SASE Support Engineer (IT Engineering)

Keysight Technologies, Inc.•Colorado Springs, CO

About The Position

Keysight is seeking an experienced network and security engineer to help deliver secure, seamless access to applications and resources across its global enterprise. The role operates, supports, and maintains the global Netskope platform—including Secure Web Gateway (SWG), Cloud Access Security Broker (CASB), and Zero Trust Network Access (NPA/ZTNA)—within a follow-the-sun support model spanning APAC, EMEA, and the Americas. The engineer serves as an escalation point for Netskope issues, monitors service health and user experience, administers policies and endpoint clients, and partners with Information Security and vendors to resolve incidents and improve security and availability. The position also contributes to global engineering initiatives such as legacy access solution migrations, application onboarding, M&A integrations, technology refreshes, and security enhancements. It supports integrations with identity, endpoint management, SIEM/SOAR, and other security technologies, and collaborates with business and IT stakeholders on deployments and continuous improvement. The engineer participates in problem management and root cause analysis, maintains operational documentation and reporting, and uses APIs and scripting or infrastructure-as-code tools to automate tasks and improve service operations. Flexible hours, including occasional weekend and holiday coverage, are required.

Requirements

Bachelor's degree in Engineering, Computer Science, Computer Information Systems, or Computer Technology, or an equivalent combination of certifications and experience.
Typically 4–5 years of hands-on network and/or network security experience, including support for a production SASE/SSE, proxy, or cloud security platform.
Strong understanding of TCP/IP, DNS, TLS/PKI, proxy and firewall technologies, and Zero Trust security principles.
Strong troubleshooting and problem-solving skills, with the ability to support critical services in a 24x7 global operations environment.
Hands-on experience administering Netskope (SWG, CASB, and/or Private Access/ZTNA) or a comparable SSE platform such as Zscaler or Prisma Access.
Experience with SWG, web proxy technologies, URL filtering, and TLS inspection.
Strong understanding of enterprise networking fundamentals, including LAN/WAN technologies, routing, and DNS.

Nice To Haves

Netskope certifications such as NCSA, NCSE, or NCSP.
Industry-recognized networking or security certifications such as CCNP, PCNSA/PCNSE, Security+, CISSP, or similar credentials.
Experience designing, implementing, and tuning DLP policies.
Experience with SaaS and IaaS security for platforms such as Microsoft 365, Google Workspace, Salesforce, AWS, and Azure.
Experience with identity and access management integrations, including Entra ID (Azure AD), Okta, SAML, and SCIM.
Experience with endpoint management and deployment tools such as Intune, Jamf, and SCCM.
Experience with Palo Alto Networks and Fortinet firewall technologies.
Experience with SIEM integrations and security incident response processes.
Experience with automation and scripting using Python, PowerShell, Terraform, and REST APIs.
Experience with ITIL-based incident, problem, and change management practices, including ServiceNow.

Responsibilities

Operate, support, and maintain Keysight's global Netskope platform, including SWG, CASB, and NPA/ZTNA, as part of a follow-the-sun support model spanning APAC, EMEA, and the Americas.
Serve as a technical escalation point and subject matter expert for Netskope incidents, troubleshooting client steering, tunnels and connectors, authentication, DNS, certificates, and application access across user, branch, and cloud traffic paths.
Monitor Netskope tenant health, Publisher and Connector status, NewEdge POP connectivity, and user experience; identify performance bottlenecks and improve service availability.
Manage policy and configuration changes, including web and URL filtering, real-time protection and DLP policies, SaaS and IaaS CASB controls, private application onboarding, TLS inspection, and certificate bypass exceptions.
Administer Netskope Client deployments, steering configuration, upgrades, and troubleshooting across Windows, macOS, and mobile endpoints.
Partner with Information Security teams to tune CASB and DLP policies, review alerts, and participate in security incident response.
Manage Netskope vendor support cases, validate fixes, and track service-level performance.
Contribute to migrations from legacy VPN, proxy, and firewall-based access solutions to Netskope SWG and ZTNA, as well as SaaS and cloud application onboarding, M&A integrations, technology refreshes, and security enhancements.
Support integrations with identity platforms and services, endpoint management, SIEM/SOAR, and other security technologies.
Collaborate with business and IT stakeholders on deployments and continuous improvement, communicating changes, impacts, and outcomes.
Support adoption and expansion of modern secure access technologies across the global enterprise.
Participate in Problem Management, post-mortems, root cause analysis, and service improvement initiatives.
Develop and maintain runbooks, knowledge articles, operational documentation, reporting, dashboards, and alerting for Netskope services.
Use REST APIs and tools such as Python, PowerShell, and Terraform to automate operational tasks, improve efficiency, and reduce incident volume.
Drive continuous improvement to accelerate issue resolution, streamline operations, and strengthen security and access management.
Work flexible hours, including occasional weekend and holiday coverage, to support operational and project needs.