Zero Trust & SASE Security Engineer

About the Role

The Secure Access & SASE Engineer implements, operates, supports, and continuously improves KION’s global Zero Trust, SASE, SSE, and secure connectivity services. The role contributes to KION’s Zero Trust transformation by ensuring reliable, secure, and scalable access for users, devices, applications, cloud environments, and locations. The role supports secure and compliant access services through policy engineering, advanced troubleshooting, automation, identity integration, and operational integration with SD-WAN and cloud platforms. Working across Network, Security, Infrastructure, Cloud, Architecture, Identity, and Application teams, the engineer ensures reliable and secure access to corporate resources within a global enterprise environment.

Key Responsibilities

• Zero Trust, SASE & SSE Engineering (25%)

• Implement, operate, and improve enterprise Zero Trust and secure access services.

• Engineer and maintain SASE and SSE security platforms and services.

• Administer and optimize enterprise SASE and SSE security platforms, including:

• Security Service Edge and internet security services

• Zero Trust Network Access and private application access

• Cloud access security, data protection, and threat prevention

• Maintain secure access configurations for users, devices, applications, cloud services, and branch environments.

• Support KION’s Zero Trust transformation by applying least-privilege access, continuous verification, and secure connectivity principles.

• Support platform upgrades, feature enablement, service improvements, and platform optimization initiatives to enhance security, reliability, and operational efficiency.

• Security Policy Engineering & Governance (15%)

• Implement, maintain, and optimize security policies across Zero Trust and SSE platforms.

• Develop and manage:

• Application Access Policies

• ZTNA Policies

• URL Filtering Policies

• Cloud Security Policies

• CASB Policies

• DLP Policies

• SSL Inspection Policies

• Device Posture Policies

• Ensure policies align with corporate security standards and business requirements.

• Continuously review and optimize policy effectiveness and user experience.

• Advanced Troubleshooting & Service Operations (40%)

• Troubleshoot:

• Authentication and authorization issues

• Access policy conflicts

• ZTNA connectivity issues

• Cloud application access problems

• SSL/TLS inspection issues

• User-to-application communication failures

• Endpoint posture validation issues

• Perform root cause analysis and drive permanent corrective actions.

• Support incident management and security investigations.

• SD-WAN & Secure Connectivity Integration (10%)

• Support integration of SASE and SSE platforms with global SD-WAN environments.

• Coordinate with managed service providers to support secure connectivity and platform operations.

• Optimize traffic steering and security inspection paths.

• Collaborate with network engineering teams on secure hybrid and cloud connectivity requirements.

• Security Automation & Infrastructure as Code (10%)

• Support Infrastructure as Code (IaC) solutions for secure access and platform configuration.

• Automate policy deployment, platform configuration, and security workflows.

• Develop reusable automation modules and configuration standards.

• Integrate security platforms with ITSM, IAM, and cloud services through APIs.

• Support automated validation of security configuration changes.

• Contribute to operational efficiency through workflow automation and orchestration.

Requirements & Tech Stack

• Zero Trust
• SASE
• SSE
• ZTNA
• CASB
• DLP
• SSL/TLS Inspection
• SD-WAN
• Infrastructure as Code (IaC)
• APIs
• ITSM
• IAM
• Cloud platforms
• Network
• Security
• Infrastructure
• Cloud
• Architecture
• Identity
• Application teams
• Policy engineering
• Advanced troubleshooting
• Automation
• Identity integration
• Operational integration
• Least-privilege access
• Continuous verification
• Secure connectivity principles
• Managed service providers
• Traffic steering
• Security inspection paths
• Workflow automation
• Orchestration