Senior Proxy Engineer

Senior Proxy Engineer

Alpharetta, GA

Full Time

Summary:

We are seeking a senior Level 3 Proxy Security Engineer with deep expertise in cloud security and enterprise web proxy platforms, specifically Netskope Security Cloud. Engineer will act as the top-tier technical escalation point and primary architect for secure web gateway (SWG), cloud access security broker (CASB), and zero-trust network access (ZTNA) solutions and responsible for designing, Eligible to workimizing, and maintaining complex proxy infrastructures to protect corporate data and ensure seamless user connectivity.

Key Responsibilities

• Level 3 Escalations: Act as the highest operational tier for complex troubleshooting, incident root-cause analysis (RCA), and vendor escalations regarding proxy and traffic-steering failures.
• Netskope Administration & Engineering: Lead the policy design, configuration, deployment, and ongoing maintenance of Netskope SWG, CASB, and Private Access (ZTNA).
• Policy & Rule Management: Design and audit granular Security Services Edge (SSE) policies, real-time threat protection, SSL/TLS decryption rules, and Data Loss Prevention (DLP) profiles.
• Architecture & Eligible to workimization: Perform traffic steering Eligible to workimization using Netskope Client, GRE/IPsec tunnels, explicit proxy configurations, and Client-file/WCCP integrations.
• Migration & Integration: Lead or assist in migrating legacy on-premises web proxies (e.g., Symantec/Broadcom, BlueCoat, Forcepoint) to cloud-native Netskope environments.
• Vendor & Platform Maintenance: Collaborate with Netskope technical support, manage platform upgrades, review cloud release release notes, and ensure operational readiness across enterprise environments.
• Automation & Scripting: Develop scripts (Python, PowerShell, REST APIs) for policy automation, tenant monitoring, and log extraction to SIEM systems.

Technical Skills & Qualifications

Primary Proxy Expertise

Netskope (Netskope Certified Cloud Security Administrator/Architect preferred) with hands-on mastery in SWG, CASB, ZTNA, inline SSL inspection, and steering methods.

Secondary Proxy Knowledge

Familiarity with platforms like Zscaler, FortiProxy, or legacy Symantec/BlueCoat.

Networking & Protocols

Advanced expertise in TCP/IP, HTTP/HTTPS, SSL/TLS certificates, DNS, Client file syntax, IPsec, GRE, and BGP routing.

Identity & Authentication

Strong experience with SAML 2.0, Okta, Microsoft Entra ID (Azure AD), SCIM, and Active Directory integration.

Security Concepts

DLP policy development, threat prevention, URL filtering, sandboxing, and micro segmentation principles.

Disclaimer: Diverse Lynx LLC is an Equal Opportunity Employer. All applicants and employees are evaluated without discrimination, based solely on their qualifications, ability, competence and performance. This email and its attachments may contain confidential or proprietary information and is intended only for the recipient(s). If you received this message in error, please disregard it and notify the sender. If you no longer wish to receive our communications, you may unsubscribe at any time.

Security Notice: Our official website is www.diverselynx.com We do not operate or authorize any other websites representing Diverse Lynx LLC.