Senior Network Engineer, Network Services

Job descriptions may display in multiple languagesbased on your language selection.

Major Responsibilities

• Provide Level 3 engineering support for SSE services including ZTNA SWG CASB and DLP with a focus on operational stability secure policy enforcement and user experience.
• Design implement review and refine ZTNA access policies SWG web controls CASB SaaS controls and DLP policies based on business requirements risk and least-privilege principles.
• Troubleshoot complex issues related to private application access proxy behavior SSL/TLS inspection SaaS access DLP policy enforcement user authentication endpoint client behavior and traffic steering.
• Analyze logs alerts packet flows policy matches identity claims and endpoint posture signals to identify root cause and drive sustainable fixes.
• Monitor and optimize performance for remote office and mobile users by reviewing traffic paths SSE platform telemetry policy impact and application access patterns.
• Work with identity providers endpoint security tools network teams security teams application owners and service desks to ensure reliable authentication policy enforcement and secure access.
• Support incident problem and change management activities including RCA permanent corrective actions implementation planning validation and operational handover.
• Create and maintain technical documentation troubleshooting guides operational runbooks policy standards and knowledge articles for SSE and ZTNA services.
• Coach and mentor Level 2 resources on issue triage log analysis escalation quality repeatable troubleshooting and operational best practices.
• Collaborate with vendors and managed service providers to resolve advanced platform issues validate product behavior and evaluate relevant feature enhancements.
• Identify opportunities to improve policy governance reporting alerting automation and operational readiness across SSE services.

Required Qualifications & Skills:

• Bachelors degree in Computer Science Information Technology or a related field or equivalent work experience.
• 7 years of experience in network security network engineering remote access proxy cloud security or related infrastructure domains.
• Hands-on experience supporting SSE technologies including ZTNA SWG CASB and DLP preferably with Netskope or comparable platforms such as Zscaler Palo Alto Prisma Access Cisco Cloudflare or Broadcom/Symantec.
• Strong working knowledge of ZTNA concepts private application access connector/publisher architecture identity-based access controls device posture and least-privilege access models.
• Experience creating tuning and troubleshooting SWG CASB and DLP policies including web categories SSL/TLS inspection SaaS controls sensitive data detection policy exceptions and false positive analysis.
• Strong network fundamentals across LAN WAN TCP/IP DNS routing NAT firewalls VPN SD-WAN proxy certificates and packet flow analysis.
• Ability to analyze platform logs SIEM events endpoint client behavior authentication flows and traffic steering outcomes to resolve complex incidents.
• Effective written and verbal communication skills including the ability to explain technical issues document decisions coordinate changes and work with global stakeholders.
• Demonstrated ability to coach mentor and guide Level 2 support resources through structured troubleshooting and knowledge transfer.
• Relevant certifications such as Netskope Zscaler CCNP CCNP Security Azure cloud security or CISSP are a plus.

Preferred Qualifications:

• Experience with identity providers such as Microsoft Entra ID Okta or Ping Identity including SAML OAuth conditional access MFA and group-based policy assignment.
• Experience supporting SSE policy rollouts user migrations operational readiness and change communication in a large enterprise environment.
• Familiarity with Microsoft 365 SaaS governance cloud application risk data protection controls and DLP policy lifecycle management.
• Experience improving operational processes through runbooks dashboards automation reporting and recurring issue reduction.

Additional Information:

• This role requires working with global teams across multiple time zones.
• Candidate must participate in global on-call rotation roster.
• The candidate will provide Level 3 support and serve as senior technical resource for SSE/ZTNA including guidance and mentoring for Level 2 support teams.
• Occasional travel may be required for key project implementations and strategy discussions.

If you are a seasoned network security engineer with hands-on SSE experience strong ZTNA fundamentals practical SWG CASB and DLP policy knowledge and the ability to solve complex issues while guiding others we encourage you to apply.

At Magna we believe that a diverse workforce is critical to our success. Thats why we are proud to be an equal opportunity employer. We hire on the basis of experience and qualifications and in consideration of job requirements regardless of in particular color ancestry religion gender origin sexual orientation age citizenship marital status disability or gender identity. Magna takes the privacy of your personal information seriously. We discourage you from sending applications via email or traditional mail to comply with GDPR requirements and your local Data Privacy Law.

As part of our commitment to a fair consistent and efficient recruitment process we may use artificial intelligence (AI) tools to assist in the initial screening of applications submitted through our Workday system. These tools help identify qualifications and experience that align with the role requirements. Please note that AI is used solely to support our recruiters. Final decisions are always made by the hiring manager and the hiring team. Importantly no applicant data is shared externally through these AI tools. All information remains securely within our systems and is handled in accordance with our privacy and data protection policies.

If you have any questions or concerns about this process feel free to contact our Talent Attraction team.