Network Security Engineer - Web Proxy

Ernst & Young LLP ( EY India ); Bengaluru; On-site; INR 800,000 - 1,200,000; Full time

Job summary

EY is seeking a Network Security Engineer – Web Proxy (Staff/Junior) to secure outbound web traffic, manage URL filtering and SSL/TLS inspection policies. You will support posturing across assessment, build, transition, and operations with guidance from senior engineers.

The role requires hands-on experience with SWG/forward proxy solutions (Zscaler ZIA, Symantec BlueCoat, Cisco Umbrella, Squid), plus strong HTTP/HTTPS, DNS, TCP/IP, PKI knowledge and PAC file logic.

Qualifications

• 1–3 years of experience in network security, IT support, or system administration focused on web traffic routing.
• Familiarity with SWG and forward proxy solutions such as Zscaler ZIA, Symantec/BlueCoat, Cisco Umbrella, Squid.
• Strong understanding of HTTP/HTTPS, DNS, TCP/IP, SSL/TLS, and PKI.
• Basic JavaScript for Proxy Auto-Configuration (PAC) file syntax and routing logic.
• Foundational security or networking certifications (e.g., CompTIA Security+, Network+, CCNA) or vendor credentials (e.g., Zscaler ZCSA).

Responsibilities

• Assess, build, transition, and operate safe web proxies; review policies, URL filtering, and ACLs.
• Configure on‑premise proxy appliances or cloud SWGs; manage blocklists and SSL policies.
• Document changes, draft SOPs, and participate in UAT for new proxy rules.
• Act as Tier 2 for web access issues; monitor proxy health and logs for security monitoring.

Skills

Network security

IT support

System administration

Web traffic routing

Education

CompTIA Security+

CCNA

Zscaler ZCSA

Tools

Zscaler ZIA

Symantec BlueCoat

McAfee Trellix

Cisco Umbrella

Squid

Job description

GMS-Staff-Web Proxy At EY, you’ll have the chance to build a career as unique as you are, with the global scale, support, inclusive culture and technology to become the best version of you. And we’re counting on your unique voice and perspective to help EY become even better, too. Join us and build an exceptional experience for yourself, and a better working world for all.

Job Description

Network Security Engineer – Web Proxy (Staff / Junior Level) Experience Level: 1–3 Years

Role Overview

We are seeking a Junior to Staff-level Network Security Engineer specializing in Secure Web Gateways (SWG) and Enterprise Web Proxies. Operating under senior guidance across the Assess, Build, Transition, and Operations lifecycle, this role focuses on securing outbound web traffic, managing URL filtering, and maintaining SSL/TLS inspection policies. The ideal candidate has a strong foundation in HTTP/HTTPS protocols, proxy auto-configuration (PAC) mechanics, and web security principles.

Key Responsibilities

• Assess (Posture Review & Policy Evaluation) Assist in reviewing existing web proxy policies, URL filtering rulesets, and web access control lists (ACLs) against enterprise security baselines. Analyze historical proxy logs to identify unused rules, redundant policy layers, or potentially risky allowed categories. Evaluate current PAC file configurations and routing logic to identify optimization opportunities for remote and on-premise users.
• Build (Configuration & Deployment) Support the configuration and provisioning of on-premise proxy appliances or cloud-based Secure Web Gateways (e.g., Zscaler ZIA, Broadcom/Symantec Web Protection, Cisco Umbrella). Implement and update URL category blocklists, custom exception domains, and tenant restrictions under the guidance of senior engineers. Assist in configuring SSL/TLS decryption policies, managing certificate deployments, and implementing bypass rules for sensitive traffic (e.g., banking, healthcare).
• Transition (Testing, Handover & Documentation) Participate in User Acceptance Testing (UAT) for new proxy rules, validating access for specific business applications and troubleshooting connectivity prior to broad deployment. Document configuration changes, proxy bypass lists, and updated network diagrams in the team’s knowledge repository. Draft initial troubleshooting playbooks and standard operating procedures (SOPs) for the Tier 1 IT Helpdesk.
• Operations & Continuous Management Serve as a Tier 2 escalation point for web access issues, troubleshooting blocked websites, PAC file routing errors, and SSL certificate pinning conflicts. Monitor web proxy health, node latency, and connection limits, proactively raising service tickets for performance degradation. Process daily service requests for URL recategorization and policy exceptions within established SLAs. Ensure proxy logs are successfully streaming to the enterprise SIEM for continuous security monitoring and incident response investigations.

Required Skills & Qualifications

• Experience : 1–3 years of experience in network security, IT support, or system administration with a focus on web traffic routing.
• Core Technologies : Familiarity with Secure Web Gateways (SWG) and forward proxy solutions (e.g., Zscaler ZIA, Symantec/BlueCoat, McAfee/Trellix, Cisco Umbrella, or Squid).
• Web Protocols & PKI : Strong understanding of HTTP/HTTPS, DNS resolution, TCP/IP, and the fundamentals of SSL/TLS handshakes and Public Key Infrastructure (PKI).
• Scripting/Config : Basic understanding of JavaScript as it relates to Proxy Auto-Configuration (PAC) file syntax and routing logic.
• Certifications : Foundational security or networking certifications (e.g., CompTIA Security+, Network+, CCNA) or vendor-specific associate credentials (e.g., Zscaler ZCSA).
• Soft Skills : Strong customer service orientation for handling end-user connectivity issues, detail-oriented approach to rule management, and solid technical documentation skills.

EY | Building a better working world

EY exists to build a better working world, helping to create long-term value for clients, people and society and build trust in the capital markets. Enabled by data and technology, diverse EY teams in over 150 countries provide trust through assurance and help clients grow, transform and operate. Working across assurance, consulting, law, strategy, tax and transactions, EY teams ask better questions to find new answers for the complex issues facing our world today.