Netskope Architect – Design & Implementation

AMroute LLC; United States; On-site; USD 140,000 - 190,000; Full time

Job summary

AMroute LLC in the United States seeks an experienced Netskope Architect to lead the architecture, design, deployment, and implementation of enterprise-wide Netskope Security Cloud solutions.

The ideal candidate will specialize in Security Service Edge (SSE), Zero Trust architecture, cloud security, and secure internet access, providing hands-on delivery and technical leadership across global environments.

Qualifications

• 7+ years of experience in Cybersecurity, Network Security, Cloud Security, or Security Engineering.
• Minimum 3+ years of hands-on experience implementing and architecting Netskope Security Cloud solutions.
• Strong experience designing and deploying Netskope SWG, CASB, ZTNA, DLP, Private Access, Cloud Firewall.
• Strong understanding of Security Service Edge (SSE) and Zero Trust architecture.
• Experience with Microsoft 365, Azure, AWS, and Google Cloud Platform.
• Strong networking fundamentals including TCP/IP, DNS, HTTP/HTTPS, SSL/TLS, VPN, Proxy technologies, Routing and Network Security.
• Experience integrating identity and authentication technologies including Microsoft Entra ID (Azure AD), Okta, Active Directory, SAML, OAuth, and SCIM.
• Experience with SIEM platforms such as Splunk, Microsoft Sentinel, or QRadar.
• Strong troubleshooting, analytical, and problem-solving skills.
• Excellent communication and stakeholder management skills.

Responsibilities

• Design and architect enterprise-wide Netskope Security Cloud solutions aligned with business and security requirements.
• Lead end-to-end implementation and deployment of Netskope Security Service Edge (SSE) solutions.
• Design, configure, and implement: Secure Web Gateway (SWG); Cloud Access Security Broker (CASB); Zero Trust Network Access (ZTNA); Data Loss Prevention (DLP); Private Access; Cloud Firewall; Remote Browser Isolation (RBI) (preferred).
• Conduct discovery workshops and gather business, technical, and security requirements.
• Develop high-level and low-level solution designs, implementation plans, and migration strategies.
• Lead migrations from legacy proxy and security platforms to Netskope.
• Configure steering policies, security policies, traffic management, SSL inspection, and authentication mechanisms.
• Integrate Netskope with enterprise identity providers including Microsoft Entra ID (Azure AD), Okta, Active Directory, SAML, OAuth, and SCIM.
• Integrate with SIEM and SOAR platforms such as Splunk, Microsoft Sentinel, QRadar, and other security monitoring solutions.
• Design and implement DLP policies to protect sensitive data across SaaS, web, and private applications.
• Perform troubleshooting, root cause analysis, performance tuning, and optimization of Netskope deployments.
• Collaborate with network, cloud, endpoint, and security teams throughout project delivery.
• Produce architecture documentation, deployment guides, operational runbooks, and knowledge transfer documentation.
• Provide technical leadership, mentor engineers, and support operational teams after implementation.

Skills

Netskope SWG

CASB

ZTNA

DLP

Private Access

Cloud Firewall

Remote Browser Isolation

SSE

Zero Trust

SIEM

SOAR

Azure AD

Okta

Active Directory

SAML

OAuth

SCIM

Splunk

Microsoft Sentinel

QRadar

Education

Bachelor's degree in Computer Science, Information Technology, Cybersecurity, Engineering

Tools

Azure AD

Okta

Active Directory

SAML

OAuth

SCIM

Splunk

Microsoft Sentinel

QRadar

Job description

Job Title Netskope Architect - Design & Implementation

Experience

7+ years of experience in Cybersecurity, Network Security, or Cloud Security, with a minimum of 3+ years of hands‑on experience implementing and architecting Netskope Security Cloud solutions.

Job Summary

We are seeking an experienced Netskope Architect to lead the architecture, design, deployment, and implementation of enterprise‑wide Netskope Security Cloud solutions. The ideal candidate will have expertise in Security Service Edge (SSE), Zero Trust architecture, cloud security, and secure internet access. This role requires strong technical leadership, hands‑on implementation experience, and the ability to deliver secure, scalable solutions for global enterprise environments.

