Senior SASE & SWG Security Engineer (ZTNA)

Optimum Solutions (Singapore) Pte Ltd.; Singapore; On-site; SGD 120,000 - 180,000; Full time

Job summary

Optimum Solutions (Singapore) Pte Ltd. seeks a hands-on Senior Network Security Engineer to architect and evolve cloud-delivered security for a leading banking environment. You will drive SWG, SASE, and ZTNA transformations, ensuring robust, secure network connectivity.

You will lead policy design, vendor evaluations, and automation efforts while aligning with regulatory audits and runbooks to maintain secure operations.

Qualifications

• Degree in Computer Science, Information Technology, or related field.
• 8–12 years in network or security engineering.
• 4+ years on enterprise SSE/SASE platforms (e.g., Zscaler, Netskope, Prisma Access).
• Migration experience from on‑prem proxies to cloud SWG essential.
• Experience delivering ZTNA solutions to replace remote VPNs.
• Understanding of HTTP/S, TLS, PKI, DNS, and auth flows (SAML, Kerberos).
• Experience with IdPs (Microsoft Entra ID or Okta) via SAML/SCIM; firewalls knowledge.

Responsibilities

• Lead architecture, engineering, and evolution of a cloud-delivered security edge.
• Design and migrate SWG, ZTNA, and SASE for secure networks.
• Automate configuration management via APIs under version control.
• Support regulatory audits and produce engineering runbooks (e.g., MAS TRM).

Skills

Network security

SSE/SASE design

ZTNA design

Cloud security

Identity integration

Education

Bachelor's degree in Computer Science or related field

Tools

Zscaler

Netskope

Prisma Access

Cisco Secure Access

Palo Alto

Check Point

Job description

Optimum Solutions (Singapore) Pte Ltd. seeks a hands-on Senior Network Security Engineer to architect and evolve cloud-delivered security for a leading banking environment. You will drive SWG, SASE, and ZTNA transformations, ensuring robust, secure network connectivity.

You will lead policy design, vendor evaluations, and automation efforts while aligning with regulatory audits and runbooks to maintain secure operations.