Senior Network Security Engineer

We are looking for a Senior Network Security Engineer with a strong specialization in Secure Web Gateway (SWG) and proxy technologies, particularly Blue Coat ProxySG (now part of Broadcom/Symantec). This role sits within our broader network security function and is responsible for administering, securing, and optimizing web/internet access infrastructure across the organization. Key Responsibilities Proxy & Secure Web Gateway Administration • Administer, configure, and support Blue Coat ProxySG (SGOS) and related secure web gateway/web security solutions. • Design, implement, and maintain web filtering categories, acceptable use policies, and secure internet access controls. • Configure and manage SSL/TLS interception (SSL Visibility), authentication integration (AD/LDAP, Kerberos, SAML), and ICAP integration with DLP, antivirus, and sandboxing solutions. • Monitor proxy performance, availability, and capacity; conduct tuning and optimization to ensure minimal latency and maximum uptime. Troubleshooting & Incident Response • Troubleshoot proxy-related incidents, connectivity issues, and policy conflicts, working across network layers (TCP/IP, DNS, HTTP/HTTPS, routing). • Participate in security incident response related to web-based threats, malicious traffic, and policy violations. • Collaborate with SOC, network, and broader cybersecurity teams to correlate proxy logs with SIEM and threat intelligence platforms. Project, Migration & Lifecycle Support • Support upgrades, patching, and lifecycle management of Blue Coat ProxySG appliances and related SWG components. • Assist with migration or integration projects between on-premise proxy solutions and cloud-delivered SWG/SASE platforms. • Contribute to automation and scripting initiatives to streamline policy deployment, reporting, and routine administration tasks. Governance, Documentation & Compliance • Prepare and maintain technical documentation, configuration standards, and operational runbooks. • Support internal and external audits by providing evidence of secure configuration, change control, and policy enforcement. • Ensure alignment with information security policies and relevant regulatory frameworks (e.g., SAMA, NCA ECC, ISO/IEC 27001, PCI DSS) where applicable. • Candidates should bring at least 2 3 years of hands-on Blue Coat ProxySG / SGOS administration experience as part of a broader network security career (typically 5+ years overall). • Experience in banking and financial services is a strong plus, but not mandatory. • Bachelor's degree in Computer Science, Information Technology, Network Engineering, or a related field (or equivalent practical experience). • 5+ years of overall network/cybersecurity engineering experience, including a minimum of 2 3 years of hands-on Blue Coat ProxySG / SGOS administration. Alternatively, 5+ years of overall network/cybersecurity experience with strong hands-on exposure to other leading secure web gateway or proxy platforms (e.g., Symantec Web Security Service, Forcepoint, McAfee/Skyhigh Web Gateway, Cisco WSA/Umbrella, Zscaler, Fortinet FortiProxy), with demonstrated ability and willingness to specialize in Blue Coat ProxySG. • Strong understanding of core networking concepts: TCP/IP, DNS, HTTP/HTTPS, routing, and network segmentation. • Hands-on experience with web filtering, URL categorization, SSL/TLS interception, and content inspection policies. • Experience integrating proxy/SWG platforms with DLP, sandboxing, threat intelligence, or SIEM solutions is highly valued. • Excellent troubleshooting, analytical, and communication skills, with the ability to work cross-functionally with network, security, and infrastructure teams. • Experience in banking, financial services, or other regulated sectors is preferred but not required.