Senior Netskope SSE Engineer / Senior SASE Engineer

Info Resume Edge; Brasília; Presencial; BRL 167 400 - 223 200; Tempo integral

Resumo da oferta

A cybersecurity firm in Brasília is seeking a Security Engineer to lead the design and optimization of Security Service Edge (SSE) and Secure Access Service Edge (SASE) platforms, focusing on Netskope. Responsibilities include architecting Netskope solutions, developing Zero Trust access patterns, and integrating systems with identity providers. The ideal candidate has extensive experience in security engineering with a strong background in SASE architectures and Netskope technologies. This role requires collaboration with cross-functional teams to enhance secure access for a hybrid workforce.

Qualificações

• 5–8+ years in security engineering, network engineering, or cloud security.
• 3+ years hands-on experience with Netskope SSE (CASB, SWG, ZTNA, DLP, DSPM).
• Strong understanding of SASE architectures and Zero Trust principles.

Responsabilidades

• Architect and deploy Netskope SSE solutions.
• Lead enterprise-wide SASE design efforts.
• Develop and maintain Zero Trust access patterns.

Conhecimentos

Security engineering

Network engineering

Cloud security

Hands-on experience with Netskope

Zero Trust principles

Strong communication skills

Formação académica

Bachelor's Degree

Ferramentas

Netskope

Azure AD

Okta

SIEM tools (Splunk, Sentinel, QRadar)

Python

PowerShell

Terraform

Descrição da oferta de emprego

This position leads the design, implementation, and optimization of the organization's Security Service Edge (SSE) and Secure Access Service Edge (SASE) platforms, with a primary focus on Netskope. The engineer drives Zero Trust adoption, modernizes secure access for a hybrid workforce, and partners with security, networking, and cloud teams to deliver a unified security architecture.

Job Responsibilities

• Architect and deploy Netskope SSE solutions including CASB, SWG, ZTNA, DLP, DSPM, Cloud Firewall, and Private Access.
• Lead enterprise-wide SASE design efforts integrating identity, networking, and cloud security controls.
• Develop and maintain Zero Trust access patterns for users, devices, and applications.
• Engineer secure access pathways and support migration from legacy VPN to ZTNA.
• Optimize traffic steering, client deployment, and policy routing across global environments.
• Build and tune DLP, threat protection, and access control policies.
• Integrate Netskope with identity providers (Azure AD, Okta), SIEM platforms, and endpoint security tools.
• Troubleshoot complex SSE/SASE issues and drive continuous performance improvements.
• Create operational runbooks, automation scripts, and monitoring dashboards.
• Serve as the subject‑matter expert for SSE/SASE and mentor junior engineers.

Job requirements

• 5–8+ years in security engineering, network engineering, or cloud security.
• 3+ years hands‑on experience with Netskope SSE (CASB, SWG, ZTNA, DLP, DSPM, Client Steering, Private Access).
• Strong understanding of SASE architectures, Zero Trust principles, and identity‑centric security.
• Proficiency with identity platforms (Azure AD, Okta), network protocols (DNS, TLS, HTTP/HTTPS, IPsec, GRE), and cloud platforms (AWS, Azure, GCP).
• Experience with SIEM tools such as Splunk, Sentinel, or QRadar.
• Familiarity with automation using Python, PowerShell, or Terraform.
• Strong communication skills and the ability to lead cross‑functional technical initiatives.

Preferred Qualifications

• Netskope certifications (NCSA, NCI, NPA).
• Experience with SD‑WAN technologies (Netskope, VeloCloud, & Fortinet).
• Background in DLP program development or data classification.
• Knowledge of Zero Trust frameworks such as NIST 800‑207.
• Experience supporting large, distributed enterprise environments.

Education

• Bachelor's Degree or at least 12 years' experience in related field