Senior Network Security Engineer

Movate; Manila; On-site; PHP 1,000,000 - 2,400,000; Full time

Job summary

Movate is seeking a Senior Network Security Engineer with deep expertise in SASE architectures to lead end-to-end deployment, implementation, and advanced support of our enterprise cloud security infrastructure. You will guide customer teams through migrations from legacy setups to modern cloud-native security frameworks.

The ideal candidate has 6–10 years in network security, strong SASE knowledge (Prisma SASE preferred) and experience with major vendors.

Qualifications

• 6 to 10 years of progressive experience in network engineering, cybersecurity, or infrastructure deployment.
• Proven hands-on SASE/SSE frameworks experience with Prisma SASE (Prisma Access/SD-WAN) preferred.
• Solid exposure to alternative tier-1 vendors such as Zscaler, Cisco, Netskope, or HPE Aruba.
• Deployment background in customer service engineering, professional services, or enterprise product rollouts.
• Experience in global SaaS, cloud service, or MSSP environments is advantageous.

Responsibilities

• Lead hands-on configuration, rollout, and optimization of enterprise SASE solutions across global environments.
• Troubleshoot routing, tenant isolation, and security policy enforcement during or after deployment.
• Serve as senior technical touchpoint translating security requirements into scalable deployments.
• Design and maintain ZTNA, CASB, and SWG firewall policies.
• Provide technical guidance and escalation support to junior teams.

Skills

SASE expertise

ZTNA & CASB policy design

Customer-focused engineering

Mentorship & escalation support

Cloud migrations & SaaS deployments

Tools

Palo Alto Prisma SASE

Zscaler ZIA/ZPA

Cisco Umbrella/Secure Connect

Netskope

HPE Aruba

Job description

We are seeking a highly skilled Senior Network Security Engineer with a deep specialization in Secure Access Service Edge (SASE) architectures. In this role, you will be responsible for the end-to-end deployment, implementation, and advanced technical support of our enterprise cloud security infrastructure. Acting as a subject matter expert, you will guide our clients or internal teams through complex cloud migrations, moving away from legacy setups into modern, cloud-native security frameworks. The ideal candidate brings a strong background in customer-centric engineering, ideally within a fast-paced Software-as-a-Service (SaaS) or global managed services environment.

Key Responsibilities

• Deployment & Implementation: Lead the hands-on configuration, rollout, and optimization of enterprise SASE solutions across global environments.
• Architecture Support: Troubleshoot complex routing, tenant isolation, and security policy enforcement issues arising during or post-deployment.
• Client Collaboration: Act as a senior technical touchpoint for customer engineering teams, translating business security requirements into scalable technical deployments.
• Policy Management: Design and maintain Zero Trust Network Access (ZTNA), Cloud Access Security Broker (CASB), and Secure Web Gateway (SWG) firewall policies.
• Mentorship: Provide technical guidance and escalation support to junior engineering and operational support tiers.

Required Qualifications & Experience

• Experience: 6 to 10 years of progressive experience in network engineering, cybersecurity, or infrastructure deployment roles.
• SASE Expertise: Proven hands-on experience working extensively with SASE/SSE frameworks. Deep knowledge of Palo Alto Prisma SASE (Prisma Access/SD-WAN) is highly preferred.
• Alternative Core Stacks: Solid implementation experience with alternative tier-1 vendors such as Zscaler (ZIA/ZPA), Cisco (Umbrella/Secure Connect), Netskope, or HPE (Aruba) is highly acceptable.
• Deployment Background: Strong career footprint in a customer service engineering, professional services, or implementation role, specifically focused on onboarding and supporting enterprise product rollouts.
• Industry Preference: Prior experience working within a global SaaS company, cloud service provider, or managed security service provider (MSSP) is a major advantage.

Technical Skills & Certifications (Preferred)

• Palo Alto Networks Certified Network Security Engineer (PCNSE) or Prisma Certified SASE Expert (PCSAE).
• Zscaler Certified Cloud Professional/Expert (ZCCP/ZCCE).
• Strong understanding of core networking protocols (BGP, OSPF, VPNs, SD-WAN architecture).