Workplace Network Engineer (Contract)

About the role

Assurity Trusted Solutions (ATS), a wholly owned subsidiary of GovTech, is looking for motivated fresh graduates or early-career professionals interested in cybersecurity to join its Crowdsourced Vulnerability Discovery Programme (CVDP) triage team on a contract basis. The Endpoint Network Engineer maintains the SSE platform, supporting secure Internet access, Zero Trust Network Access (ZTNA) and endpoint connectivity services, and works closely with Endpoint Engineering, Network, Identity, Security, Application, Product and Service Desk teams.

Key responsibilities

• Provide day-to-day operations, monitoring, troubleshooting and technical support for the SSE platform, keeping service available and performing.
• Respond to incidents, implement approved configuration changes, support application onboarding, monitor platform health and escalate complex issues to senior engineers, vendors or infrastructure teams.
• Support secure Internet, SaaS and private application connectivity, troubleshooting endpoint, SSE cloud, security policies, on-prem infrastructure, network, DNS, authentication and backend applications.
• Develop and implement security policies such as access controls, SSL inspection, cloud firewalls and secure web gateways.
• Integrate SSE with SIEMs, IAM tools, CASBs and threat intelligence solutions.
• Monitor SSE consumption to optimise cloud costs and use analytics tools to report on security posture.
• Refine Zscaler configurations and security policies in line with best practice.

Required profile

• Diploma or degree in Information Technology, Computer Engineering, Network Engineering, Cybersecurity or equivalent.
• 3 to 5 years of experience with cloud security platforms, including Zscaler.
• Experience deploying Zero Trust Network Access solutions for large enterprises, including hybrid environments.
• Understanding of compliance frameworks such as SOC 2, GDPR and HIPAA.
• Advanced certifications such as Zscaler Certifications (ZDTA, ZDTE) or CCSP are preferred.

Required skills

• Enterprise networking: TCP/IP, DNS, DHCP, routing, NAT, firewall, proxy, HTTP/HTTPS, TLS/SSL, network troubleshooting.
• Tools: ping, nslookup, traceroute, curl, PowerShell network commands, Wireshark.
• Zero Trust concepts, Microsoft Entra ID, SAML, SSO, SCIM, MFA, digital certificates.
• Log and packet capture analysis, and hands-on experience with proxy, firewall, VPN or ZTNA solutions.