Senior Secure Connectivity Engineer

join our cheerful team!

At KBC Group, we are transforming the way employees, partners, and systems securely access applications and the internet. As a Senior Secure Connectivity Engineer, you will play a key role in operating, improving, and evolving our secure access ecosystem.

You will work with technologies such as Zscaler Internet Access (ZIA), Zscaler Private Access (ZPA), Skyhigh Secure Web Gateway, and traditional remote access solutions including Ivanti VPN. With these technologies, you will help secure internet access, application access and remote connectivity for one of Europe's leading financial institutions, supporting tens of thousands of users across multiple countries and critical business services.

A major focus area is supporting KBC's transition towards a modern Zero Trust architecture, while ensuring the continuity and reliability of existing security services. You will contribute to strategic migration initiatives, including the migration from legacy proxy platforms towards Zscaler and the gradual adoption of Zero Trust Network Access (ZTNA) as an alternative to traditional remote access solutions.

You will collaborate closely with architects, security specialists, product owners, infrastructure teams, and business stakeholders to deliver secure, scalable, and future-proof access solutions. In addition, you'll help drive automation, operational excellence, and continuous improvement across the platform landscape by building and using Infrastructure as Code (IaC).

What you can expect working with us:

• You can make sure your future career is steady within our company
• Life-long learning and plenty of opportunities to challenge yourself
• Competitive salary as well as other benefits such as:
  
• 10% customizable cafeteria,
• annual performance-based reward,
• company phone with mobile internet, that you can use for private purposes as well
• employee discount at the bank
• Medicare

• Your English language skills won’t be worn out as you can use it on a daily basis
• Flexible schedule as we don’t use ‘Clock in Clock out’ system
• As our focus is on teamwork we consider it important to hang out in the "open office" together, but you have the option to spend 3 days per week working from home
• We value your insight and are always open to suggestions
• International environment with a cheerful work atmosphere
• Green office in Millennium Park, equipped with:
  
• bicycle storage and showers
• restaurant with panoramic views over the Danube and the National Theatre
• free coffee in our community area where we hang out and play darts, and many dining options in the surrounding area

What your job will be:

• Design, implement, maintain and evolve secure connectivity platforms including Zscaler ZIA, ZPA, Skyhigh SWG, Ivanti VPN services.
• You will have significant ownership over strategic platforms and help shape the future of secure connectivity within KBC.
• You will combine operational ownership with engineering work, platform evolution, automation initiatives, and strategic migration programs.
• You will play a key role in strategic migration initiatives, including the migration from legacy proxy platforms towards Zscaler and the adoption of Zero Trust Network Access (ZTNA).
• Translate business and security requirements into robust and scalable technical solutions.
• Troubleshoot complex connectivity, authentication, policy, and application access issues.
• Work closely with application teams to enable secure access to internal and external services.
• Contribute to platform automation, monitoring, and operational maturity through Infrastructure as Code, scripting, and process improvements.
• Collaborate with vendors regarding architecture, support escalations, roadmap alignment, and implementation of new capabilities.
• Ensure security, compliance, availability, and performance of the platforms under your responsibility.
• Document solutions, operational procedures, and architectural decisions.
• Share knowledge and coach colleagues within the team.

What we expect from You:

• Bachelor's or Master's degree in IT, cybersecurity, or a related field, or equivalent experience.
• Strong experience with secure access technologies, secure web gateways, proxy solutions, or remote access platforms.
• Experience with Zscaler ZIA and/or ZPA is highly valued.
• Experience with Skyhigh Secure Web Gateway, VPN solutions, or similar secure access technologies is a plus.
• Good understanding of networking concepts including DNS, routing, firewalls, proxies, TLS/SSL, authentication, and access control.
• Familiarity with Zero Trust principles, identity-driven security, and modern access architectures.
• Knowledge of Infrastructure as Code, automation, and scripting (e.g., Terraform, Ansible, Python, PowerShell) is a plus.
• Strong analytical and troubleshooting skills.
• Agile mindset and experience working in multidisciplinary teams.
• Strong communication skills in English (spoken and written).

What you can expect during the recruitment process:

• After sending your CV in English, expect a three-round interview process, one online with our local recruiter, one online in English with the Belgian team leader, and the final round is in person at our office in Budapest (in Hungarian) to get to know each other better.
• An efficient selection process is important for both of us, so we try to make it as fast as possible, and even if you are not selected we will give you a detailed feedback.