Zero Trust & SASE Security Engineer

Kion India; Pune District; On-site; INR 1,800,000 - 3,200,000; Full time

Job summary

Kion India is seeking a Secure Access & SASE Engineer to implement, operate, and continuously improve global Zero Trust, SASE, SSE, and secure connectivity services. The role collaborates with Security, Network, Cloud, and Identity teams to ensure reliable, scalable access for users, devices, and apps.

The candidate will drive policy engineering, troubleshooting, and automation initiatives to enhance security posture and operational efficiency across SD-WAN and cloud platforms.

Qualifications

• Implement, operate, and improve enterprise Zero Trust, SASE, and SSE services.
• Develop and optimize security policies across Zero Trust, SSE platforms and related services.
• Troubleshoot authentication, authorization, and connectivity issues across the platform.
• Coordinate integration of SASE/SSE with SD-WAN and cloud platforms.
• Automate policy deployment and security workflows using IaC.

Responsibilities

• Implement and maintain Zero Trust and secure access services across global environments.
• Troubleshoot authentication and policy conflicts and address connectivity issues.
• Coordinate with SD-WAN and cloud teams for secure hybrid connectivity.
• Automate security configurations and policy deployment using IaC.
• Collaborate with cross-functional teams to ensure reliable access to resources.

Skills

Zero Trust

SASE

SSE

Security policies

Policy engineering

Troubleshooting

Automation

IaC

Cloud security

Identity integration

Tools

SASE platforms

ZTNA

SSL Inspection

SD-WAN

IAM

Job description

The Secure Access & SASE Engineer implements, operates, supports, and continuously improves KION s global Zero Trust, SASE, SSE, and secure connectivity services. The role contributes to KION s Zero Trust transformation by ensuring reliable, secure, and scalable access for users, devices, applications, cloud environments, and locations.

The role supports secure and compliant access services through policy engineering, advanced troubleshooting, automation, identity integration, and operational integration with SD-WAN and cloud platforms.

Working across Network, Security, Infrastructure, Cloud, Architecture, Identity, and Application teams, the engineer ensures reliable and secure access to corporate resources within a global enterprise environment

We offer:

The Secure Access & SASE Engineer implements, operates, supports, and continuously improves KION s global Zero Trust, SASE, SSE, and secure connectivity services. The role contributes to KION s Zero Trust transformation by ensuring reliable, secure, and scalable access for users, devices, applications, cloud environments, and locations.

The role supports secure and compliant access services through policy engineering, advanced troubleshooting, automation, identity integration, and operational integration with SD-WAN and cloud platforms.

Working across Network, Security, Infrastructure, Cloud, Architecture, Identity, and Application teams, the engineer ensures reliable and secure access to corporate resources within a global enterprise environment

Tasks and Qualifications:

• 1. Zero Trust, SASE & SSE Engineering (25%)
  • Implement, operate, and improve enterprise Zero Trust and secure access services.
  • Engineer and maintain SASE and SSE security platforms and services.
  • Administer and optimize enterprise SASE and SSE security platforms, including:
    • Security Service Edge and internet security services
    • Zero Trust Network Access and private application access
    • Cloud access security, data protection, and threat prevention
  • Maintain secure access configurations for users, devices, applications, cloud services, and branch environments.
  • Support KION s Zero Trust transformation by applying least-privilege access, continuous verification, and secure connectivity principles.
  • Support platform upgrades, feature enablement, service improvements, and platform optimization initiatives to enhance security, reliability, and operational efficiency.
  • undefined
• 2. Security Policy Engineering & Governance (15%)
  • Implement, maintain, and optimize security policies across Zero Trust and SSE platforms.Develop and manage: Application Access Policies ZTNA Policies URL Filtering Policies Cloud Security Policies CASB Policies DLP Policies SSL Inspection Policies Device Posture Policies Ensure policies align with corporate security standards and business requirements. Continuously review and optimize policy effectiveness and user experience.
• 3. Advanced Troubleshooting & Service Operations (40%)
  • Troubleshoot: Authentication and authorization issues Access policy conflicts ZTNA connectivity issues Cloud application access problems SSL/TLS inspection issues User-to-application communication failures Endpoint posture validation issues Perform root cause analysis and drive permanent corrective actions. Support incident management and security investigations.
• 4. SD-WAN & Secure Connectivity Integration (10%)
  • Support integration of SASE and SSE platforms with global SD-WAN environments.Coordinate with managed service providers to support secure connectivity and platform operations.Optimize traffic steering and security inspection paths.Collaborate with network engineering teams on secure hybrid and cloud connectivity requirements.
• 5. Security Automation & Infrastructure as Code (10%)
  • Support Infrastructure as Code (IaC) solutions for secure access and platform configuration.Automate policy deployment, platform configuration, and security workflows. Develop reusable automation modules and configuration standards. Integrate security platforms with ITSM, IAM and cloud services through APIs.Support automated validation of security configuration changes.Contribute to operational efficiency through workflow automation and orchestration