L3 Blue Coat Proxy Engineer

Description :

We are urgently looking for L3 Blue Coat Proxy Engineers with extensive hands-on experience in managing, configuring, troubleshooting, and optimizing Symantec/Blue Coat ProxySG and ProxyASG environments.

Candidates should be able to handle high-severity incidents, perform deep-dive troubleshooting, design policies, and support large-scale enterprise implementations.

This is a high-impact technical role requiring advanced knowledge in secure web gateway technologies and internet security filtering.

Key Responsibilities :

- Manage and support Blue Coat ProxySG, Advanced Secure Gateway (ASG), and Content Analysis System (CAS).

- Create and manage proxy policies, traffic rules, and access control configurations.

- Troubleshoot ProxySG issues including connection failures, performance issues,

authentication errors, SSL intercept problems, etc.

- Monitor proxy health, logs, caching performance, and network usage.

2. CPL & Policy Management :

- Create and modify CPL policy scripts.

- Implement and optimize policy layers, SSL inspection rules, and advanced filtering logic.

- Identify and resolve policy conflicts and performance degradation.

3. Proxy Authentication & Integration :

Integrate proxies with :

- Active Directory

- LDAP

- Kerberos/NTLM

- Identity-based policies

- Configure authentication realms and troubleshoot authentication/authorization issues.

4. Network & Security Troubleshooting :

Deep knowledge of :

- HTTP/HTTPS, TCP/IP

- SSL/TLS

- Forward/Reverse proxy

- Explicit & transparent proxy modes

- Handle escalations and root cause analysis (RCA) for proxy-related issues.

5. Proxy Maintenance & Upgrade Activities :

- Perform version upgrades, patches, and firmware updates.

- Handle migration projects (e.g., Blue Coat to Symantec SWG, hardware refresh).

- Monitor system logs, security alerts, and ensure compliance with baseline configurations.

Technical Skill Requirements :

Mandatory :

Strong understanding of :

- CPL scripting

- SSL Intercept

- Authentication protocols (Kerberos, NTLM, LDAP)

- Threat protection & web filtering

- Reverse and forward proxy architectures

- Experience in large-scale enterprise environments.

Preferred :

- Experience in Symantec Web Security Service (WSS).

- Strong network knowledge : routing, switching, firewall basics.

- Exposure to incident management tools (ServiceNow, Remedy, etc.

Certifications :

- BCPSA, BCPPA (Highly preferred).

Soft Skills :

- Excellent troubleshooting and analytical skills.

- Strong communication and stakeholder management.

- Ability to work independently and in high-pressure production environments.

- Good documentation skills