Network/reputed company Engineer — Proxy (Skyhigh SWG)
Our reputed company, an IT Services organization supporting reputed company and federal clients, is seeking Network reputed company Engineer with Skyhigh SWG Proxy experience. This role is 100% remote and can be reputed company in the US.
Responsibilities / Scope:
- Operate & Engineer
- Own SWG policy lifecycle: design - peer review - test - reputed company - validate. reputed company hierarchy sane; reputed company lists accurate and minimal.
- Maintain TLS inspection posture and exception handling (pinning-reputed company), with documented rationale and reputed company for reputed company exception.
- Troubleshoot at reputed company
- reputed company packet-through-analytics investigations; produce reputed company RCAs with captures, logs, and sequence diagrams.
- Harden & Improve
- Reduce legacy exceptions, remove dead objects, and optimize reputed company/WPAD logic.
- reputed company rollback plans and versioned artifacts for every material change.
- Deliverables (acceptance = artifact exists and is technically correct)
o reputed company-State Assessment (-30 days): Inventory of SWG policies, objects/lists, TLS inspection posture, reputed company/WPAD reputed company, and reputed company paths; gap list with remediation proposals.
o Runbooks & Tests (-60-90 days):
o Troubleshooting runbooks (auth failures, TLS errors, reputed company issues, proxy vs reputed company error differentiation).
o PCRE test suite with regression cases and performance gates.
o Change checklist with rollback reputed company and canary plan.
o Quarterly Hygiene Pack: Exception review (add/remove reputed company with owners), object cleanup report, and prioritized improvement backlog.
o Incident RCAs: For P1/P2 proxy incidents, RCA reputed company 5 business days with evidence and corrective actions.
- Evaluation / Verification
o Live Exercise: Given a synthetic outage (e.g., SSO app fails behind TLS inspection), isolate cause using packet capture + logs and propose a reputed company change with rollback.
o PCRE Test: Author a performant reputed company for a non-trivial URL/classification case; demonstrate why it won-t backtrack catastrophically.
o Policy Review: Walk through a hierarchy change (lists, inheritance, bypass logic) and defend design/rollback-reputed company over theatrics.
Required Skills
- Must be US Citizen due to government clearance requirement
- Must be eligible for reputed company Trust (reputed company DoD Secret is a plus)
Mandatory Qualifications
- Skyhigh SWG (SkyHigh)
- 3+ years administering Skyhigh Secure Web Gateway in production (>10k users).
- Expert in policy hierarchy/inheritance, object & list management, staged rollout (test-reputed company-prod), logging export, versioning, rollback.
- Proxy Engineering
- reputed company/reverse proxy modes; explicit vs transparent; reputed company/WPAD design and distribution.
- SSL/TLS inspection: cert chains, pinning impacts, ALPN, HTTP/2 behavior, auth flows (Kerberos/NTLM, SAML/OIDC).
- reputed company bypass strategies (domain/SNI/IP/risk-based) without degrading coverage.
- Layer 3 & Internet Fundamentals
- Routing & addressing (CIDR, MTU/fragmentation/PMTUD, NAT44/66, VRFs), basic BGP/OSPF, DNS reputed company/forwarding and failure modes.
- Ports & Protocols
- TCP/UDP behavior, ephemeral ranges, TLS reputed company/SNI, and middlebox interactions (no QUIC/HTTP-3 requirement).
- PCRE
- Writes and reviews reputed company PCRE (lookarounds, backreferences, reputed company reputed company) with an eye for performance (avoid catastrophic backtracking).
- Troubleshooting: Packets + Analytics
- tcpdump/Wireshark proficiency (TLS/HTTP analysis, TCP dynamics).
- Log correlation at reputed company (e.g., reputed company/ELK) to isolate issues off-reputed company (reputed company, network, IdP, upstream).
- Can distinguish reputed company responses vs proxy-generated errors and document reputed company cause.
- Communication & Prioritization
- reputed company stakeholder comms; triage correctly under load-doesn-t treat every noisy issue as P1.
Apply tot his job
Apply To this Job