Overview:
Keysight is at the forefront of technology innovation, delivering breakthroughs and trusted insights in electronic design, simulation, prototyping, test, manufacturing, and optimization. Our ~15,000 employees create world-class solutions in communications, 5G, automotive, energy, quantum, aerospace, defense, and semiconductor markets for customers in over 100 countries. Learn more about what we do.
Our award-winning culture embraces a bold vision of where technology can take us and a passion for tackling challenging problems with industry-first solutions. We believe that when people feel a sense of belonging, they can be more creative, innovative, and thrive at all points in their careers.
Lead the evolution of Keysight's global Secure Access Service Edge (SASE) strategy and architecture. As a senior technical leader, you will drive the design and implementation of Zero Trust security solutions that support a global workforce and complex enterprise environment. This role offers the opportunity to influence long-term security strategy, partner with senior leadership, and help define the future state of secure access across Keysight.
In this highly visible role, you will serve as a trusted technical leader responsible for advancing Keysight's global secure access architecture. You'll define technology standards, guide strategic initiatives, and partner with cross-functional teams to deliver innovative security solutions that enable business growth while protecting critical assets. Working with cutting-edge cloud, network, and security technologies, you'll help drive the transformation of secure access across the enterprise and influence the direction of cybersecurity for years to come.
Responsibilities:
SASE Architecture & Strategy
- Define and own Keysight's global Secure Access Service Edge (SASE) and Security Service Edge (SSE) architecture, with Netskope Secure Web Gateway (SWG), Cloud Access Security Broker (CASB), and Zero Trust Network Access (Private Access/ZTNA) as the core platform.
- Develop and maintain the SASE technology roadmap, reference architectures, design standards, and policy frameworks that support secure web access, SaaS and cloud services, and private application access across 130+ global sites and a hybrid workforce.
- Lead architecture and technical decision-making for major initiatives, including migration from legacy VPN, proxy, and firewall-based access solutions to Netskope, cloud and SaaS adoption, M&A integrations, and strategic security enhancements.
- Design and oversee integrations between Netskope and identity, endpoint, cloud, and security platforms, including SSO, MFA, Conditional Access, SIEM/SOAR, DLP, and cloud-native services, to deliver consistent end-to-end security.
- Evaluate emerging technologies, vendor roadmap developments, licensing strategies, and cost optimization opportunities; develop architecture decision records, recommendations, and business cases for leadership.
- Partner closely with Information Security, Identity, Cloud, Endpoint, Infrastructure, and Application teams to ensure solutions align with security, compliance, privacy, and business requirements.
Technical Leadership & Operational Excellence
- Serve as the senior technical authority and Tier 3 escalation point for the Netskope platform, providing guidance on complex incidents, troubleshooting, root cause analysis, and long-term corrective actions.
- Mentor and coach engineers while promoting best practices, operational excellence, automation, infrastructure-as-code, and scalable support models.
- Drive adoption of APIs, Python, Terraform, and other automation technologies to improve reliability, consistency, operational efficiency, and service scalability.
- Define monitoring standards, service-level objectives (SLOs), capacity planning, resiliency requirements, failover strategies, and business continuity designs for SASE services.
- Establish architectural and operational standards that reduce risk, improve user experience, and support long-term platform growth.
Cross-Functional Collaboration & Vendor Leadership
- Collaborate with business and IT stakeholders to translate business requirements into scalable security architectures and communicate design decisions, trade-offs, and recommendations to both technical and non-technical audiences.
- Manage strategic relationships with Netskope and other technology partners, including roadmap discussions, escalations, proof-of-concept evaluations, and technical reviews.
- Influence enterprise security strategy by guiding technology direction and supporting the adoption of modern Zero Trust and secure access capabilities across the organization.
Qualifications:
We're looking for a highly skilled security and network architect with deep expertise in modern secure access technologies and a proven ability to lead enterprise-scale security initiatives.
Basic Qualifications
- Bachelor's degree in Engineering, Computer Science, Information Technology, or an equivalent combination of certifications and experience.
- 8+ years of hands-on network and/or network security experience, including 3+ years architecting and deploying SASE/SSE, cloud proxy, or Zero Trust solutions in a large enterprise environment.
