The Security Proxy Engineer (Mid‑Level) is responsible for the implementation, operation, and optimization of the enterprise proxy infrastructure that enables secure access to internal and third‑party services. This role supports proxy performance, resiliency, identity‑aware routing, consistent traffic inspection, and controlled egress IPs—key enablers of regulatory compliance, security controls (encryption and inspection), and user productivity at scale.
The engineer works within established proxy architecture standards, independently handling operational tasks and troubleshooting, while collaborating with senior engineers and architects on complex designs and large‑scale initiatives.
Responsibilities
* Implement, configure, and maintain enterprise proxy and secure web gateway services under defined standards.
* Manage proxy policies for web access control, traffic inspection, TLS decryption, and egress IP enforcement.
* Execute routine operational tasks including configuration changes, upgrades, patching, and vendor‑recommended updates.
* Monitor proxy service health, availability, and performance, identifying and resolving user‑impacting issues.
* Perform root‑cause analysis for proxy‑related incidents and participate in incident response and post‑incident reviews.
* Assist with capacity planning and resiliency testing activities, escalating risks when thresholds are approached.
* Ensure proxy configurations consistently enforce security policies aligned with organizational standards.
* Support compliance activities by maintaining logging, retention, and inspection settings as required.
* Provide proxy logs, traffic analysis, and technical input for security investigations and audits.
* Implement and maintain identity‑aware proxy policies integrating with identity providers and authentication systems.
* Support onboarding of new applications and SaaS services, validating compatibility with proxy inspection.
* Troubleshoot application access issues related to proxy routing, certificates, or inspection policies.
* Maintain operational documentation, configuration standards, and troubleshooting runbooks.
* Collaborate with network, endpoint, IAM, cloud, and security teams to deliver stable proxy services.
* Escalate design gaps, operational risks, or recurring issues to senior engineers or architects.
Qualifications
* 6 years of hands‑on experience supporting enterprise proxy or secure web gateway platforms.
Required Skills
* Strong understanding of HTTP/HTTPS, TLS, certificates, encryption, and decryption processes.
* Experience implementing and managing proxy policies for traffic inspection, filtering, and outbound control.
* Solid foundation in networking fundamentals (TCP/IP, DNS, routing, load balancing).
* Proven ability to troubleshoot complex proxy‑related user access and performance issues.
* Experience working in production environments with change management and uptime requirements.
* Ability to work independently on operational tasks within established architectural guidance.
Preferred Skills
* Experience with cloud‑delivered proxy or hybrid proxy environments.
* Familiarity with identity‑centric access models, SSO, and device or user‑based policy enforcement.
* Exposure to automation or scripting for proxy configuration or monitoring.
* Working knowledge of compliance or regulatory requirements affecting outbound traffic and data handling.
* Experience supporting globally distributed user populations.
* Vendor‑specific proxy or network/security certifications.