Network Security Engineer (Web Proxy)

• Act as the primary SME for all Web Proxy (e.g., Zscaler, Forcepoint, Blue Coat) and Firewall (e.g., Palo Alto Networks, Check Point, Cisco ASA) rule sets and configurations
• Design, implement, and maintain complex firewall rules and web proxy policies to enforce security controls and meet divestiture requirements
• Perform routine maintenance, updates, and optimization of existing web proxy and firewall rules, ensuring adherence to security best practices and compliance standards
• Provide advanced troubleshooting and incident response support for network security issues related to web proxy and firewall configurations
• Collaborate with network engineering, application, and security operations teams to ensure proper integration and functionality of security devices during the divestiture process
• Assist in the planning and execution of network segmentation and access control list (ACL) migration strategies for separating entities
• Develop and maintain comprehensive documentation for network security configurations, policies, and operational procedures
• Participate in security audits and provide expert guidance on web proxy and firewall capabilities

• Technical expertise and hands-on experience with enterprise-grade Firewall platforms (e.g., Palo Alto Networks, Check Point, Cisco ASA/FTD)
• Knowledge and practical experience with Web Proxy solutions (e.g., Zscaler, Forcepoint/Websense, Blue Coat/Symantec ProxySG)
• Understanding of network protocols (TCP/IP, DNS, HTTP/S, VPNs) and network security concepts (e.g., IDS/IPS, VPN, NAT, load balancing)
• Proficiency in analyzing network traffic and logs to identify security incidents, troubleshoot connectivity issues, and optimize performance
• Experience with scripting (e.g., Python, PowerShell) for automation of security tasks is a plus
• Excellent problem-solving, analytical, and diagnostic capabilities
• Strong communication and interpersonal skills, with the ability to articulate complex technical concepts clearly to diverse audiences
• Ability to work independently as an SME and as part of a larger technical team
• English fluency (oral and written)
• Education: Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or a related engineering field
• Minimum of 3-5 years of dedicated experience in Network Security Engineering
• At least 2-3 years of hands-on experience specifically managing and maintaining Web Proxy and Firewall solutions in an enterprise environment
• Proven experience acting as a Subject Matter Expert in network security domains

Relevant industry certifications such as CCNA Security, PCNSE (Palo Alto Networks Certified Network Security Engineer), CCSA/CCSE (Check Point Certified Security Administrator/Expert), Zscaler certifications (ZCCA, ZCSE) are desirable