Workplace Network Engineer

Assurity Trusted Solutions (ATS) is a wholly owned subsidiary of the Government Technology Agency (GovTech). As a Trusted Partner over the last decade, ATS offers a comprehensive suite of products and services ranging from infrastructure and operational services, authentication services, governance and assurance services as well as managed processes. In a dynamic digital and cyber landscape, where trust & collaboration are key, ATS continues to drive mutually beneficial business outcomes through collaboration with GovTech, government agencies and commercial partners to mitigate cyber risks and bolster security postures. We are seeking motivated fresh graduates or early-career professionals passionate about cybersecurity to join our Crowdsourced Vulnerability Discovery Programme (CVDP) triage team on a contract basis. This role presents an excellent opportunity to gain hands-on experience in vulnerability assessment and management whilst working with government systems. Overview of Role: The Endpoint Network Engineer is responsible for day-to-day operations, monitoring, troubleshooting and technical support of the SSE platform, supporting secure Internet access, Zero Trust Network Access (ZTNA) and endpoint connectivity services. Responsible for maintaining service availability and performance, responding to incidents, implementing approved configuration changes, supporting application onboarding, monitoring platform health and escalating complex product or architecture issues to senior engineers, vendors or relevant infrastructure teams. The engineer will work closely with Endpoint Engineering, Network, Identity, Security, Application Teams, Product Engineers, Service Desk/EUSS and SSE principal to provide end-to-end incident resolution and maintain the SSE service. Job Scope: The engineer will provide end-to-end technical support for secure Internet, SaaS and private application connectivity, troubleshooting issues across endpoint, SSE cloud, SSE security policies, SSE on-prem infrastructure, network, DNS, authentication, and backend applications. The scope also include supports application onboarding, configuration and policy changes, on-prem server health check and capacity management, incident resolution, service monitoring and vendor escalation. • Develop and implement security policies within SSE solution, including access controls, SSL inspection, cloud firewalls, and secure web gateways, to protect users, apps, and data in the cloud. • Integrate SSE services with other security platforms, including SIEMs, IAM tools, CASBs, and threat intelligence solutions to enhance threat detection, incident response, and compliance reporting. • Drive cloud cost optimisation by monitoring SSE consumption patterns and implementing resource allocation strategies that balance performance and cost, focusing on efficient deployment and scaling. • Leverage SSE analytics tools to monitor security posture, generate detailed reports, and provide recommendations for continuous improvement in cloud security measures. • Work closely with IT, network, and security teams to integrate SSE into existing network and security infrastructures, ensuring seamless deployments and optimised security workflows. • Stay ahead of the curve on emerging security technologies, continuously refining and enhancing Zscaler configurations and security policies in line with evolving best practices and industry trends. Technical Competencies: The engineer is expected to possess strong networking fundamentals and hands-on troubleshooting capabilities to diagnose issues across the complete connectivity path, including the endpoint, SSE cloud, Internet/network infrastructure and backend applications. • Strong knowledge of enterprise networking fundamentals, including: o TCP/IP o DNS o DHCP o Routing o NAT o Firewall o Proxy o HTTP/HTTPS o TLS/SSL o TCP/UDP o Network troubleshooting • Hands-on experience with network diagnostic tools such as: o ping o nslookup / dig o traceroute / tracert o curl o PowerShell network commands o Wireshark / packet capture analysis • Experience supporting enterprise Internet connectivity, proxy, firewall, VPN or Zero Trust networking solutions. • Knowledge or hands-on experience with SSE technologies is highly desirable. • Understanding of Zero Trust Network Access concepts, including: o Identity-based access o Application segmentation o Least-privilege access o Device posture o Application-to-user access policies • Understanding of enterprise identity and authentication technologies, including: o Microsoft Entra ID o SAML o SSO o SCIM o MFA o Digital certificates • Experience analysing logs, packet captures, HAR files and application/network connectivity issues. Qualifications / Experience: • Diploma or Degree in Information Technology, Computer Engineering, Network Engineering, Cybersecurity or equivalent. • 3 to 5 years of experience working with cloud security platforms, including Zscaler. • Experience in deploying Zero Trust Network Access (ZTNA) solutions for large-scale enterprises, including complex hybrid environments. • In-depth understanding of cloud security concepts, including network segmentation, secure access policies, secure internet access (SIA), and cloud-delivered firewalling. • Experience with cloud-native application security, including securing SaaS apps, API traffic, and protecting users across various devices and endpoints using Zscaler solutions. • Strong knowledge of compliance frameworks (e.g., SOC 2, GDPR, HIPAA) and the ability to apply these to cloud-based security architectures using SSE solutions. • Advanced certifications such as Zscaler Certifications (ZDTA, ZDTE, etc.), Certified Cloud Security Professional (CCSP), or equivalent. • Proven ability to conduct security assessments in Zscaler-enforced cloud environments, evaluating security gaps and recommending remediation strategies. Join us and discover a meaningful and exciting career with Assurity Trust…