Responsibilities
SASE Architecture & Strategy
Define and own Keysight's global Secure Access Service Edge (SASE) and Security Service Edge (SSE) architecture, with Netskope Secure Web Gateway (SWG), Cloud Access Security Broker (CASB), and Zero Trust Network Access (Private Access/ZTNA) as the core platform.
Develop and maintain the SASE technology roadmap, reference architectures, design standards, and policy frameworks that support secure web access, SaaS and cloud services, and private application access across 130+ global sites and a hybrid workforce.
Lead architecture and technical decision-making for major initiatives, including migration from legacy VPN, proxy, and firewall-based access solutions to Netskope, cloud and SaaS adoption, M&A integrations, and strategic security enhancements.
Design and oversee integrations between Netskope and identity, endpoint, cloud, and security platforms, including SSO, MFA, Conditional Access, SIEM/SOAR, DLP, and cloud-native services, to deliver consistent end-to-end security.
Evaluate emerging technologies, vendor roadmap developments, licensing strategies, and cost optimization opportunities; develop architecture decision records, recommendations, and business cases for leadership.
Partner closely with Information Security, Identity, Cloud, Endpoint, Infrastructure, and Application teams to ensure solutions align with security, compliance, privacy, and business requirements.
Technical Leadership & Operational Excellence
Serve as the senior technical authority and Tier 3 escalation point for the Netskope platform, providing guidance on complex incidents, troubleshooting, root cause analysis, and long-term corrective actions.
Mentor and coach engineers while promoting best practices, operational excellence, automation, infrastructure-as-code, and scalable support models.
Drive adoption of APIs, Python, Terraform, and other automation technologies to improve reliability, consistency, operational efficiency, and service scalability.
Define monitoring standards, service-level objectives (SLOs), capacity planning, resiliency requirements, failover strategies, and business continuity designs for SASE services.
Establish architectural and operational standards that reduce risk, improve user experience, and support long-term platform growth.
Cross-Functional Collaboration & Vendor Leadership
Collaborate with business and IT stakeholders to translate business requirements into scalable security architectures and communicate design decisions, trade-offs, and recommendations to both technical and non-technical audiences.
Manage strategic relationships with Netskope and other technology partners, including roadmap discussions, escalations, proof-of-concept evaluations, and technical reviews.
Influence enterprise security strategy by guiding technology direction and supporting the adoption of modern Zero Trust and secure access capabilities across the organization.
Qualifications
We're looking for a highly skilled security and network architect with deep expertise in modern secure access technologies and a proven ability to lead enterprise-scale security initiatives.
Basic Qualifications
Bachelor's degree in Engineering, Computer Science, Information Technology, or an equivalent combination of certifications and experience.
8+ years of hands-on network and/or network security experience, including 3+ years architecting and deploying SASE/SSE, cloud proxy, or Zero Trust solutions in a large enterprise environment.
Deep expertise in Zero Trust architecture, Secure Web Gateway (SWG), Cloud Access Security Broker (CASB), and Zero Trust Network Access (ZTNA) design, including TLS inspection, Data Loss Prevention (DLP), and traffic steering strategies.
Strong understanding of TCP/IP, DNS, TLS/PKI, identity federation technologies (SAML, OIDC, SCIM), and cloud networking and security concepts.
Proven ability to lead complex cross-functional initiatives and communicate architecture, strategy, and technical recommendations to both executives and engineering teams.
Preferred Certifications
Netskope certifications such as NCSE, NCSP, or NCSA.
Security and architecture certifications such as CISSP, CCSP, CCNP Security, SABSA, TOGAF, or similar credentials.
Required Technical Experience
Hands-on architecture and administration experience with Netskope (SWG, CASB, and Private Access/ZTNA) or an equivalent enterprise Security Service Edge (SSE) platform such as Zscaler or Prisma Access.
Experience designing and implementing identity and conditional access solutions using platforms such as Entra ID and Okta.
