Strong networking fundamentals: TCP/IP, routing/switching, VLANs, DNS, load balancing concepts, security zones; solid understanding of HTTP/HTTPS and TLS/SSL for web traffic analysis.

Secure web proxy technologies: experience with on prem proxy platforms (e.g., Broadcom/Blue Coat ProxySG or comparable); ability to implement and validate proxy policies and PAC files; skilled with packet captures, HTTP debugging, and log/flow analysis.

Enterprise VPN: hands on with site to site and/or remote access VPNs (IPsec, IKEv2, SSL VPN), including policy, routing, authentication integration, and troubleshooting.

Practical scripting for operations (bash/shell and/or Python) and simple Ansible playbooks; familiarity with vendor APIs is a plus.

Experience using SIEM tools for investigation and incident triage.

Comfortable with change management: concise implementation/rollback plans and post change validation.

Strong problem solving, communication, and teamwork.

Engineers manage their book of work in Agile Scrum by prioritizing the backlog, committing in sprint planning, and delivering in short iterations.

Execute project driven changes for proxies and VPN gateways using standardized change templates and runbooks (policy updates, routing/steering, segmentation, NAT where applicable).

Build, test, and deploy proxy policies (URL filtering, SSL/TLS inspection where applicable, malware/threat profiles, access controls), including certificate handling, PAC files, and traffic steering.

Collaborate with network, security, and application teams to align proxy and VPN designs with business and security requirements.

Develop and maintain concise operational documentation and runbooks; contribute lightweight automation (shell/Python/Ansible) for configuration checks and validation.