SASE Architect (IT Engineering)

Keysight Technologies, Inc.•Colorado Springs, CO

About The Position

Keysight is seeking a senior technical leader to lead the evolution of its global Secure Access Service Edge (SASE) strategy and architecture. The role will define and advance secure access and Zero Trust solutions for a global workforce and complex enterprise environment, influencing long-term security strategy and the future state of secure access across the company. The architect will own the global SASE and Security Service Edge (SSE) architecture, with Netskope SWG, CASB, and Private Access/ZTNA as the core platform. The position guides technology standards and strategic initiatives, partners with senior leadership and cross-functional teams, and delivers secure, scalable solutions that support business growth while protecting critical assets. It also serves as the senior technical authority and Tier 3 escalation point for the Netskope platform, providing technical direction, mentoring engineers, and promoting operational excellence and automation. The role requires 8+ years of hands-on network and/or network security experience, including 3+ years architecting and deploying SASE/SSE, cloud proxy, or Zero Trust solutions in a large enterprise. A bachelor's degree in a relevant field or an equivalent combination of certifications and experience is required. Occasional travel and flexible hours, including occasional weekend and holiday support, are required.

Requirements

Bachelor's degree in Engineering, Computer Science, Information Technology, or an equivalent combination of certifications and experience.
8+ years of hands-on network and/or network security experience, including 3+ years architecting and deploying SASE/SSE, cloud proxy, or Zero Trust solutions in a large enterprise environment.
Deep expertise in Zero Trust architecture, SWG, CASB, and ZTNA design, including TLS inspection, DLP, and traffic-steering strategies.
Strong understanding of TCP/IP, DNS, TLS/PKI, identity federation technologies (SAML, OIDC, SCIM), and cloud networking and security concepts.
Proven ability to lead complex cross-functional initiatives and communicate architecture, strategy, and technical recommendations to executives and engineering teams.
Hands-on architecture and administration experience with Netskope (SWG, CASB, and Private Access/ZTNA) or an equivalent enterprise SSE platform such as Zscaler or Prisma Access.
Experience designing and implementing identity and conditional access solutions using platforms such as Entra ID and Okta.
Strong understanding of enterprise networking fundamentals, including LAN/WAN, routing, and DNS.
Willingness to work flexible hours, including occasional weekend and holiday support for critical projects, deployments, or incident response activities.
Ability to travel occasionally to support global deployments, architecture reviews, and stakeholder engagement.

Nice To Haves

Netskope certifications such as NCSE, NCSP, or NCSA.
Security and architecture certifications such as CISSP, CCSP, CCNP Security, SABSA, TOGAF, or similar credentials.
Experience developing DLP programs, designing policies, and tuning them.
Experience with SaaS and IaaS security posture management across Microsoft 365, Google Workspace, Salesforce, AWS, Azure, and GCP.
Experience with endpoint management, endpoint security, and EDR integrations, including Intune, Jamf, CrowdStrike, and Microsoft Defender.
Experience with SIEM/SOAR integrations and security incident response processes.
Experience with Palo Alto Networks and Fortinet firewall technologies.
Experience with automation and infrastructure-as-code using Python, PowerShell, Terraform, and REST APIs.
Experience with ITIL-based incident, problem, and change management practices, including ServiceNow.
Experience with enterprise architecture frameworks, technical standards development, architecture governance, and technical documentation.

Responsibilities

Define and own Keysight's global SASE and SSE architecture, using Netskope SWG, CASB, and Private Access/ZTNA as the core platform.
Develop and maintain the SASE technology roadmap, reference architectures, design standards, and policy frameworks for secure web access, SaaS and cloud services, and private application access across 130+ global sites and a hybrid workforce.
Lead architecture and technical decisions for major initiatives, including migration from legacy VPN, proxy, and firewall-based access solutions to Netskope, cloud and SaaS adoption, M&A integrations, and strategic security enhancements.
Design and oversee integrations between Netskope and identity, endpoint, cloud, and security platforms, including SSO, MFA, Conditional Access, SIEM/SOAR, DLP, and cloud-native services.
Evaluate emerging technologies, vendor roadmaps, licensing strategies, and cost optimization opportunities; prepare architecture decision records, recommendations, and business cases for leadership.
Partner with Information Security, Identity, Cloud, Endpoint, Infrastructure, and Application teams to align solutions with security, compliance, privacy, and business requirements.
Serve as the senior technical authority and Tier 3 escalation point for Netskope, guiding complex incident response, troubleshooting, root cause analysis, and long-term corrective actions.
Mentor and coach engineers and promote best practices, operational excellence, automation, infrastructure-as-code, and scalable support models.
Drive adoption of APIs, Python, Terraform, and other automation technologies to improve reliability, consistency, operational efficiency, and service scalability.
Define monitoring standards, service-level objectives, capacity planning, resiliency requirements, failover strategies, and business continuity designs for SASE services.
Establish architectural and operational standards that reduce risk, improve user experience, and support long-term platform growth.
Translate business requirements into scalable security architectures and communicate design decisions, trade-offs, and recommendations to technical and non-technical audiences.
Manage strategic relationships with Netskope and other technology partners, including roadmap discussions, escalations, proof-of-concept evaluations, and technical reviews.
Influence enterprise security strategy and support adoption of modern Zero Trust and secure access capabilities.