Zero Trust & SASE Security Engineer

Kion Group AG; Pune District; On-site; INR 1,200,000 - 2,400,000; Full time

Job summary

KION Group AG in Pune, India is seeking a Secure Access & SASE Engineer to help design, implement, and operate global Zero Trust, SASE/SSE, and secure connectivity services. You will collaborate with Network, Security, Cloud, and IAM teams to deliver reliable access for users, devices, and applications across cloud and on-prem environments.

The role emphasizes policy engineering, automation, IaC, and integration with SD-WAN platforms to ensure secure, scalable access and continuous security

Qualifications

• Implement, operate, and improve enterprise Zero Trust and secure access services.
• Engineer and maintain SASE and SSE platforms and services.
• Coordinate with networks, security, and cloud teams to ensure secure access.
• Apply least-privilege and continuous verification principles.

Responsibilities

• Implement and improve Zero Trust, SASE, and SSE services across the enterprise.
• Maintain SASE/SSE platforms including access policies and cloud security.
• Troubleshoot authentication, policy conflicts, and connectivity issues; drive permanent fixes.
• Integrate SASE with global SD-WAN and cloud connectivity.
• Develop IaC-driven automation for secure access configurations and workflows.

Skills

Zero Trust

SASE

SSE

Security policy eng

Automation

IaC

IAM integration

Cloud platforms

SD-WAN integration

Troubleshooting

Job description

The Secure Access & SASE Engineer implements, operates, supports, and continuously improves KION’s global Zero Trust, SASE, SSE, and secure connectivity services. The role contributes to KION’s Zero Trust transformation by ensuring reliable, secure, and scalable access for users, devices, applications, cloud environments, and locations.
The role supports secure and compliant access services through policy engineering, advanced troubleshooting, automation, identity integration, and operational integration with SD-WAN and cloud platforms.
Working across Network, Security, Infrastructure, Cloud, Architecture, Identity, and Application teams, the engineer ensures reliable and secure access to corporate resources within a global enterprise environment

We offer:

The Secure Access & SASE Engineer implements, operates, supports, and continuously improves KION’s global Zero Trust, SASE, SSE, and secure connectivity services. The role contributes to KION’s Zero Trust transformation by ensuring reliable, secure, and scalable access for users, devices, applications, cloud environments, and locations.

The role supports secure and compliant access services through policy engineering, advanced troubleshooting, automation, identity integration, and operational integration with SD-WAN and cloud platforms.

Working across Network, Security, Infrastructure, Cloud, Architecture, Identity, and Application teams, the engineer ensures reliable and secure access to corporate resources within a global enterprise environment

Tasks and Qualifications:

1. Zero Trust, SASE & SSE Engineering (25%)

• Implement, operate, and improve enterprise Zero Trust and secure access services.
• Engineer and maintain SASE and SSE security platforms and services.
• Administer and optimize enterprise SASE and SSE security platforms, including:
  • Security Service Edge and internet security services
  • Zero Trust Network Access and private application access
  • Cloud access security, data protection, and threat prevention
• Maintain secure access configurations for users, devices, applications, cloud services, and branch environments.
• Support KION’s Zero Trust transformation by applying least-privilege access, continuous verification, and secure connectivity principles.
• Support platform upgrades, feature enablement, service improvements, and platform optimization initiatives to enhance security, reliability, and operational efficiency.
• undefined

2. Security Policy Engineering & Governance (15%)

• Implement, maintain, and optimize security policies across Zero Trust and SSE platforms.Develop and manage: Application Access Policies ZTNA Policies URL Filtering Policies Cloud Security Policies CASB Policies DLP Policies SSL Inspection Policies Device Posture Policies Ensure policies align with corporate security standards and business requirements. Continuously review and optimize policy effectiveness and user experience.

3. Advanced Troubleshooting & Service Operations (40%)

• Troubleshoot: Authentication and authorization issues Access policy conflicts ZTNA connectivity issues Cloud application access problems SSL/TLS inspection issues User-to-application communication failures Endpoint posture validation issues Perform root cause analysis and drive permanent corrective actions. Support incident management and security investigations.

4. SD-WAN & Secure Connectivity Integration (10%)

• Support integration of SASE and SSE platforms with global SD-WAN environments.Coordinate with managed service providers to support secure connectivity and platform operations.Optimize traffic steering and security inspection paths.Collaborate with network engineering teams on secure hybrid and cloud connectivity requirements.

5. Security Automation & Infrastructure as Code (10%)

• Support Infrastructure as Code (IaC) solutions for secure access and platform configuration.Automate policy deployment, platform configuration, and security workflows. Develop reusable automation modules and configuration standards. Integrate security platforms with ITSM, IAM and cloud services through APIs.Support automated validation of security configuration changes.Contribute to operational efficiency through workflow automation and orchestration