> Markdown version of [/jobs/ext/4648511-proxy-engineer-network-security-default-deny-for-servers-and-containers-no-tp-or-employer](https://www.wearedevelopers.com/jobs/ext/4648511-proxy-engineer-network-security-default-deny-for-servers-and-containers-no-tp-or-employer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Proxy Engineer (Network Security) Default Deny for Servers and Containers - (No TP or Employer)

- **Company:** Calance Consulting Corporation
- **Location:** Jersey City, NJ, United States
- **Experience:** Expert
- **Contract:** Temporary contract
- **Skills:** Application Layers, Software as a Service, Information Leak Prevention, Infrastructure as a Service (IaaS), Network Security, Transport Layer, Routing, Platform as a Service (PAAS), Symantec, Firewalls (Computer Science), Kubernetes, Network Server, Server Operating Systems & Platforms
- **Published:** November 9, 2026
- **Apply:** https://www.thejobnetwork.com/job/cd2fe8c0-3183-4b2a-b4dc-75c07d4cadb5/proxy-engineer-network-security-default-deny-for-servers-and-containers-no-tp-or-employer

## About the Role

Must have: hands-on enterprise proxy experience (Blue Coat/Symantec, Skyhigh or similar); strong routing and Layer 4-7 knowledge; ability to learn how proxy policies are built (Skyhigh experience is not required)

\n

Preferred: Layer 7 experience; container or Kubernetes networking exposure; AlgoSec and SaaS/IaaS/PaaS traffic patterns; financial services background, n

 * Hands-on enterprise proxy experience (Blue Coat/Symantec, Skyhigh, or similar platforms)

\n

 * Strong routing knowledge and solid understanding of Layer 4 through Layer 7 traffic behavior

\n

 * Ability to learn how proxy policies are constructed and apply that knowledge to new designs (Skyhigh experience is not required)

\n

 * Experience working in a change-controlled enterprise environment

\n

 * Clear written communication and the ability to work with teams across time zones, n

 * Layer 7 experience, such as application-aware inspection and policy

\n

 * Exposure to container or Kubernetes networking

\n

 * Firewall rule management experience (AlgoSec) and familiarity with SaaS, IaaS, and PaaS traffic patterns

\n

 * Financial services background

\n

\n

Proxy roles: Which proxy platform and version? Have they written or tuned SSL/TLS inspection (break-and-inspect) policies? Any default-deny or egress control work for servers? Any container or Kubernetes exposure?

\n

All roles: Have they worked under formal change control in a bank or other regulated environment?

\n

\n

Other proxy platforms are acceptable. Strong enterprise proxy engineers on Zscaler or comparable platforms (Forcepoint, Palo Alto and similar) are in scope, not only Blue Coat/Symantec or Skyhigh.

\n

A strong firewall or security engineer with deep Layer 4-7 knowledge may be considered for one of the seats.

\n

The manager expects anyone who works with a proxy to be very familiar with TLS break-and-inspect, so hands-on SSL/TLS inspection experience is still a must for any candidate you submit.

## Description

The customer is moving its server environments (development, pre-production, and production) to a default-deny internet policy and extending the same controls to containers. Default deny is a broad first step, so the work goes further: using server-side break-and-inspect proxying to gain full-path visibility and build more refined, path-aware policies. This effort is focused on visibility and policy precision rather than data loss prevention. You will work alongside the customer's proxy engineers in the UK and US, and partner with network, firewall, and application teams.