Senior Proxy Engineer

Tata Consultancy Services; Alpharetta (GA); On-site; USD 120,000 - 130,000; Full time

Benefits offered by this job

Discretionary Annual Incentive

Comprehensive Medical Coverage: Health

Family Leaves

401K Plan

Certification & Training Reimbursement

Vacation, Time Off & Holidays

Job summary

Tata Consultancy Services Limited in Alpharetta, GA seeks a senior Level 3 Proxy Security Engineer with deep cloud security expertise, focusing on Netskope SWG, CASB, and ZTNA to design, optimize, and maintain complex proxy architectures that protect corporate data and ensure seamless user connectivity.

The role involves high-level escalations, policy design, and migration of on-prem proxies to cloud-native Netskope environments, with a focus on secure web gateway architecture and zero-trust

Qualifications

• Senior Level 3 proxy/security engineer with cloud security expertise.
• Hands-on mastery of SWG, CASB, ZTNA, inline SSL inspection.
• Experience with traffic steering, SSL decryption, and DLP policies.

Responsibilities

• Serve as highest escalation point for complex proxy issues and RCA.
• Lead Netskope SWG/CASB/ZTNA design, configuration, and maintenance.
• Design/audit SSE policies, threat protection, and SSL/TLS rules.
• Optimize traffic steering using Netskope client and VPN/explicit proxy methods.
• Migrate legacy proxies to Netskope cloud environments and coordinate vendor escalations.
• Collaborate on platform upgrades and maintain operational readiness.
• Develop automation/scripts for policy management and log extraction to SIEM.

Skills

Python

Cyber Security

Education

Bachelor of Computer Science

Job description

Must Have Technical/Functional Skills

We are seeking a senior Level 3 Proxy Security Engineer with deep expertise in cloud security and enterprise web proxy platforms, specifically Netskope Security Cloud. Engineer will act as the top-tier technical escalation point and primary architect for secure web gateway (SWG), cloud access security broker (CASB), and zero-trust network access (ZTNA) solutions and responsible for designing, optimizing, and maintaining complex proxy infrastructures to protect corporate data and ensure seamless user connectivity.

Key Responsibilities

• Level 3 Escalations: Act as the highest operational tier for complex troubleshooting, incident root-cause analysis (RCA), and vendor escalations regarding proxy and traffic-steering failures.
• Netskope Administration & Engineering: Lead the policy design, configuration, deployment, and ongoing maintenance of Netskope SWG, CASB, and Private Access (ZTNA).
• Policy & Rule Management: Design and audit granular Security Services Edge (SSE) policies, real-time threat protection, SSL/TLS decryption rules, and Data Loss Prevention (DLP) profiles.
• Architecture & Optimization: Perform traffic steering optimization using Netskope Client, GRE/IPsec tunnels, explicit proxy configurations, and pac-file/WCCP integrations.
• Migration & Integration: Lead or assist in migrating legacy on-premises web proxies (e.g., Symantec/Broadcom, BlueCoat, Forcepoint) to cloud-native Netskope environments.
• Vendor & Platform Maintenance: Collaborate with Netskope technical support, manage platform upgrades, review cloud release release notes, and ensure operational readiness across enterprise environments.
• Automation & Scripting: Develop scripts (Python, PowerShell, REST APIs) for policy automation, tenant monitoring, and log extraction to SIEM systems.

Technical Skills & Qualifications

Primary Proxy Expertise

Netskope (Netskope Certified Cloud Security Administrator/Architect preferred) with hands-on mastery in SWG, CASB, ZTNA, inline SSL inspection, and steering methods.

Secondary Proxy Knowledge

Familiarity with platforms like Zscaler, FortiProxy, or legacy Symantec/BlueCoat.

Networking & Protocols

Advanced expertise in TCP/IP, HTTP/HTTPS, SSL/TLS certificates, DNS, PAC file syntax, IPsec, GRE, and BGP routing.

Identity & Authentication

Strong experience with SAML 2.0, Okta, Microsoft Entra ID (Azure AD), SCIM, and Active Directory integration.

Security Concepts

DLP policy development, threat prevention, URL filtering, sandboxing, and microsegmentation principles.

TCS Employee Benefits Summary

• Discretionary Annual Incentive.
• Comprehensive Medical Coverage: Medical & Health, Dental & Vision, Disability Planning & Insurance, Pet Insurance Plans.
• Family Support: Maternal & Parental Leaves.
• Insurance Options: Auto & Home Insurance, Identity Theft Protection.
• Convenience & Professional Growth: Commuter Benefits & Certification & Training Reimbursement.
• Time Off: Vacation, Time Off, Sick Leave & Holidays.
• Legal & Financial Assistance: Legal Assistance, 401K Plan, Performance Bonus, College Fund, Student Loan Refinancing.

Location

Alpharetta, GA

Function

TECHNOLOGY

Role

Engineer

ID

433113

Skills

Python | Cyber Security

Salary Range

$120,000 - $130,000 a year

Desired Candidate Profile

Qualifications

BACHELOR OF COMPUTER SCIENCE