Senior Network Security Engineer

We are looking for a Senior Network Security Engineer with a strong specialization in Secure Web Gateway (SWG) and proxy technologies, particularly Blue Coat ProxySG (now part of Broadcom/Symantec). This role sits within our broader network security function and is responsible for administering, securing, and optimizing web/internet access infrastructure across the organization.

Key Responsibilities

Proxy & Secure Web Gateway Administration

• Administer, configure, and support Blue Coat ProxySG (SGOS) and related secure web gateway/web security solutions.
• Design, implement, and maintain web filtering categories, acceptable use policies, and secure internet access controls.
• Configure and manage SSL/TLS interception (SSL Visibility), authentication integration (AD/LDAP, Kerberos, SAML), and ICAP integration with DLP, antivirus, and sandboxing solutions.
• Monitor proxy performance, availability, and capacity; conduct tuning and optimization to ensure minimal latency and maximum uptime.

Troubleshooting & Incident Response

• Troubleshoot proxy-related incidents, connectivity issues, and policy conflicts, working across network layers (TCP/IP, DNS, HTTP/HTTPS, routing).
• Participate in security incident response related to web-based threats, malicious traffic, and policy violations.
• Collaborate with SOC, network, and broader cybersecurity teams to correlate proxy logs with SIEM and threat intelligence platforms.

Project, Migration & Lifecycle Support

• Support upgrades, patching, and lifecycle management of Blue Coat ProxySG appliances and related SWG components.
• Assist with migration or integration projects between on-premise proxy solutions and cloud-delivered SWG/SASE platforms.
• Contribute to automation and scripting initiatives to streamline policy deployment, reporting, and routine administration tasks.

Governance, Documentation & Compliance

• Prepare and maintain technical documentation, configuration standards, and operational runbooks.

• Support internal and external audits by providing evidence of secure configuration, change control, and policy enforcement.

• Ensure alignment with information security policies and relevant regulatory frameworks (e.g., SAMA, NCA ECC, ISO/IEC 27001, PCI DSS) where applicable.

• Candidates should bring at least 2 3 years of hands-on Blue Coat ProxySG / SGOS administration experience as part of a broader network security career (typically 5+ years overall).

• Experience in banking and financial services is a strong plus, but not mandatory.

• Bachelor's degree in Computer Science, Information Technology, Network Engineering, or a related field (or equivalent practical experience).

• 5+ years of overall network/cybersecurity engineering experience, including a minimum of 2 3 years of hands-on Blue Coat ProxySG / SGOS administration. Alternatively, 5+ years of overall network/cybersecurity experience with strong hands-on exposure to other leading secure web gateway or proxy platforms (e.g., Symantec Web Security Service, Forcepoint, McAfee/Skyhigh Web Gateway, Cisco WSA/Umbrella, Zscaler, Fortinet FortiProxy), with demonstrated ability and willingness to specialize in Blue Coat ProxySG.

• Strong understanding of core networking concepts: TCP/IP, DNS, HTTP/HTTPS, routing, and network segmentation.

• Hands-on experience with web filtering, URL categorization, SSL/TLS interception, and content inspection policies.

• Experience integrating proxy/SWG platforms with DLP, sandboxing, threat intelligence, or SIEM solutions is highly valued.

• Excellent troubleshooting, analytical, and communication skills, with the ability to work cross-functionally with network, security, and infrastructure teams.

• Experience in banking, financial services, or other regulated sectors is preferred but not required.