Strong understanding of enterprise networking fundamentals, including LAN/WAN, routing, and DNS.
Desired Technical Skills
Experience with several of the technologies below is highly desirable
Data Loss Prevention (DLP) program development, policy design, and tuning.
SaaS and IaaS security posture management across Microsoft 365, Google Workspace, Salesforce, AWS, Azure, and GCP environments.
Endpoint management, endpoint security, and EDR integrations, including Intune, Jamf, CrowdStrike, and Microsoft Defender.
SIEM/SOAR integrations and security incident response processes.
Palo Alto Networks and Fortinet firewall technologies.
Automation and Infrastructure-as-Code using Python, PowerShell, Terraform, and REST APIs.
ITIL-based incident, problem, and change management practices, including ServiceNow.
Enterprise architecture frameworks, technical standards development, architecture governance, and technical documentation.
Additional Requirements
Willingness to work flexible hours, including occasional weekend and holiday support for critical projects, deployments, or incident response activities.
Ability to travel occasionally to support global deployments, architecture reviews, and stakeholder engagement.
Careers Privacy Statement
Keysight is an Equal Opportunity Employer
Keysight Technologies Inc. is an equal opportunity employer. Qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, protected veteran status, disability or any other protected categories under all applicable laws.
Pay Transparency
The level of role will be based on applicable experience, education, and skills. Most offers will be between the minimum and the midpoint of the Salary Range listed below.
Colorado Pay Range: Minimum $110,600 – Maximum $184,330
Note: For other locations, pay ranges will vary by region
US Employees may be eligible for the following benefits
Medical, dental and vision
Health Savings Account
Health Care and Dependent Care Flexible Spending Accounts
Life, Accident, Disability insurance
Business Travel Accident and Business Travel Health
401(k) Plan
Flexible Time Off, Paid Holidays
Paid Family Leave
Discounts, Perks
Tuition Reimbursement
Adoption Assistance
Incentive Programs
ESPP (Employee Stock Purchase Plan)
SASE Architecture & Strategy
Define and own Keysight's global Secure Access Service Edge (SASE) and Security Service Edge (SSE) architecture, with Netskope Secure Web Gateway (SWG), Cloud Access Security Broker (CASB), and Zero Trust Network Access (Private Access/ZTNA) as the core platform.
Develop and maintain the SASE technology roadmap, reference architectures, design standards, and policy frameworks that support secure web access, SaaS and cloud services, and private application access across 130+ global sites and a hybrid workforce.
Lead architecture and technical decision-making for major initiatives, including migration from legacy VPN, proxy, and firewall-based access solutions to Netskope, cloud and SaaS adoption, M&A integrations, and strategic security enhancements.
Design and oversee integrations between Netskope and identity, endpoint, cloud, and security platforms, including SSO, MFA, Conditional Access, SIEM/SOAR, DLP, and cloud-native services, to deliver consistent end-to-end security.
Evaluate emerging technologies, vendor roadmap developments, licensing strategies, and cost optimization opportunities; develop architecture decision records, recommendations, and business cases for leadership.
Partner closely with Information Security, Identity, Cloud, Endpoint, Infrastructure, and Application teams to ensure solutions align with security, compliance, privacy, and business requirements.
Technical Leadership & Operational Excellence
Serve as the senior technical authority and Tier 3 escalation point for the Netskope platform, providing guidance on complex incidents, troubleshooting, root cause analysis, and long-term corrective actions.
Mentor and coach engineers while promoting best practices, operational excellence, automation, infrastructure-as-code, and scalable support models.
Drive adoption of APIs, Python, Terraform, and other automation technologies to improve reliability, consistency, operational efficiency, and service scalability.
Define monitoring standards, service-level objectives (SLOs), capacity planning, resiliency requirements, failover strategies, and business continuity designs for SASE services.
Establish architectural and operational standards that reduce risk, improve user experience, and support long-term platform growth.
