Join EY and embark on a career tailored to your unique strengths. Leverage global scale, support, an inclusive culture, and cutting-edge technology to achieve your full potential. Your distinct perspective is invaluable in helping EY continually improve. Contribute to building an exceptional personal experience and fostering a better working world for everyone.

This role focuses on securing outbound web traffic, managing URL filtering, and maintaining SSL/TLS inspection policies, operating under senior guidance across the full project lifecycle. A strong understanding of web protocols, proxy mechanics, and web security principles is essential.

Assist in reviewing and evaluating existing web proxy policies, URL filtering rulesets, and access control lists against enterprise security standards. Analyze proxy logs to identify inefficiencies or risky configurations. Optimize PAC file configurations for various user types.

Support the setup and deployment of on-premise proxy appliances or cloud-based Secure Web Gateways. Implement and update URL category blocklists, custom exceptions, and tenant restrictions. Configure SSL/TLS decryption policies and manage certificate deployments.

Participate in User Acceptance Testing for new proxy rules, validating application access and troubleshooting connectivity issues. Document configuration changes, bypass lists, and network diagrams. Draft initial troubleshooting guides for the IT Helpdesk.

Act as a Tier 2 escalation point for web access issues, including blocked websites and PAC file routing errors. Monitor web proxy performance and proactively address any degradation. Process service requests for URL recategorization and policy exceptions within SLAs. Ensure proxy logs are fed into the enterprise SIEM for continuous security monitoring.

A minimum of 1–3 years of experience in network security, IT support, or system administration, with a focus on web traffic routing. Proficiency in core technologies such as Secure Web Gateways (SWG) and forward proxy solutions like Zscaler ZIA, Symantec/Blue Coat, McAfee/Trellix, Cisco Umbrella, or Squid is required.

A solid grasp of HTTP/HTTPS, DNS, TCP/IP, and the fundamentals of SSL/TLS handshakes and Public Key Infrastructure (PKI) is essential. Basic understanding of JavaScript for Proxy Auto-Configuration (PAC) file syntax and routing logic is also necessary.

Foundational security or networking certifications such as CompTIA Security+, Network+, CCNA, or vendor-specific associate credentials like Zscaler ZCSA are beneficial. Strong customer service skills for end-user issues, a meticulous approach to rule management, and effective technical documentation abilities are key soft skills for this position.