Key Responsibilities

• Design and architect enterprise‑wide Netskope Security Cloud solutions aligned with business and security requirements.
• Lead end‑to‑end implementation and deployment of Netskope Security Service Edge (SSE) solutions.
• Design, configure, and implement:
  • Secure Web Gateway (SWG)
  • Cloud Access Security Broker (CASB)
  • Zero Trust Network Access (ZTNA)
  • Data Loss Prevention (DLP)
  • Private Access
  • Cloud Firewall
  • Remote Browser Isolation (RBI) (preferred)
• Conduct discovery workshops and gather business, technical, and security requirements.
• Develop high‑level and low‑level solution designs, implementation plans, and migration strategies.
• Lead migrations from legacy proxy and security platforms (Blue Coat, Zscaler, Cisco Umbrella, Palo Alto Prisma Access, Forcepoint, etc.) to Netskope.
• Configure steering policies, security policies, traffic management, SSL inspection, and authentication mechanisms.
• Integrate Netskope with enterprise identity providers including Microsoft Entra ID (Azure AD), Okta, Active Directory, SAML, OAuth, and SCIM.
• Integrate with SIEM and SOAR platforms such as Splunk, Microsoft Sentinel, QRadar, and other security monitoring solutions.
• Design and implement DLP policies to protect sensitive data across SaaS, web, and private applications.
• Perform troubleshooting, root cause analysis, performance tuning, and optimization of Netskope deployments.
• Collaborate with network, cloud, endpoint, and security teams throughout project delivery.
• Produce architecture documentation, deployment guides, operational runbooks, and knowledge transfer documentation.
• Provide technical leadership, mentor engineers, and support operational teams after implementation.

Required Qualifications

• 7+ years of experience in Cybersecurity, Network Security, Cloud Security, or Security Engineering.
• Minimum 3+ years of hands‑on experience implementing and architecting Netskope Security Cloud solutions.
• Strong experience designing and deploying:
  • Netskope Secure Web Gateway (SWG)
  • CASB
  • ZTNA
  • DLP
  • Private Access
  • Cloud Firewall
• Strong understanding of Security Service Edge (SSE) and Zero Trust architecture.
• Experience with Microsoft 365, Azure, AWS, and Google Cloud Platform.
• Strong networking fundamentals including:
  • TCP/IP
  • DNS
  • HTTP/HTTPS
  • SSL/TLS
  • VPN
  • Proxy technologies
  • Routing and Network Security
• Experience integrating identity and authentication technologies including Microsoft Entra ID (Azure AD), Okta, Active Directory, SAML, OAuth, and SCIM.
• Experience with SIEM platforms such as Splunk, Microsoft Sentinel, or QRadar.
• Strong troubleshooting, analytical, and problem‑solving skills.
• Excellent communication and stakeholder management skills.

Preferred Qualifications

• Netskope certifications are strongly preferred, including one or more of the following:
  • Netskope Certified Cloud Security Administrator (NCCSA)
  • Netskope Certified Cloud Security Integrator (NCCSI)
  • Netskope Certified Cloud Security Architect (Architect‑level certification preferred)
  • Microsoft Certified: Azure Security Engineer Associate
  • AWS Certified Security - Specialty

Preferred Experience

• Enterprise cloud security transformation projects.
• Large‑scale Netskope implementation and migration projects.
• SASE/SSE architecture and deployment.
• Secure Internet Access modernization initiatives.
• Cloud security governance and compliance.
• Endpoint security integration with Microsoft Defender, CrowdStrike, or SentinelOne.
• Infrastructure as Code (Terraform, Ansible) and automation using PowerShell or Python.

Education

• Bachelor's degree in Computer Science, Information Technology, Cybersecurity, Engineering, or a related field.
• Equivalent professional experience will also be considered.

Soft Skills

• Strong customer‑facing and consulting skills.
• Excellent written and verbal communication.
• Ability to lead technical discussions and architecture reviews.
• Strong documentation and presentation skills.
• Ability to work independently and collaboratively in cross‑functional teams.
• Proven ability to manage multiple priorities in a fast‑paced environment.