SASE Support Engineer (IT Engineering)

Keysight is at the forefront of technology innovation, delivering breakthroughs and trusted insights in electronic design, simulation, prototyping, test, manufacturing, and optimization. Our ~15,000 employees create world-class solutions in communications, 5G, automotive, energy, quantum, aerospace, defense, and semiconductor markets for customers in over 100 countries. Learn more about what we do.

Our award-winning culture embraces a bold vision of where technology can take us and a passion for tackling challenging problems with industry-first solutions. We believe that when people feel a sense of belonging, they can be more creative, innovative, and thrive at all points in their careers.

In this role, you'll be part of a highly visible team responsible for delivering secure, seamless access to the applications and resources that power our global business. You'll work with cutting-edge cloud and network security technologies, collaborate with architects and engineering teams across the organization, and help solve complex security and connectivity challenges in a large-scale enterprise environment. This is more than a traditional support role. You'll contribute to high-impact security initiatives, gain hands-on experience with some of the industry's most advanced secure access technologies, and play an important role in shaping the future of secure access at Keysight.

Netskope Operations & Support

• Operate, support, and maintain Keysight's global Netskope platform, including Secure Web Gateway (SWG), Cloud Access Security Broker (CASB), and Zero Trust Network Access (NPA/ZTNA), as part of a global follow-the-sun support model spanning APAC, EMEA, and the Americas.
• Serve as a technical escalation point and subject matter expert for Netskope incidents, troubleshooting client steering, tunnel and connector issues, authentication, DNS, certificates, and application access across user, branch, and cloud traffic paths.
• Monitor Netskope tenant health, Publisher and Connector status, NewEdge POP connectivity, and overall user experience; proactively identify performance bottlenecks and improve service availability.
• Manage day-to-day policy and configuration changes, including web and URL filtering, real-time protection and DLP policies, SaaS and IaaS CASB controls, private application onboarding, TLS inspection, and certificate bypass exceptions.
• Administer the Netskope Client lifecycle across Windows, macOS, and mobile endpoints, including deployments, steering configuration, upgrades, and troubleshooting.
• Partner with Information Security teams to tune CASB and DLP policies, review alerts, and participate in security incident response activities as the Netskope and network subject matter expert.
• Manage vendor relationships by opening and driving Netskope support cases, validating fixes, and tracking service-level performance.

Engineering, Projects & Integrations

• Contribute to global initiatives, including migration from legacy VPN, proxy, and firewall-based access solutions to Netskope SWG and ZTNA, onboarding new SaaS and cloud applications, M&A integrations, technology refreshes, and security enhancements.
• Support integrations with identity platforms and services, including SSO, MFA, and SCIM, as well as endpoint management, SIEM/SOAR, and other security technologies.
• Collaborate closely with business and IT stakeholders on new deployments and continuous improvement initiatives, communicating changes, impacts, and outcomes effectively.
• Support the adoption and expansion of modern secure access technologies across a large-scale global enterprise environment.

Automation & Continuous Improvement

• Participate in Problem Management, post-mortems, root cause analysis, and service improvement initiatives to enhance reliability and user experience.
• Develop and maintain runbooks, knowledge articles, operational documentation, reporting, dashboards, and alerting for Netskope services.
• Leverage REST APIs and scripting tools such as Python, PowerShell, and Terraform to automate routine operational tasks, improve efficiency, and reduce incident volume.
• Drive continuous improvement efforts that accelerate issue resolution, streamline operations, and strengthen the overall security and access management ecosystem.

Additional Requirements

• Willingness to work flexible hours, including occasional weekend and holiday coverage, to support operational and project needs.

We're looking for an experienced network and security engineer who is passionate about modern secure access technologies and enjoys solving complex technical challenges in a global enterprise environment.

Basic Qualifications

• Bachelor's degree in Engineering, Computer Science, Computer Information Systems, Computer Technology, or an equivalent combination of certifications and experience.
• Typically, 4-5 years of hands-on network and/or network security experience, including supporting a production SASE/SSE, proxy, or cloud security platform.
• Strong understanding of TCP/IP, DNS, TLS/PKI, proxy and firewall technologies, and Zero Trust security principles.
• Strong troubleshooting and problem-solving skills, with the ability to support critical services in a 24x7 global operations environment.

Preferred Certifications

• Netskope certifications such as NCSA, NCSE, or NCSP.
• Industry-recognized networking or security certifications such as CCNP, PCNSA/PCNSE, Security+, CISSP, or similar credentials.

Required Technical Experience

• Hands-on experience administering Netskope (SWG, CASB, and/or Private Access/ZTNA) or a comparable Security Service Edge (SSE) platform such as Zscaler or Prisma Access.
• Experience with Secure Web Gateway (SWG), web proxy technologies, URL filtering, and TLS inspection.
• Strong understanding of enterprise networking fundamentals, including LAN/WAN technologies, routing, and DNS.

Desired Technical Skills

Experience with one or more of the following is highly desirable:

• Data Loss Prevention (DLP) policy design, implementation, and tuning.
• SaaS and IaaS security for platforms such as Microsoft 365, Google Workspace, Salesforce, AWS, and Azure.
• Identity and access management integrations including Entra ID (Azure AD), Okta, SAML, and SCIM.
• Endpoint management and deployment tools such as Intune, Jamf, and SCCM.
• Palo Alto Networks and Fortinet firewall technologies.
• SIEM integrations and security incident response processes.
• Automation and scripting using Python, PowerShell, Terraform, and REST APIs.
• ITIL-based incident, problem, and change management practices, including ServiceNow.

Keysight is an Equal Opportunity Employer

Keysight Technologies Inc. is an equal opportunity employer. Qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, protected veteran status, disability or any other protected categories under all applicable laws.

Pay Transparency

The level of role will be based on applicable experience, education, and skills. Most offers will be between the minimum and the midpoint of the Salary Range listed below.

Colorado Pay Range: Minimum $92,310 – Maximum $153,850

Note: For other locations, pay ranges will vary by region

US Employees may be eligible for the following benefits:

• Medical, dental and vision
• Health Savings Account
• Health Care and Dependent Care Flexible Spending Accounts
• Life, Accident, Disability insurance
• Business Travel Accident and Business Travel Health
• 401(k) Plan
• Flexible Time Off, Paid Holidays
• Paid Family Leave
• Discounts, Perks
• Tuition Reimbursement
• Adoption Assistance
• Incentive Programs
• ESPP (Employee Stock Purchase Plan)