Zero Trust & SASE Security Engineer

About the Role

The Secure Access & SASE Engineer implements, operates, supports, and continuously improves KION's global Zero Trust, SASE, SSE, and secure connectivity services. The role contributes to KION's Zero Trust transformation by ensuring reliable, secure, and scalable access for users, devices, applications, cloud environments, and locations. The role supports secure and compliant access services through policy engineering, advanced troubleshooting, automation, identity integration, and operational integration with SD-WAN and cloud platforms. Working across Network, Security, Infrastructure, Cloud, Architecture, Identity, and Application teams, the engineer ensures reliable and secure access to corporate resources within a global enterprise environment.

Key Responsibilities

• Zero Trust, SASE & SSE Engineering

• Implement, operate, and improve enterprise Zero Trust and secure access services.

• Engineer and maintain SASE and SSE security platforms and services.

• Administer and optimize enterprise SASE and SSE security platforms, including:

• Security Service Edge and internet security services

• Zero Trust Network Access and private application access

• Cloud access security, data protection, and threat prevention

• Maintain secure access configurations for users, devices, applications, cloud services, and branch environments.

• Support KION's Zero Trust transformation by applying least-privilege access, continuous verification, and secure connectivity principles.

• Support platform upgrades, feature enablement, service improvements, and platform optimization initiatives to enhance security, reliability, and operational efficiency.

• Security Policy Engineering & Governance

• Implement, maintain, and optimize security policies across Zero Trust and SSE platforms.

• Develop and manage:

• Application Access Policies

• ZTNA Policies

• URL Filtering Policies

• Cloud Security Policies

• CASB Policies

• DLP Policies

• SSL Inspection Policies

• Device Posture Policies

• Ensure policies align with corporate security standards and business requirements.

• Continuously review and optimize policy effectiveness and user experience.

• Advanced Troubleshooting & Service Operations

• Troubleshoot:

• Authentication and authorization issues

• Access policy conflicts

• ZTNA connectivity issues

• Cloud application access problems

• SSL/TLS inspection issues

• User-to-application communication failures

• Endpoint posture validation issues

• Perform root cause analysis and drive permanent corrective actions.

• Support incident management and security investigations.

• SD-WAN & Secure Connectivity Integration

• Support integration of SASE and SSE platforms with global SD-WAN environments.

• Coordinate with managed service providers to support secure connectivity and platform operations.

• Optimize traffic steering and security inspection paths.

• Collaborate with network engineering teams on secure hybrid and cloud connectivity requirements.

• Security Automation & Infrastructure as Code

• Support Infrastructure as Code (IaC) solutions for secure access and platform configuration.

• Automate policy deployment, platform configuration, and security workflows.

• Develop reusable automation modules and configuration standards.

• Integrate security platforms with ITSM, IAM, and cloud services through APIs.

• Support automated validation of security configuration changes.

• Contribute to operational efficiency through workflow automation and orchestration.

Requirements & Tech Stack

• Zero Trust
• SASE
• SSE
• Security Service Edge
• Zero Trust Network Access
• Cloud access security
• Data protection
• Threat prevention
• ZTNA
• CASB
• DLP
• SSL Inspection
• Device Posture
• SD-WAN
• Infrastructure as Code (IaC)
• APIs
• ITSM
• IAM

Qualifications

• Experience with implementing, operating, and improving enterprise Zero Trust and secure access services.
• Experience engineering and maintaining SASE and SSE security platforms and services.
• Experience administering and optimizing enterprise SASE and SSE security platforms.
• Experience with Security Service Edge and internet security services.
• Experience with Zero Trust Network Access and private application access.
• Experience with Cloud access security, data protection, and threat prevention.
• Experience maintaining secure access configurations for users, devices, applications, cloud services, and branch environments.
• Experience supporting Zero Trust transformation.
• Experience implementing, maintaining, and optimizing security policies.
• Experience developing and managing: Application Access Policies, ZTNA Policies, URL Filtering Policies, Cloud Security Policies, CASB Policies, DLP Policies, SSL Inspection Policies, Device Posture Policies.
• Experience ensuring policies align with corporate security standards and business requirements.
• Experience continuously reviewing and optimizing policy effectiveness and user experience.
• Experience troubleshooting authentication and authorization issues.
• Experience troubleshooting access policy conflicts.
• Experience troubleshooting ZTNA connectivity issues.
• Experience troubleshooting cloud application access problems.
• Experience troubleshooting SSL/TLS inspection issues.
• Experience troubleshooting user-to-application communication failures.
• Experience troubleshooting endpoint posture validation issues.
• Experience performing root cause analysis and driving corrective actions.
• Experience supporting incident management and security investigations.
• Experience supporting integration of SASE and SSE platforms with global SD-WAN environments.
• Experience coordinating with managed service providers.
• Experience optimizing traffic steering and security inspection paths.
• Experience collaborating with network engineering teams on secure hybrid and cloud connectivity requirements.
• Experience supporting Infrastructure as Code (IaC) solutions.
• Experience automating policy deployment, platform configuration, and security workflows.
• Experience developing reusable automation modules and configuration standards.
• Experience integrating security platforms with ITSM, IAM, and cloud services through APIs.
• Experience supporting automated validation of security configuration changes.
• Experience contributing to operational efficiency through workflow automation and orchestration.
• Ability to work across Network, Security, Infrastructure, Cloud, Architecture, Identity, and Application teams.