Note: The job is a remote job and is open to candidates in USA. Tenarai is seeking a highly skilled Senior SASE Network Validation Engineer to lead interoperability and coexistence testing between Microsoft Global Secure Access and leading SASE/SSE platforms. The role involves validating complex traffic flows, security policies, and application access scenarios while troubleshooting network protocols and collaborating with engineering teams.
Responsibilities
- Design and execute coexistence testing between Microsoft Global Secure Access (GSA) and third-party SASE/SSE vendors
- Execute and maintain 100+ functional, networking, security, and interoperability test cases across multiple SASE products
- Validate coexistence scenarios across:
- Windows 10
- Windows 11
- MacOS (Intel & Apple Silicon)
- Configure and troubleshoot SASE clients, VPN clients, Secure Web Gateway (SWG), ZTNA, CASB, Firewall-as-a-Service (FWaaS), and DNS security policies
- Perform packet capture analysis using Wireshark and other network diagnostic tools
- Validate traffic steering, split tunneling, proxy chaining, certificate handling, authentication flows, DNS resolution, and application access
- Configure Azure networking components for testing environments
- Analyze network traffic to identify routing, proxy, TLS, authentication, or policy enforcement issues
- Work with engineering teams to reproduce, isolate, and document product defects
- Prepare detailed test reports, defect documentation, root cause analysis, and validation reports
- Collaborate with Microsoft and ISV engineering teams during issue investigation
Skills
- 10+ Years of experience
- Deep expertise in enterprise networking
- Deep expertise in cloud networking
- Deep expertise in identity and security
- Hands-on experience with at least one commercial SASE platform
- Comfortable troubleshooting network protocols at packet level
- Configuring cloud environments
- Design and execute coexistence testing between Microsoft Global Secure Access (GSA) and third-party SASE/SSE vendors
- Execute and maintain 100+ functional, networking, security, and interoperability test cases across multiple SASE products
- Validate coexistence scenarios across Windows 10, Windows 11, macOS (Intel & Apple Silicon)
- Configure and troubleshoot SASE clients, VPN clients, Secure Web Gateway (SWG), ZTNA, CASB, Firewall-as-a-Service (FWaaS), and DNS security policies
- Perform packet capture analysis using Wireshark and other network diagnostic tools
- Validate traffic steering, split tunneling, proxy chaining, certificate handling, authentication flows, DNS resolution, and application access
- Configure Azure networking components for testing environments
- Analyze network traffic to identify routing, proxy, TLS, authentication, or policy enforcement issues
- Work with engineering teams to reproduce, isolate, and document product defects
- Prepare detailed test reports, defect documentation, root cause analysis, and validation reports
- Collaborate with Microsoft and ISV engineering teams during issue investigation
- Enterprise Networking
- TCP/IP
- Routing and Switching
- DNS
- DHCP
- HTTP/HTTPS
- TLS/SSL
- VPN (IPSec/SSL)
- NAT
- Proxy technologies
- PKI and Certificates
- Authentication protocols
- Network troubleshooting
- Microsoft Azure
- Azure Virtual Networks
- Network Security Groups
- Azure Firewall
- Azure VPN Gateway
- Azure Load Balancer
- Azure Application Gateway
- Azure Virtual Machines
- Azure Monitor
- Azure Networking concepts
- Microsoft Entra ID (Azure AD)
- SAML
- OAuth 2.0
- OpenID Connect
- Kerberos
- NTLM
- Conditional Access
- Multi-Factor Authentication (MFA)
- Hands-on experience with at least one of the following: Netskope, Zscaler Internet Access (ZIA), Zscaler Private Access (ZPA), Palo Alto Prisma Access, Cisco Secure Access, Check Point Harmony SASE, Cloudflare, Skyhigh Security, iBoss
- Wireshark
- Microsoft Network Monitor
- Postman
- PowerShell
- Azure Portal
- Azure CLI
- Git
- Azure DevOps
- Microsoft Graph API
Company Overview