxy, and WCCP.
-
Experience migrating legacy proxy environments to cloud-based security platforms.
-
Strong troubleshooting and root cause analysis experience.
-
Experience with Python, PowerShell, and/or REST API automation.
-
Experience integrating security platforms with SIEM solutions.
-
Strong communication, documentation, and stakeholder-management skills.
NICE-TO-HAVE SKILLS
-
ForgeRock Access Management
-
Application Security
-
Forcepoint
-
BlueCoat
-
Symantec/Broadcom Proxy
-
Security Automation
-
SIEM Platforms
-
Python Automation
-
PowerShell Automation
-
REST API Integration
Similar jobs
- PI

Security Analyst II Location: Madison, WI Hybrid position Need Wisconsin Residents onlyRecently posted
Prospect Infosys Inc · Wisconsin · Hybrid 🇺🇸
TechnologySalary not listed - VA

Network Incident Response EngineerRecently posted
Vailexa · Warren, Pennsylvania · Hybrid 🇺🇸
Load BalancingTCP/IPDNS+2TechnologySalary not listed - NS
Information Security Operations Specialist (SecOps & Governance, Risk, and Compliance), Work From Home, 6 Month Contract - GRecently posted
Next Step Systems · United States · Remote 🇺🇸
Operations & Project ManagementSalary not listed - MA

Senior Zero Trust Systems Engineer with Security ClearanceRecently posted
Markon · Fort Meade, MD · Hybrid 🇺🇸
Zero TrustTechnology$230k - $240k/yr - MA

Computer Network Defense Analyst Level 1 with Security ClearanceRecently posted
Markon · Fort Meade, MD · Hybrid 🇺🇸
BashIoTPenetration Testing+3$110k - $125k/yr - GR

Cyber Security Architect with Security ClearanceRecently posted
GRVTY · Chantilly, VA · Hybrid 🇺🇸
DockerMicroservicesAWS+9Technology$150k - $250k/yr - HM

Cyberspace Defensive Analyst 1 with Security ClearanceRecently posted
HII Mission Technologies · Fort Meade, MD · Hybrid 🇺🇸
Technology$73.2k - $85.3k/yr - SO

Cybersecurity Lead with Security ClearanceRecently posted
SOSi · Honolulu, HI · Remote 🇺🇸
GDPRHIPAAProject Management+2Technology$157.4k - $208.4k/yr - IG

Information Assurance Specialist with Security ClearanceRecently posted
Insight Global, Inc. · Pentagon, DC · On-site 🇺🇸
Microsoft ExcelData AnalysisAdministrativeSalary not listed - MA

Cryptologic Cyber Planner 3 with Security ClearanceRecently posted
Markon · Fort Meade, MD · Hybrid 🇺🇸
Technology$120k - $145k/yr - KT
Security Engineer (AWS/IAM) with HIgher Education - RemoteRecently posted
Komplete Teleservices · United States · Remote 🇺🇸
AWSLinuxIAMTechnologySalary not listed - RD
Information Systems Security Engineer (ISSE) with Security ClearanceRecently posted
RDR, Inc. · Chantilly, VA · Hybrid 🇺🇸
AWSSplunkIAMTechnologySalary not listed
