SASE Engineer

Role Summary
This position is responsible for supporting and expanding the organization’s network security and cloud services infrastructure within the PST time zone. The role requires in-depth expertise in Secure Access Service Edge (SASE) solutions, SD-WAN, and network security principles, with a focus on cloud-delivered security services, complex network troubleshooting, and security policy management. The candidate will operate as a senior technical escalation point, lead migrations, and collaborate across teams to ensure robust, compliant, and scalable network architecture.

Responsibilities

• Serve as tier-3 escalation support for SASE, SD-WAN, and remote access incidents, conducting root cause analysis and implementing corrective actions.
• Troubleshoot complex network issues, including application latency, access failures, and security policy violations, utilizing packet capture, log analytics, and monitoring tools.
• Lead the migration from legacy network infrastructure to cloud-delivered SASE services, ensuring smooth transition and minimal service disruption.
• Develop and maintain network documentation, including diagrams, policies, standards, and as-built records for operational consistency and audit readiness.
• Evaluate and recommend SASE and SSE vendors and features, aligning solutions with organizational requirements and providing technical input on architecture and procurement decisions.
• Manage policy lifecycle, perform change control, peer reviews, testing, and staged deployment of network policies and configurations.
• Build monitoring dashboards, alerts, and reports to track platform health, user experience, and SLA adherence.
• Collaborate with Security Operations, Identity, Endpoint, and Cloud teams to ensure network policies meet security standards and application needs.
• Support audit and compliance activities by maintaining detailed control documentation and configuration records.
• Mentor mid-level and junior engineers, develop runbooks, and lead knowledge transfer initiatives to build operational resilience.

Qualifications

• Extensive experience with complex networks, cloud services (AWS, Azure, GCP), and SASE frameworks.
• Proven expertise with network security platforms such as Netskope, Zscaler, Palo Alto, Fortinet, and SD-WAN fabric design.
• Strong understanding of Zero Trust principles, application segmentation, device posture assessment, and continuous verification.
• Ability to troubleshoot advanced network issues, including SSL/TLS, PKI, and identity integration with SAML/OIDC, SSO, SCIM, Entra ID, or Okta.
• Experience with network routing protocols, VLANs, and cloud networking.
• Excellent documentation skills, including network diagrams, policy standards, and as-built records.
• Ability to work US hours in PST zone.
• Knowledge of scripting languages such as Python and automation tools is advantageous.
• Industry certifications like CCNA/CCNP are preferred.
• Strong communication skills, with the ability to articulate technical risks and trade-offs to diverse stakeholders.
• In compliance with federal law, all persons hired must verify their identity and eligibility to work in the United States and complete the required employment eligibility verification form upon hire. Candidates must be legally authorized to work in the United States without employer sponsorship, now or in the future.
   

Publishing Pay Range: $56.72 - $59.13 Hourly

This is a fully remote role and can be performed from any approved location within the United States.