SASE Network Engineer

Experience: 10+ Years

Remote

1 Yrs.

Role Overview

We are looking for a highly skilled Senior SASE Network Validation Engineer to lead interoperability and coexistence testing between Microsoft Global Secure Access (GSA) and leading SASE/SSE platforms including Netskope, Zscaler, Palo Alto Prisma Access, Cisco Secure Access, Check Point Harmony, Cloudflare One, and other enterprise security solutions.
This role requires deep expertise in enterprise networking, cloud networking, identity, security, and hands-on experience with at least one commercial SASE platform. The engineer will validate complex traffic flows, security policies, authentication mechanisms, application access scenarios, and coexistence behavior across multiple operating systems.
The ideal candidate should be comfortable troubleshooting network protocols at packet level, configuring cloud environments, and working closely with product engineering teams.
Key Responsibilities
•
Design and execute coexistence testing between Microsoft Global Secure Access (GSA) and third-party SASE/SSE vendors.
•
Execute and maintain 100+ functional, networking, security, and interoperability test cases across multiple SASE products.
•
Validate coexistence scenarios across:
o
Windows 10
o
Windows 11
o
macOS (Client & Apple Silicon)
•
Configure and troubleshoot SASE clients, VPN clients, Secure Web Gateway (SWG), ZTNA, CASB, Firewall-as-a-Service (FWaaS), and DNS security policies.
•
Perform packet capture analysis using Wireshark and other network diagnostic tools.
•
Validate traffic steering, split tunneling, proxy chaining, certificate handling, authentication flows, DNS resolution, and application access.
•
Configure Azure networking components for testing environments.
•
Analyze network traffic to identify routing, proxy, TLS, authentication, or policy enforcement issues.
•
Work with engineering teams to reproduce, isolate, and document product defects.
•
Prepare detailed test reports, defect documentation, root cause analysis, and validation reports.
•
Collaborate with Microsoft and ISV engineering teams during issue investigation.
Required Technical Skills
•
Enterprise Networking
•
TCP/IP
•
Routing and Switching
•
DNS
•
DHCP
•
HTTP/HTTPS
•
TLS/SSL
•
VPN (IPSec/SSL)
•
NAT
•
Proxy technologies
•
PKI and Certificates
•
Authentication protocols
•
Network troubleshooting
Cloud Skills
•
Microsoft Azure
•
Azure Virtual Networks
•
Network Security Groups
•
Azure Firewall
•
Azure VPN Gateway
•
Azure Load Balancer
•
Azure Application Gateway
•
Azure Virtual Machines
•
Azure Monitor
•
Azure Networking concepts
Identity & Authentication
•
Microsoft Entra ID (Azure AD)
•
SAML
•
OAuth 2.0
•
OpenID Connect
•
Kerberos
•
NTLM
•
Conditional Access
•
Multi-Factor Authentication (MFA)
SASE / SSE Experience
Hands-on experience with at least one of the following:
•
Netskope
•
Zscaler Internet Access (ZIA)
•
Zscaler Private Access (ZPA)
•
Palo Alto Prisma Access
•
Cisco Secure Access
•
Check Point Harmony SASE
•
Cloudflare
•
Skyhigh Security
•
iBoss
Tools
•
Wireshark
•
Microsoft Network Monitor
•
Postman
•
PowerShell
•
Azure Portal
•
Azure CLI
•
Microsoft Graph API (preferred)
•
Git
•
Azure DevOps