Senior Netskope Engineer

Help AG; Abu Dhabi; On-site; AED 300,000 - 600,000; Full time

Benefits offered by this job

Health insurance

Career progression

Wellness campaigns

Learning opportunities

Annual flights

Inclusive environment

Flexible work

Open door policy

Job summary

Help AG is seeking a Senior Netskope Engineer to design, implement, and optimize enterprise Netskope deployments securing SaaS, IaaS, web, and private applications. You will work with security, IT, and SOC teams to troubleshoot and tune policies for minimal false positives.

Responsibilities include configuring CASB in API/Inline modes, enforcing SaaS security, and integrating with SIEMs like Splunk or Microsoft Sentinel. Strong collaboration and cloud security fundamentals are essential.

Qualifications

• Bachelors or equivalent in CS, InfoSec, or related field.
• 7+ years of hands-on Netskope CASB/SASE experience.
• Strong expertise in CASB, SWG, ZTNA/Private Access, and DLP.

Responsibilities

• Design, implement, and optimize enterprise Netskope deployments.
• Configure and enforce SaaS security policies (MS 365, Salesforce, Google Workspace).
• Integrate with identity providers (Okta, Azure AD) using SAML/OAuth/SCIM.
• Collaborate with security, IT, and SOC teams; troubleshoot issues.

Skills

Netskope CASB

SASE

Zero Trust

DLP

Cloud security

Okta

Azure AD

SIEM integration

PowerShell

Python

Education

Bachelor's degree in Computer Science or related

Tools

Splunk

Microsoft Sentinel

Netskope Platform

Okta

Azure AD

Job description

Help AG is looking for a highly skilled Senior Netskope Engineer who will have strong hands‑on expertise in CASB, SASE/SSE, DLP, and Zero Trust architectures using the Netskope platform. The Senior Netskope Engineer will be responsible for designing, implementing, optimizing, and supporting enterprise‑scale Netskope deployments to secure SaaS, IaaS, web, and private application traffic. This role requires deep technical expertise, proactive troubleshooting skills, and the ability to work closely with internal security, IT, and SOC teams.

Responsibilities

• Deploy and manage Netskope CASB solutions in both API and Inline modes.
• Configure and enforce SaaS security policies (e.g., Microsoft 365, Salesforce, Google Workspace).
• Conduct cloud application discovery and risk assessments using Cloud Confidence Index (CCI).
• Manage tenant configurations and optimize policy enforcement.
• Monitor cloud usage and mitigate Shadow IT risks.
• Design and implement Netskope SASE architecture.
• Configure endpoint client steering (Client, PAC, GRE/IPSec).
• Support and integrate SD‑WAN solutions for branch connectivity.
• Optimize traffic steering and policy performance.
• Develop and maintain structured and unstructured DLP policies.
• Implement Exact Data Match (EDM), fingerprinting, OCR, and classification policies.
• Tune policies to minimize false positives and operational impact.
• Ensure compliance with organizational and regulatory data protection requirements.
• Configure and manage Netskope Private Access (NPA).
• Integrate with Identity Providers (Okta, Azure AD) using SAML, OAuth, and SCIM.
• Implement role‑based and least‑privilege access controls.
• Troubleshoot authentication, access, and connectivity issues.
• Integrate Netskope with SIEM platforms (e.g., Splunk, Microsoft Sentinel).
• Configure log forwarding, reporting, dashboards, and alerts.
• Leverage APIs for automation and orchestration.
• Support incident response, investigations, and threat analysis.
• Perform root cause analysis for policy conflicts and performance issues.
• Work with vendor TAC for escalations and complex troubleshooting.

Qualifications & Skills

• Bachelor's degree in Computer Science, Information Security, Cybersecurity, or a related field (or equivalent work experience).
• Minimum 7+ years of hands‑on experience with Netskope CASB/SASE platform.
• Strong expertise in:
• CASB (API & Inline modes)
• Secure Web Gateway (SWG)
• ZTNA / Private Access
• Data Loss Prevention (DLP)
• SSL inspection and certificate management
• Good understanding of cloud security fundamentals (AWS, Azure, GCP).
• Experience integrating with Identity Providers (Okta, Azure AD).
• Strong networking fundamentals (TCP/IP, DNS, Proxy, VPN, routing concepts).
• Solid understanding of Zero Trust Architecture.
• Familiarity with scripting (PowerShell, Python) is an advantage.
• Strong analytical, troubleshooting, and stakeholder communication skills.
• Preferred Certifications
• Netskope Certified Cloud Security Administrator (NCSA)
• Netskope Certified Cloud Security Architect (NCSO)
• CISSP / CCSP
• Azure / AWS Security Certifications

Benefits

• Health insurance with one of the leading global providers for medical insurance.
• Career progression and growth through challenging projects and work.
• Employee engagement and wellness campaigns activities throughout the year.
• Excellent learning and development opportunities.
• Annual flights tickets.
• Inclusive and diverse working environment.
• Flexible/Hybrid working environment.
• Open door policy.

About Us

Help AG, the cybersecurity arm of Etisalat, is the Middle East's trusted cybersecurity partner, enabling governments, enterprises and critical industries to innovate with confidence. Combining strategic consulting, advanced managed security services and deep technology expertise, Help AG helps organisations strengthen cyber resilience, secure AI adoption and build trusted sovereign digital environments. With regional expertise and a customer‑first approach, Help AG delivers end-to‑end cybersecurity capabilities designed to protect critical operations, manage evolving risks and support secure digital transformation. Through continuous innovation, trusted partnerships and measurable outcomes, Help AG enables organisations to remain resilient, prepared and confident in a complex digital world.