Senior Proxy Engineer

Tata Consultancy Services; Alpharetta (GA); On-site; USD 120,000 - 130,000; Full time

Benefits offered by this job

Discretionary Annual Incentive

Comprehensive Medical Coverage

Family Leaves

Auto & Home Insurance

Certification & Training Reimbursement

Vacation, Time Off, Holidays

401K Plan

Job summary

Tata Consultancy Services in Alpharetta, GA is seeking a senior Level 3 Proxy Security Engineer with deep cloud security expertise to design and maintain complex proxy infrastructures for secure data protection and seamless user connectivity.

You will act as the top-tier escalation point for proxy/security issues, lead Netskope SWG/CASB/ZTNA deployments, and collaborate across IT security teams to safeguard data while ensuring uninterrupted access for users.

Qualifications

• Senior Level 3 Proxy Security Engineer with cloud security expertise.
• Hands-on Netskope SWG, CASB, ZTNA, SSL inspection, and traffic steering methods.
• Experience designing and maintaining secure web gateway proxy infrastructures.

Responsibilities

• Level 3 escalation for complex proxy issues and RCA.
• Design, deploy, and maintain Netskope SWG, CASB, and Private Access (ZTNA).
• Design/audit SSE policies, SSL decryption, and DLP profiles.
• Optimize traffic steering via Netskope Client, GRE/IPsec, explicit proxy, and pac-file integration.
• Lead or assist migration of legacy on-prem proxies to Netskope cloud environments.
• Collaborate with Netskope support for upgrades and releases; ensure enterprise readiness.
• Develop scripts (Python, PowerShell, REST) for policy automation and SIEM integration.

Skills

Netskope SWG

ZTNA

CASB

SSL inspection

Traffic steering

TCP/IP

BGP routing

Education

Bachelor of Computer Science

Tools

Netskope

Job description

Job Description

Must Have Technical/Functional Skills

We are seeking a senior Level 3 Proxy Security Engineer with deep expertise in cloud security and enterprise web proxy platforms, specifically Netskope Security Cloud. Engineer will act as the top-tier technical escalation point and primary architect for secure web gateway (SWG), cloud access security broker (CASB), and zero-trust network access (ZTNA) solutions and responsible for designing, optimizing, and maintaining complex proxy infrastructures to protect corporate data and ensure seamless user connectivity.

Key Responsibilities

• Level 3 Escalations: Act as the highest operational tier for complex troubleshooting, incident root-cause analysis (RCA), and vendor escalations regarding proxy and traffic-steering failures.
• Netskope Administration & Engineering: Lead the policy design, configuration, deployment, and ongoing maintenance of Netskope SWG, CASB, and Private Access (ZTNA).
• Policy & Rule Management: Design and audit granular Security Services Edge (SSE) policies, real-time threat protection, SSL/TLS decryption rules, and Data Loss Prevention (DLP) profiles.
• Architecture & Optimization: Perform traffic steering optimization using Netskope Client, GRE/IPsec tunnels, explicit proxy configurations, and pac-file/WCCP integrations.
• Migration & Integration: Lead or assist in migrating legacy on-premises web proxies (e.g., Symantec/Broadcom, BlueCoat, Forcepoint) to cloud-native Netskope environments.
• Vendor & Platform Maintenance: Collaborate with Netskope technical support, manage platform upgrades, review cloud release release notes, and ensure operational readiness across enterprise environments.
• Automation & Scripting: Develop scripts (Python, PowerShell, REST APIs) for policy automation, tenant monitoring, and log extraction to SIEM systems.

Technical Skills & Qualifications

Primary Proxy Expertise

Netskope (Netskope Certified Cloud Security Administrator/Architect preferred) with hands-on mastery in SWG, CASB, ZTNA, inline SSL inspection, and steering methods.

Secondary Proxy Knowledge

Familiarity with platforms like Zscaler, FortiProxy, or legacy Symantec/BlueCoat.

Networking & Protocols

Advanced expertise in TCP/IP, HTTP/HTTPS, SSL/TLS certificates, DNS, PAC file syntax, IPsec, GRE, and BGP routing.

Identity & Authentication

Strong experience with SAML 2.0, Okta, Microsoft Entra ID (Azure AD), SCIM, and Active Directory integration.

Security Concepts

DLP policy development, threat prevention, URL filtering, sandboxing, and microsegmentation principles.

TCS Employee Benefits Summary

• Discretionary Annual Incentive.
• Comprehensive Medical Coverage: Medical & Health, Dental & Vision, Disability Planning & Insurance, Pet Insurance Plans.
• Family Support: Maternal & Parental Leaves.
• Insurance Options: Auto & Home Insurance, Identity Theft Protection.
• Convenience & Professional Growth: Commuter Benefits & Certification & Training Reimbursement.
• Time Off: Vacation, Time Off, Sick Leave & Holidays.
• Legal & Financial Assistance: Legal Assistance, 401K Plan, Performance Bonus, College Fund, Student Loan Refinancing.
• Salary Range: $120,000 - $130,000 a year

Qualifications

BACHELOR OF COMPUTER SCIENCE