Senior Proxy Engineer

Prism IT Global; Alpharetta (GA); On-site; USD 140,000 - 190,000; Full time

Job summary

Prism IT Global seeks a senior Level 3 Proxy Security Engineer with deep cloud security expertise, focusing on Netskope Security Cloud, SWG, CASB, and ZTNA. You will architect and maintain proxy infrastructures, ensure secure data handling, and optimize user connectivity across enterprise environments.

You will lead complex escalations, design policies, and drive migrations from legacy proxies to cloud-native Netskope. Strong scripting and vendor collaboration are essential for success.

Qualifications

• Experience in SWG, CASB, ZTNA, and inline SSL inspection.
• Proven ability to design and audit SSE policies.
• Experience migrating on‑prem proxies to cloud platforms.
• Strong scripting/automation skills (Python/PowerShell) for policy and log tasks.
• Experience with vendor escalations and incident RCA.

Responsibilities

• Level 3 escalations: troubleshoot, root-cause analysis, and vendor escalations for proxy issues.
• Netskope administration: policy design, deployment, and maintenance of SWG, CASB, and Private Access (ZTNA).
• Design/audit SSE policies, real-time threat protection, SSL/TLS rules, and DLP profiles.
• Traffic steering optimization using Netskope Client, GRE/IPSec, explicit proxy, and pac-file/WCCP.
• Migration/support for legacy on‑prem proxies to cloud Netskope environments.
• Collaborate with Netskope support, manage upgrades, review release notes, ensure enterprise readiness.
• Develop scripts for policy automation, tenant monitoring, and log extraction to SIEM.

Skills

Netskope SWG

ZTNA

SSL inspection

DLP

Policy design

Traffic steering

Tools

Netskope Platform

Zscaler

FortiProxy

BlueCoat

Job description

We are seeking a senior Level 3 Proxy Security Engineer with deep expertise in cloud security and enterprise web proxy platforms, specifically Netskope Security Cloud. Engineer will act as the top-tier technical escalation point and primary architect for secure web gateway (SWG), cloud access security broker (CASB), and zero-trust network access (ZTNA) solutions and responsible for designing, optimizing, and maintaining complex proxy infrastructures to protect corporate data and ensure seamless user connectivity.

Key Responsibilities

• Level 3 Escalations: Act as the highest operational tier for complex troubleshooting, incident root-cause analysis (RCA), and vendor escalations regarding proxy and traffic-steering failures.
• Netskope Administration & Engineering: Lead the policy design, configuration, deployment, and ongoing maintenance of Netskope SWG, CASB, and Private Access (ZTNA).
• Policy & Rule Management: Design and audit granular Security Services Edge (SSE) policies, real-time threat protection, SSL/TLS decryption rules, and Data Loss Prevention (DLP) profiles.
• Architecture & Optimization: Perform traffic steering optimization using Netskope Client, GRE/IPsec tunnels, explicit proxy configurations, and pac-file/WCCP integrations.
• Migration & Integration: Lead or assist in migrating legacy on-premises web proxies (e.g., Symantec/Broadcom, BlueCoat, Forcepoint) to cloud-native Netskope environments.
• Vendor & Platform Maintenance: Collaborate with Netskope technical support, manage platform upgrades, review cloud release release notes, and ensure operational readiness across enterprise environments.
• Automation & Scripting: Develop scripts (Python, PowerShell, REST APIs) for policy automation, tenant monitoring, and log extraction to SIEM systems.

Technical Skills & Qualifications

Primary Proxy Expertise

Netskope (Netskope Certified Cloud Security Administrator/Architect preferred) with hands-on mastery in SWG, CASB, ZTNA, inline SSL inspection, and steering methods.

Secondary Proxy Knowledge

Familiarity with platforms like Zscaler, FortiProxy, or legacy Symantec/BlueCoat.

Networking & Protocols

Advanced expertise in TCP/IP, HTTP/HTTPS, SSL/TLS certificates, DNS, PAC file syntax, IPsec, GRE, and BGP routing.

Identity & Authentication

Strong experience with SAML 2.0, Okta, Microsoft Entra ID (Azure AD), SCIM, and Active Directory integration.

Security Concepts

DLP policy development, threat prevention, URL filtering, sandboxing, and micro-segmentation principles.