Senior Cloud Security Engineer — SSE/SASE, ZTNA & Netskope

Lancesoft Malaysia; Labuan; On-site; MYR 120,000 - 180,000; Full time

Job summary

Lancesoft Malaysia is seeking an experienced Professional Services Engineer specializing in cloud and network security. You will design, implement, migrate, and optimize cloud security solutions for enterprise customers with a focus on SSE/SASE, Zero Trust, SWG, and ZTNA.

Responsibilities include designing and configuring Netskope and/or Zscaler, migrating from legacy proxies and VPNs to cloud security platforms, and delivering production-ready designs.

Qualifications

• 5–8 years of experience in network security, cloud security, or professional services engineering.
• Hands-on implementation experience with Netskope or Zscaler.
• Strong understanding of SSE/SASE, Zero Trust, SWG, and ZTNA.
• Fluency in Mandarin and English for customer-facing discussions.

Responsibilities

• Design, implement, configure, and optimise Netskope and/or Zscaler for enterprise customers.
• Deliver SSE/SASE, Zero Trust, SWG, and ZTNA implementations.
• Manage migrations from legacy proxy, VPN, and network security solutions to cloud platforms.
• Conduct customer requirement-gathering sessions, workshops, and solution-design discussions.
• Configure security policies, traffic steering, authentication, user access controls, and app access.
• Integrate security platforms with SSO, IdP, SIEM, MDM, and firewalls.
• Troubleshoot network security issues (TCP/IP, DNS, routing, VPNs, SSL/TLS).
• Prepare technical designs, Runbooks, and knowledge-transfer materials.
• Provide post-implementation support and optimisation to customers.

Skills

Netskope

Zscaler

SSE/SASE

Zero Trust

SWG

ZTNA

SSO

IdP

SIEM

DLP

VPN

TCP/IP

DNS

Troubleshooting

Mandarin & English

Job description

Lancesoft Malaysia is seeking an experienced Professional Services Engineer specializing in cloud and network security. You will design, implement, migrate, and optimize cloud security solutions for enterprise customers with a focus on SSE/SASE, Zero Trust, SWG, and ZTNA.

Responsibilities include designing and configuring Netskope and/or Zscaler, migrating from legacy proxies and VPNs to cloud security platforms, and delivering production-ready designs.