Job Summary
We are seeking a highly skilled ZTNA / Secure Web Gateway (SWG) L3 Engineer with deep expertise in Appgate SDP (ZTNA) and iBoss SWG to design, implement, troubleshoot, and optimize enterprise secure access solutions. The role will serve as the technical Subject Matter Expert (SME) for Zero Trust and Secure Web Gateway technologies, providing advanced engineering support, architecture guidance, security policy management, and platform transformation initiatives to ensure secure and seamless user access across hybrid enterprise environments.
Key Responsibilities
Act as L3 SME for Appgate SDP and iBoss SWG platforms, providing advanced troubleshooting and escalation support. Design, implement, and maintain Zero Trust Network Access (ZTNA) and Secure Web Gateway security architectures. Configure and optimize application segmentation, access policies, user entitlements, and device trust controls. Lead onboarding of business applications and integrations into the Appgate environment. Design and implement web security controls including URL filtering, SSL inspection, malware protection, and policy enforcement within iBoss. Perform root cause analysis (RCA) for critical incidents, recurring issues, and security events. Collaborate with IAM, Network Security, Endpoint Security, SOC, and Cloud teams to deliver integrated security solutions. Review and enhance security policies based on business, compliance, and threat landscape requirements. Support infrastructure upgrades, patching, migration, and transformation initiatives. Develop automation solutions for policy deployment, monitoring, reporting, and operational efficiency. Create architecture documents, technical standards, SOPs, and knowledge management artifacts. Provide mentoring and technical guidance to L1/L2 engineers and support teams. Participate in audit, risk, governance, and compliance activities related to Zero Trust and Secure Access services.
Skill Requirements
6-10+ years of experience in Network Security, Cyber Security, Secure Access, or Zero Trust technologies. Minimum 4+ years of hands-on experience with ZTNA, SWG, SSE, or SASE platforms. Strong expertise in: Appgate SDP / Appgate ZTNA iBoss Secure Web Gateway Zero Trust Architecture Secure Remote Access User and Device Context-Based Access Network Segmentation and Micro-Segmentation Deep understanding of: SSE (Security Service Edge) SASE (Secure Access Service Edge) Secure Web Gateways CASB Concepts DLP Controls Threat Protection Mechanisms Strong knowledge of: TCP/IP, DNS, DHCP, HTTP/HTTPS Proxy Technologies SSL/TLS Inspection PKI and Certificate Management Identity-Aware Networking Experience integrating security platforms with: Microsoft Entra ID (Azure AD) Active Directory LDAP SAML OAuth OpenID Connect (OIDC) MFA Solutions Experience with log analysis, security monitoring, SIEM platforms, and threat investigation.
Other Requirements
Hands-on experience with: Zscaler ZIA & ZPA Netskope Prisma Access Cisco Secure Access Cloudflare Zero Trust Palo Alto Security Solutions Security certifications such as: CISSP CCSP CCNP Security Security+ Zero Trust or SASE Certifications Knowledge of cloud security across Azure, AWS, and Google Cloud. Experience with scripting and automation using: PowerShell Python REST APIs Infrastructure as Code (IaC) Exposure to SOC operations, threat hunting, and incident response processes. Experience with SIEM platforms such as Microsoft Sentinel, Splunk, QRadar, or Datadog Security Monitoring. Familiarity with compliance frameworks including ISO 27001, NIST, SOX, and GDPR. Experience supporting large global enterprise environments and managed security services. Exposure to AI-driven security analytics and automated remediation solutions.