This position leads the design, implementation, and optimization of the organization's Security Service Edge (SSE) and Secure Access Service Edge (SASE) platforms, with a primary focus on Netskope. The engineer drives Zero Trust adoption, modernizes secure access for a hybrid workforce, and partners with security, networking, and cloud teams to deliver a unified security architecture.
Job Responsibilities
- Architect and deploy Netskope SSE solutions including CASB, SWG, ZTNA, DLP, DSPM, Cloud Firewall, and Private Access.
- Lead enterprise-wide SASE design efforts integrating identity, networking, and cloud security controls.
- Develop and maintain Zero Trust access patterns for users, devices, and applications.
- Engineer secure access pathways and support migration from legacy VPN to ZTNA.
- Optimize traffic steering, client deployment, and policy routing across global environments.
- Build and tune DLP, threat protection, and access control policies.
- Integrate Netskope with identity providers (Azure AD, Okta), SIEM platforms, and endpoint security tools.
- Troubleshoot complex SSE/SASE issues and drive continuous performance improvements.
- Create operational runbooks, automation scripts, and monitoring dashboards.
- Serve as the subject‑matter expert for SSE/SASE and mentor junior engineers.
Job requirements
- 5–8+ years in security engineering, network engineering, or cloud security.
- 3+ years hands‑on experience with Netskope SSE (CASB, SWG, ZTNA, DLP, DSPM, Client Steering, Private Access).
- Strong understanding of SASE architectures, Zero Trust principles, and identity‑centric security.
- Proficiency with identity platforms (Azure AD, Okta), network protocols (DNS, TLS, HTTP/HTTPS, IPsec, GRE), and cloud platforms (AWS, Azure, GCP).
- Experience with SIEM tools such as Splunk, Sentinel, or QRadar.
- Familiarity with automation using Python, PowerShell, or Terraform.
- Strong communication skills and the ability to lead cross‑functional technical initiatives.
Preferred Qualifications
- Netskope certifications (NCSA, NCI, NPA).
- Experience with SD‑WAN technologies (Netskope, VeloCloud, & Fortinet).
- Background in DLP program development or data classification.
- Knowledge of Zero Trust frameworks such as NIST 800‑207.
- Experience supporting large, distributed enterprise environments.
Education
- Bachelor's Degree or at least 12 years' experience in related field
Originally posted on