Cross-Functional Collaboration & Vendor Leadership
Collaborate with business and IT stakeholders to translate business requirements into scalable security architectures and communicate design decisions, trade-offs, and recommendations to both technical and non-technical audiences.
Manage strategic relationships with Netskope and other technology partners, including roadmap discussions, escalations, proof-of-concept evaluations, and technical reviews.
Influence enterprise security strategy by guiding technology direction and supporting the adoption of modern Zero Trust and secure access capabilities across the organization.
We're looking for a highly skilled security and network architect with deep expertise in modern secure access technologies and a proven ability to lead enterprise-scale security initiatives.
Basic Qualifications
Bachelor's degree in Engineering, Computer Science, Information Technology, or an equivalent combination of certifications and experience.
8+ years of hands-on network and/or network security experience, including 3+ years architecting and deploying SASE/SSE, cloud proxy, or Zero Trust solutions in a large enterprise environment.
Deep expertise in Zero Trust architecture, Secure Web Gateway (SWG), Cloud Access Security Broker (CASB), and Zero Trust Network Access (ZTNA) design, including TLS inspection, Data Loss Prevention (DLP), and traffic steering strategies.
Strong understanding of TCP/IP, DNS, TLS/PKI, identity federation technologies (SAML, OIDC, SCIM), and cloud networking and security concepts.
Proven ability to lead complex cross-functional initiatives and communicate architecture, strategy, and technical recommendations to both executives and engineering teams.
Preferred Certifications
Netskope certifications such as NCSE, NCSP, or NCSA.
Security and architecture certifications such as CISSP, CCSP, CCNP Security, SABSA, TOGAF, or similar credentials.
Required Technical Experience
Hands-on architecture and administration experience with Netskope (SWG, CASB, and Private Access/ZTNA) or an equivalent enterprise Security Service Edge (SSE) platform such as Zscaler or Prisma Access.
Experience designing and implementing identity and conditional access solutions using platforms such as Entra ID and Okta.
Strong understanding of enterprise networking fundamentals, including LAN/WAN, routing, and DNS.
Desired Technical Skills
Experience with several of the technologies below is highly desirable
Data Loss Prevention (DLP) program development, policy design, and tuning.
SaaS and IaaS security posture management across Microsoft 365, Google Workspace, Salesforce, AWS, Azure, and GCP environments.
Endpoint management, endpoint security, and EDR integrations, including Intune, Jamf, CrowdStrike, and Microsoft Defender.
SIEM/SOAR integrations and security incident response processes.
Palo Alto Networks and Fortinet firewall technologies.
Automation and Infrastructure-as-Code using Python, PowerShell, Terraform, and REST APIs.
ITIL-based incident, problem, and change management practices, including ServiceNow.
Enterprise architecture frameworks, technical standards development, architecture governance, and technical documentation.
Additional Requirements
Willingness to work flexible hours, including occasional weekend and holiday support for critical projects, deployments, or incident response activities.
Ability to travel occasionally to support global deployments, architecture reviews, and stakeholder engagement.
Careers Privacy Statement
Keysight is an Equal Opportunity Employer
Keysight Technologies Inc. is an equal opportunity employer. Qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, protected veteran status, disability or any other protected categories under all applicable laws.
Pay Transparency
The level of role will be based on applicable experience, education, and skills. Most offers will be between the minimum and the midpoint of the Salary Range listed below.
Colorado Pay Range: Minimum $110,600 – Maximum $184,330
Note: For other locations, pay ranges will vary by region
US Employees may be eligible for the following benefits
Medical, dental and vision
Health Savings Account
Health Care and Dependent Care Flexible Spending Accounts
Life, Accident, Disability insurance
Business Travel Accident and Business Travel Health
401(k) Plan
Flexible Time Off, Paid Holidays
Paid Family Leave
Discounts, Perks
Tuition Reimbursement
Adoption Assistance
Incentive Programs
ESPP (Employee Stock Purchase Plan)
