SASE & Network Architect for a Lugano-based financial company

DB&L Services SA; Lugano; Hybrid; CHF 125’000 - 150’000; Vollzeit

Zusammenfassung

A technology services provider in Lugano is seeking a Senior Cybersecurity Engineer with expertise in Secure Access Service Edge (SASE) architectures. The role involves designing end-to-end SASE solutions, developing architecture blueprints, and leading migrations to Zero Trust-aligned infrastructures. Candidates should possess deep knowledge of SD-WAN, routing, and cloud security platforms. This position offers a permanent Swiss contract and the option for SmartWorking. A valid work permit for Switzerland is required.

Leistungen

Permanent Swiss contract

SmartWorking options

Qualifikationen

• Proven experience in SASE architectures and cloud-native security.
• Hands-on experience with network architecture design and implementation.
• Valid Swiss work permit or European nationality required.

Aufgaben

• Design and implement SASE architectures for enterprise environments.
• Develop Network & Security Architecture Blueprints aligned with SASE.
• Lead evaluation and implementation of SD-WAN and other security solutions.
• Collaborate with cross-functional teams for successful project delivery.

Kenntnisse

SASE architectures

Network & Security Architecture Blueprints

SD-WAN solutions

Zero Trust frameworks

Cloud security (AWS, Azure)

Routing and switching technologies

Tools

Zscaler

Cisco

Palo Alto Prisma Access

Netskope

Jobbeschreibung

To strengthen our Cybersecurity and Network Infrastructure team, we are seeking a senior professional with proven experience in Secure Access Service Edge (SASE) architectures. The ideal candidate has in-depth knowledge of SASE (Zero Trust Network Access, Cloud Security, SD-WAN) solutions, leading market platforms (Zscaler, Palo Alto Prisma Access, Netskope, Cisco, etc.), and advanced networking technologies.

Skilled in defining Network & Security Architecture Blueprints and in evaluating and selecting technology platforms (SD-WAN, CASB, SWG, ZTNA, FWaaS) to deliver resilient, Zero-Trust-aligned infrastructures that support critical business operations.

Demonstrated experience in leading migrations from traditional perimeter-based designs to SASE-driven models.

If you're passionate about cloud-native security and want to contribute to strategic digital transformation projects, this is your opportunity!

Key Responsibilities

• Design and implement end-to-end SASE architectures for enterprise environments.
• Develop Network & Security Architecture Blueprints aligned with SASE and Zero Trust principles.
• Lead the evaluation, selection, and implementation of SD-WAN, ZTNA, CASB, SWG, and FWaaS solutions.
• Drive architectural assessments and modernization initiatives for global WAN/LAN ecosystems.
• Collaborate with cross-functional teams to ensure seamless integration and successful delivery.

Technical Requirements

• Deep knowledge of SD-WAN, routing, switching, segmentation, VPN technologies, MPLS, Zero Trust, and edge security platforms.
• Hands-on experience designing and implementing network architectures (routing, switching, segmentation).
• Hands-on experience with at least one major SASE platform (e.g., Zscaler, Cisco).
• Strong understanding of CASB, SWG, DLP, Zero Trust frameworks, and FWaaS technologies.
• Cloud experience with AWS and/or Azure, including services such as Azure Application Gateway and Azure Front Door.
• Familiarity with major vendors (e.g., Zscaler, Cisco, Check Point).

Salary

We offer an interesting salary with a permanent Swiss contract.

Work location

Lugano, partially in SmartWorking from Switzerland.

Pre-requisites

you must be in possession of a work permit valid for Swiss territory or have the nationality of a European nation.