Ad Hoc LLC · 22 hours ago
Networking/Security Engineer
Ad Hoc LLC is a technology company that empowers organizations to deliver scalable, impactful digital services. The Networking/Security Engineer will serve as an emerging subject matter expert responsible for leading and monitoring security and compliance processes while communicating effectively with stakeholders.
ComputerData ManagementSoftware
Responsibilities
Serve as an emerging subject matter expert, while serving as an individual contributor that exhibits a high level of trust, autonomy and empowerment
Responsible for leading and monitoring the ability to meet scope, schedule and delivery requirements
May support adjacent programs with the business unit
Exhibits strong influential skills to represent the security and compliance practice in planning sessions, advocating for the best technical solution, while communicating tradeoffs
Serve as the primary lead and proactively communicate with stakeholders
Utilizing strong influential skills to drive improvements in security and compliance processes and practices
Qualification
Required
Bachelor's degree in computer science, information assurance, cybersecurity or related field, 9+ years of experience
Relevant years of experience may be substituted for education
Skyhigh SWG (SkyHigh)
3+ years administering Skyhigh Secure Web Gateway in production (>10k users)
Expert in policy hierarchy/inheritance, object & list management, staged rollout (test?pilot?prod), logging export, versioning, rollback
Proxy Engineering
Forward/reverse proxy modes; explicit vs transparent; PAC/WPAD design and distribution
SSL/TLS inspection: cert chains, pinning impacts, ALPN, HTTP/2 behavior, auth flows (Kerberos/NTLM, SAML/OIDC)
Safe bypass strategies (domain/SNI/IP/risk-based) without degrading coverage
Layer 3 & Internet Fundamentals
Routing & addressing (CIDR, MTU/fragmentation/PMTUD, NAT44/66, VRFs), basic BGP/OSPF, DNS recursion/forwarding and failure modes
Ports & Protocols
TCP/UDP behavior, ephemeral ranges, TLS handshake/SNI, and middlebox interactions (no QUIC/HTTP-3 requirement)
PCRE
Writes and reviews complex PCRE (lookarounds, backreferences, atomic groups) with an eye for performance (avoid catastrophic backtracking)
Troubleshooting: Packets + Analytics
tcpdump/Wireshark proficiency (TLS/HTTP analysis, TCP dynamics)
Log correlation at scale (e.g., Splunk/ELK) to isolate issues off-box (client, network, IdP, upstream)
Can distinguish origin responses vs proxy-generated errors and document root cause
Communication & Prioritization
Clear stakeholder comms; triage correctly under load—doesn't treat every noisy issue as P1
Preferred
Automation: Python/PowerShell/Bash for policy linting, regex tests, API-driven config
Identity integration experience with Azure AD (Entra ID), Okta, Ping Identity, and Radiant Logic (directory virtualization/identity brokering)
Device identity/posture hooks (mTLS/MDM) as they affect SWG policy
Benefits
Company-subsidized health, dental, and vision insurance
Flexible PTO
401K with employer match
Paid parental leave after one year of service
Employee Assistance Program