Security Engineer - WebProxy

We are seeking a Web Proxy Specialist to join our team in the early stages of a strategic project to implement a modern web proxy solution as part of a secure access service edge (SASE) framework. The ideal candidate will bring deep expertise in designing web proxy architectures, developing and enforcing security policies, and aligning solutions with enterprise-scale security and compliance requirements.

This role will be pivotal in shaping the foundation of the project by ensuring the web proxy solution is designed, implemented, and optimized to provide secure, reliable, and scalable access for users and systems.

Key Responsibilities

• Solution Design:

o Architect end-to-end web proxy solutions for secure internet and cloud access.

o Evaluate and recommend technologies, vendors, and integration approaches for proxy and SASE solutions.

• Policy Development & Implementation:

o Define, configure, and enforce security policies (e.g., URL filtering, SSL inspection, content filtering, data protection).

o Align policy frameworks with business objectives, compliance requirements, and user experience needs.

• SASE Enablement:

o Design and integrate web proxy solutions into a broader SASE architecture.

o Collaborate with network, security, and cloud teams to implement zero-trust access principles.

• Deployment & Optimization:

o Lead technical implementation, including rule/policy migration, testing, and cutover activities.

o Monitor solution performance and optimize for latency, scalability, and reliability.

• Collaboration & Documentation:

o Work closely with security architects, project managers, and stakeholders to ensure alignment.

o Create and maintain detailed technical documentation for policies, configurations, and procedures.

Required Skills & Experience

• Strong hands-on experience in web proxy design and deployment (e.g., Blue Coat/Symantec, Zscaler, Skyhigh, Palo Alto, or similar platforms).

• Proven expertise in defining and managing proxy policies including authentication, access control, DLP, and SSL/TLS inspection.

• Practical knowledge of SASE frameworks and their implementation in enterprise environments.

• Solid understanding of network protocols, security standards, and threat vectors related to web traffic.

• Experience with integrating proxies into hybrid cloud and on-premises environments.

• Familiarity with identity and access management (IAM), zero-trust principles, and secure remote access.

• Strong troubleshooting, analytical, and problem-solving skills.

• Excellent communication and documentation abilities.