Kerja Sepenuh Masa, Network Security Engineer di HCLTech - Maukerja

Summary

We are seeking an experienced Network Security Engineer (SASE & Secure Web Gateway) to lead the design, implementation, and evolution of enterprise Secure Service Edge (SSE) and Secure Access Service Edge (SASE) platforms. The successful candidate will be responsible for cloud-delivered web security, Zero Trust Network Access (ZTNA), CASB, DLP, and secure remote access transformation initiatives.

Responsibilities

Secure Web Gateway (SWG)

• Design and maintain enterprise web security policies including URL Filtering, Cloud Application Control, Cloud Firewall Policies, File Type Controls, Sandbox Policies, Bandwidth Management
• Design and manage SSL/TLS inspection strategies, certificate deployment, and governance frameworks.
• Engineer traffic steering mechanisms including Endpoint Agents, PAC Files, Explicit Proxy, GRE Tunnels, IPsec Tunnels
• Lead migration of legacy proxy environments to cloud-based SWG platforms.

Zero Trust Access and SASE

• Design and implement Zero Trust Network Access (ZTNA) architectures.
• Develop access policy models, application definitions, and connector/publisher placements across data centers and cloud environments.
• Lead migration from traditional VPN services to Zero Trust access solutions.
• Integrate identity providers using Microsoft Entra ID, Okta, SAML, SCIM
• Design and implement CASB Controls, Data Loss Prevention (DLP), SaaS Security Controls, Device Posture Enforcement

Platform Engineering and Integration

• Maintain platform-independent security policy standards and governance models.
• Evaluate, design, and implement SSE/SASE solutions across multiple vendors.
• Lead proof-of-concept, migration, coexistence, and platform transition activities.
• Integrate SASE telemetry and logging with SIEM and monitoring platforms.
• Develop automation for policy and configuration management through APIs.
• Produce architecture documents, implementation plans, operational procedures, and runbooks.

Governance and Compliance

• Support ITIL-based change management processes.
• Prepare documentation and audit evidence for regulatory and compliance requirements (e.g., MAS TRM).
• Ensure effective policy review, change control, and security governance practices.

Requirements

• Degree in Computer Science, Information Technology, Engineering, Cybersecurity, or related discipline.
• 8 years of Network Security or Security Engineering experience.
• Minimum 4 years of hands-on SSE/SASE design and implementation experience.
• Hands-on experience with Zscaler, Netskope, Skyhigh Security, Palo Alto Prisma Access, Cisco Secure Access
• Experience designing and implementing enterprise SWG solutions.
• Experience migrating from on-premise proxy platforms such as Bluecoat / Symantec ProxySG, Cisco WSA, Skyhigh Security Web Gateway
• Strong understanding of PAC Files, Proxy Architecture, SSL/TLS Inspection, Secure Internet Access Design
• Experience designing and implementing: ZTNA, Identity-aware access controls, VPN replacement programs, Application segmentation and connector placement expertise.
• Strong understanding of Microsoft Entra ID, Okta, SAML, SCIM, Kerberos, PKI, TLS
• Solid understanding of HTTP/HTTPS, DNS, Proxy Services, GRE Tunneling, IPsec Tunneling, Enterprise Firewalls (Palo Alto, Check Point)