- Deep expertise in Zero Trust architecture, Secure Web Gateway (SWG), Cloud Access Security Broker (CASB), and Zero Trust Network Access (ZTNA) design, including TLS inspection, Data Loss Prevention (DLP), and traffic steering strategies.
- Strong understanding of TCP/IP, DNS, TLS/PKI, identity federation technologies (SAML, OIDC, SCIM), and cloud networking and security concepts.
- Proven ability to lead complex cross-functional initiatives and communicate architecture, strategy, and technical recommendations to both executives and engineering teams.
Preferred Certifications
- Netskope certifications such as NCSE, NCSP, or NCSA.
- Security and architecture certifications such as CISSP, CCSP, CCNP Security, SABSA, TOGAF, or similar credentials.
Required Technical Experience
- Hands-on architecture and administration experience with Netskope (SWG, CASB, and Private Access/ZTNA) or an equivalent enterprise Security Service Edge (SSE) platform such as Zscaler or Prisma Access.
- Experience designing and implementing identity and conditional access solutions using platforms such as Entra ID and Okta.
- Strong understanding of enterprise networking fundamentals, including LAN/WAN, routing, and DNS.
Desired Technical Skills
Experience with several of the technologies below is highly desirable:
- Data Loss Prevention (DLP) program development, policy design, and tuning.
- SaaS and IaaS security posture management across Microsoft 365, Google Workspace, Salesforce, AWS, Azure, and GCP environments.
- Endpoint management, endpoint security, and EDR integrations, including Intune, Jamf, CrowdStrike, and Microsoft Defender.
- SIEM/SOAR integrations and security incident response processes.
- Palo Alto Networks and Fortinet firewall technologies.
- Automation and Infrastructure-as-Code using Python, PowerShell, Terraform, and REST APIs.
- ITIL-based incident, problem, and change management practices, including ServiceNow.
- Enterprise architecture frameworks, technical standards development, architecture governance, and technical documentation.
Additional Requirements
- Willingness to work flexible hours, including occasional weekend and holiday support for critical projects, deployments, or incident response activities.
- Ability to travel occasionally to support global deployments, architecture reviews, and stakeholder engagement.
Keysight is an Equal Opportunity Employer
Keysight Technologies Inc. is an equal opportunity employer. Qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, protected veteran status, disability or any other protected categories under all applicable laws.
Pay Transparency
The level of role will be based on applicable experience, education, and skills. Most offers will be between the minimum and the midpoint of the Salary Range listed below.
Colorado Pay Range: Minimum $110,600 – Maximum $184,330
Note: For other locations, pay ranges will vary by region
US Employees may be eligible for the following benefits:
- Medical, dental and vision
- Health Savings Account
- Health Care and Dependent Care Flexible Spending Accounts
- Life, Accident, Disability insurance
- Business Travel Accident and Business Travel Health
- 401(k) Plan
- Flexible Time Off, Paid Holidays
- Paid Family Leave
- Discounts, Perks
- Tuition Reimbursement
- Adoption Assistance
- Incentive Programs
- ESPP (Employee Stock Purchase Plan)
Bachelor's degree in Engineering, Computer Science, IT or equivalent; 8+ years network/security experience including 3+ years architecting SASE/SSE or Zero Trust solutions; deep expertise in SWG, CASB, ZTNA, TCP/IP, DNS, TLS/PKI, identity federation; ability to travel occasionally.
Key Responsibilities
- defining SASE architecture
- leading technical decisions
- mentoring engineers
Skills & Tools
Netskope, Zscaler, Prisma Access, Entra ID, Okta, Python, PowerShell, Terraform, REST APIs, Microsoft 365, Google Workspace, Salesforce, AWS, Azure, GCP, Intune, Jamf, CrowdStrike, Microsoft Defender, Palo Alto Networks, Fortinet, ServiceNow
Job Details
- Category: Information Technology
- Seniority: Senior Level
- Commitment: Full Time
- Workplace: Remote — Colorado Springs, Colorado, United States
- Salary: USD 110,600 – 184,330 / year
- Languages: English
Benefits
- Generous paid time off
- Tuition reimbursement
- Retirement plan
- Generous parental leave
About Keysight Technologies, Inc.
A technology company delivering breakthroughs in electronic design, simulation, prototyping, test, manufacturing, and optimization. — Industry: Information Technology