Manage day-to-day policy and configuration changes – web/URL filtering, real-time protection and DLP policies, SaaS/IaaS CASB controls, private application onboarding, TLS inspection and certificate bypass exceptions – through established change management processes.
Administer Netskope Client deployment and lifecycle across Windows, macOS and mobile endpoints, including steering configuration, upgrades and troubleshooting.
Partner with the Information Security team to tune CASB and DLP policies, review alerts and participate in security incident response as the Netskope and network SME.
Manage vendor relationships – open and drive Netskope support cases, validate fixes, and track service-level performance.
Continuous improvement – participate in Problem Management, post-mortems and root cause analysis; develop runbooks, knowledge articles and automation to reduce incident volume and speed resolution.
Qualifications
Job Qualifications
We’re looking for a diversely skilled, experienced network and security engineer with these qualifications:
BS in Engineering, Computer Science or Information Technology or equivalent certification and/or experience.
2+ years of hands-on network and/or network security experience, including supporting a production SASE/SSE, proxy or cloud security platform.
Strong understanding of TCP/IP, DNS, TLS/PKI, proxy and firewall concepts, and zero trust principles.
Strong troubleshooting skills and comfort working incidents in a 24x7 global operations environment.
Netskope certification (e.g., NCSA, NCSE, NCSP) is a plus; other security or networking certification (e.g., CCNP, PCNSA/PCNSE, Security+, CISSP) and/or security specialization is a plus.
An ideal candidate will have experience or certification with some or all of the following technologies:
Required
Hands-on experience administering Netskope (SWG, CASB and/or Private Access/ZTNA) or a comparable SSE platform (e.g., Zscaler, Prisma Access)
Web proxy/SWG, URL filtering and TLS inspection concepts
Enterprise network fundamentals (LAN/WAN, routing, DNS)
Desirable Skills
Data loss prevention (DLP) policy design and tuning
SaaS and IaaS security (Microsoft 365, Google Workspace, Salesforce, AWS, Azure)
Identity and access integrations (Entra ID/Azure AD, Okta, SAML/SCIM)
Endpoint deployment tools (Intune, Jamf, SCCM)
Palo Alto Networks and Fortinet firewalls
SIEM integration and security incident response processes
Python, PowerShell, Terraform or REST API automation
ITIL-based incident, problem and change management; ServiceNow
Careers Privacy Statement***Keysight is an Equal Opportunity Employer.***
Netskope SASE Support and Operations
Operate, support and maintain Keysight’s global Netskope platform – Secure Web Gateway (SWG), Cloud Access Security Broker (CASB) and Zero Trust Network Access (NPA/ZTNA) – as part of the global network operations team in a “follow the sun” model (APAC, EMEA & Americas).
Serve as an escalation point and subject matter expert for Netskope incidents, troubleshooting client steering, tunnel/connector, authentication, DNS, certificate and application access issues across user, branch and cloud traffic paths.
Monitor Netskope tenant health, Publisher/connector status, NewEdge POP connectivity and user experience; proactively identify and eliminate performance bottlenecks and steadily improve service availability.
Manage day-to-day policy and configuration changes – web/URL filtering, real-time protection and DLP policies, SaaS/IaaS CASB controls, private application onboarding, TLS inspection and certificate bypass exceptions – through established change management processes.
Administer Netskope Client deployment and lifecycle across Windows, macOS and mobile endpoints, including steering configuration, upgrades and troubleshooting.
Partner with the Information Security team to tune CASB and DLP policies, review alerts and participate in security incident response as the Netskope and network SME.
Manage vendor relationships – open and drive Netskope support cases, validate fixes, and track service-level performance.
Continuous improvement – participate in Problem Management, post-mortems and root cause analysis; develop runbooks, knowledge articles and automation to reduce incident volume and speed resolution.
Job Qualifications
We’re looking for a diversely skilled, experienced network and security engineer with these qualifications:
BS in Engineering, Computer Science or Information Technology or equivalent certification and/or experience.
2+ years of hands-on network and/or network security experience, including supporting a production SASE/SSE, proxy or cloud security platform.
Strong understanding of TCP/IP, DNS, TLS/PKI, proxy and firewall concepts, and zero trust principles.
Strong troubleshooting skills and comfort working incidents in a 24x7 global operations environment.
Netskope certification (e.g., NCSA, NCSE, NCSP) is a plus; other security or networking certification (e.g., CCNP, PCNSA/PCNSE, Security+, CISSP) and/or security specialization is a plus.
An ideal candidate will have experience or certification with some or all of the following technologies:
Required
Hands-on experience administering Netskope (SWG, CASB and/or Private Access/ZTNA) or a comparable SSE platform (e.g., Zscaler, Prisma Access)
Web proxy/SWG, URL filtering and TLS inspection concepts
Enterprise network fundamentals (LAN/WAN, routing, DNS)
Desirable Skills
Data loss prevention (DLP) policy design and tuning
SaaS and IaaS security (Microsoft 365, Google Workspace, Salesforce, AWS, Azure)
Identity and access integrations (Entra ID/Azure AD, Okta, SAML/SCIM)
Endpoint deployment tools (Intune, Jamf, SCCM)
Palo Alto Networks and Fortinet firewalls
SIEM integration and security incident response processes
Python, PowerShell, Terraform or REST API automation
ITIL-based incident, problem and change management; ServiceNow
Careers Privacy Statement***Keysight is an Equal Opportunity Employer.***
