Senior Secure Connectivity Engineer

What does this vacancy entail?

At KBC Groep, we are transforming the way employees, partners, and systems securely access applications and the internet. As a Senior Secure Connectivity Engineer, you will play a key role in managing, improving, and further expanding our secure access ecosystem.

You will work with technologies such as Zscaler Internet Access (ZIA), Zscaler Private Access (ZPA), Skyhigh Secure Web Gateway, and traditional remote access solutions, including Ivanti VPN. With these technologies, you will help secure internet access, application access, and remote connectivity for one of Europe’s leading financial institutions. In doing so, you will support tens of thousands of users across different countries and critical business services.

A major area of focus is supporting KBC’s transition to a modern Zero Trust architecture, while simultaneously ensuring the continuity and reliability of existing security services. You will contribute to strategic migration initiatives, including the migration of legacy proxy platforms to Zscaler and the gradual introduction of Zero Trust Network Access (ZTNA) as an alternative to traditional remote access solutions.

You will work closely with architects, security specialists, product owners, infrastructure teams, and business stakeholders to realize secure, scalable, and future-proof access solutions. Additionally, you will help drive automation, operational excellence, and continuous improvement within the platform landscape by utilizing Infrastructure as Code (IaC).

What do we expect from you?

• You design, implement, manage, and optimize secure connectivity platforms such as Zscaler ZIA, ZPA, Skyhigh SWG, and Ivanti VPN.
• You take on a significant ownership role for strategic platforms and help shape the future of secure connectivity within KBC.
• You combine operational responsibility with engineering work, platform evolution, automation initiatives, and strategic migration programs.
• You play an active role in strategic migrations, such as the transition from legacy proxy platforms to Zscaler and the implementation of Zero Trust Network Access (ZTNA).
• You translate business and security requirements into robust and scalable technical solutions.
• You analyze and resolve complex issues surrounding connectivity, authentication, policies, and application access.
• You work closely with application teams to enable secure access to internal and external services.
• You contribute to platform automation, monitoring, and operational maturity via Infrastructure as Code, scripting, and process improvements.
• You collaborate with vendors regarding architecture, support escalations, roadmap alignment, and the implementation of new functionalities.
• You safeguard the security, compliance, availability, and performance of the platforms for which you are responsible.
• You document solutions, operational procedures, and architectural decisions.
• You share knowledge and coach colleagues within the team.

Your assets?

• You hold a bachelor's or master's degree in IT, cybersecurity, or a related field, or have equivalent experience.
• You have strong expertise in secure access technologies, secure web gateways, proxy solutions, or remote access platforms.
• Experience with Zscaler ZIA and/or ZPA is a strong asset.
• Experience with Skyhigh Secure Web Gateway, VPN solutions, or similar secure access technologies is a plus.
• You have good knowledge of network concepts such as DNS, routing, firewalls, proxies, TLS/SSL, authentication, and access management.
• You are familiar with Zero Trust principles, identity-driven security, and modern access architectures.
• Knowledge of Infrastructure as Code, automation, and scripting (e.g., Terraform, Ansible, Python, or PowerShell) is a plus.
• You possess strong analytical skills and a structured problem-solving approach.
• You have an agile mindset and experience working in multidisciplinary teams.
• You communicate fluently in English, both orally and in writing.