Lead Infrastructure Engineer - Proxy/SSE Network Security

In this Lead Software Engineer role, you will architect and deliver secure, scalable network security solutions for enterprise perimeter and SSE services. You will pursue Zero Trust patterns and identity-aware access to reduce implicit trust and lateral movement. You’ll lead code-quality initiatives and champion AI-assisted engineering practices across a cross-functional team. This position offers hands-on technical leadership and a clear impact on resilience and risk reduction in a global financial services environment.

• Design and implement secure network security software solutions and troubleshoot complex problems
• Develop secure production code, review peers, and debug effectively
• Architect ZTNA patterns for user-to-app and user-to-internet access
• Build and operate IAP and policy enforcement for web and app access
• Integrate Secure Gateway/SWG capabilities and related protections
• Lead AI-assisted engineering practices and establish validation standards
• Utilize SDLC tools and automation to improve quality and delivery
• Own US perimeter, proxy, and SSE/SASE engineering roadmap and governance
• Define standards and reusable patterns for perimeter and egress controls
• Provide engineering leadership across edge/connectivity adjacencies and cloud interconnect
• Establish governance with backlog management, risk workflows, and auditability
• Drive operational excellence, observability, and TLM modernization tied to stability

• Experience in network security / SASE / SSE / identity security / security engineering
• Strong understanding of Zero Trust, policy-based access, segmentation, secure egress
• Hands-on experience with forward/reverse proxy architectures and IAP patterns
• Deep knowledge of SAML, OIDC, OAuth 2.0, JWT, JWKs, rotation, scopes/claims, replay protection
• Experience leading AI-assisted software development tools and validating AI outputs
• Knowledge of responsible AI use in engineering workflows and secure handling of data
• Experience delivering regional (US/NA) infrastructure or security platforms
• Experience supervising engineers and cross-team remediation programs
• Strong knowledge of perimeter security controls, segmentation, encryption, access control
• Experience translating security requirements into edge/perimeter connectivity patterns with Cisco/Arista
• Familiarity with interconnect models (Equinix Fabric) and cloud adjacency (AWS Direct Connect, AWS PrivateLink)

• leadership
• cross-functional collaboration
• stakeholder alignment
• ZTNA and IAP implementations
• Secure Web Gateway and TLS inspection
• proxy/gateway architectures (forward/reverse)