About this role
Senior Netskope SSE / Senior SASE Engineer will architect, deploy, and optimize SSE and SASE platforms, with a primary focus on Netskope. The engineer leads Zero Trust adoption, modernizes secure access for hybrid workforces, and collaborates across security, networking, and cloud teams.
Key Responsibilities
- Architect and deploy Netskope SSE solutions including CASB, SWG, ZTNA, DLP, DSPM, Cloud Firewall, and Private Access
- Lead enterprise-wide SASE design efforts integrating identity, networking, and cloud security controls
- Develop and maintain Zero Trust access patterns for users, devices, and applications
- Engineer secure access pathways and support migration from legacy VPN to ZTNA
- Integrate Netskope with identity providers (Azure AD, Okta), SIEM platforms, and endpoint security tools
Technical Overview
The technical scope includes Netskope SSE architecture and deployment (CASB, SWG, ZTNA, DLP, DSPM, Cloud Firewall, Private Access) plus enterprise SASE design integrating identity and networking controls. The role also covers Zero Trust access pattern development, VPN migration support, traffic steering and policy routing optimization, SIEM integrations, and operationalization through runbooks, automation scripts, and monitoring dashboards.
Ideal Candidate
The ideal candidate is a senior security engineer with 5–8+ years in security/network/cloud security and at least 3 years hands-on with Netskope SSE components like CASB, SWG, ZTNA, DLP, and DSPM. They understand SASE and Zero Trust deeply, can integrate with Azure AD and Okta, troubleshoot complex SSE/SASE issues, and improve performance using automation and monitoring artifacts.
Must-Have Skills
3+ years hands-on experience with Netskope SSE (CASBSWGZTNADLPDSPMClient SteeringPrivate Access)5–8+ years in security engineeringnetwork engineeringor cloud securityStrong understanding of SASE architecturesZero Trust principlesidentity-centric securityProficiency with identity platforms (Azure ADOkta)Proficiency with network protocols (DNSTLSHTTP/HTTPSIPsecGRE)Experience with SIEM tools such as SplunkSentinelor QRadarFamiliarity with automation using PythonPowerShellor Terraform
Nice-to-Have Skills
Netskope certifications (NCSANCINPA)Experience with SD-WAN technologies (NetskopeVeloCloudFortinet)Background in DLP program development or data classificationKnowledge of Zero Trust frameworks such as NIST 800-207Experience supporting largedistributed enterprise environments
Tools & Platforms
NetskopeCASB (Cloud Access Security Broker)SWG (Secure Web Gateway)ZTNA (Zero Trust Network Access)DLP (Data Loss Prevention)DSPM (Data Security Posture Management)Client SteeringPrivate AccessAzure ADOktaSplunkMicrosoft SentinelQRadar (IBM QRadar)PythonPowerShellTerraformNIST 800-207VeloCloudFortinetAWSAmazon Web ServicesGCPGoogle Cloud Platform
Required Skills
Security Service Edge (SSE)Secure Access Service Edge (SASE)NetskopeZero TrustCASBSWGZTNADLPDSPMPrivate AccessAzure ADOktaSIEM (SplunkSentinelQRadar)DNSTLSHTTP/HTTPSIPsecGREAWSAzureGCPPythonPowerShellTerraformNIST 800-207
Hard Skills
Security Service Edge (SSE)Secure Access Service Edge (SASE)Netskope SSECloud Access Security Broker (CASB)Secure Web Gateway (SWG)Zero Trust Network Access (ZTNA)Data Loss Prevention (DLP)Data Security Posture Management (DSPM)Cloud FirewallPrivate AccessZero Trustidentity-centric securitysecure access pathwaysmigration from legacy VPN to ZTNAtraffic steeringclient deploymentpolicy routingDLP threat protectionaccess control policiesidentity provider integrationAzure ADOktaSIEM platformsSplunkSentinelQRadartroubleshootingautomation scriptsmonitoring dashboardsrunbooksnetwork protocolsDNSTLSHTTP/HTTPSIPsecGREcloud platformsAWSAmazon Web ServicesAzureGoogle Cloud PlatformGCPPythonPowerShellTerraformNetskopeSASE architecturessubject-matter expert
Soft Skills
lead designimplementationand optimizationstrong communication skillsability to lead cross-functional technical initiativesmentoring junior engineersdrive continuous performance improvementstroubleshoot complex issues
Certifications
Preferred
NCSA (Netskope Certified Security Administrator)NCI (Netskope Certified Instructor)NPA (Netskope Private Access)
Keywords for Your Resume
Senior Netskope SSE EngineerSenior SASE EngineerSecurity Service Edge (SSE)Secure Access Service Edge (SASE)NetskopeZero TrustCloud Access Security Broker (CASB)Secure Web Gateway (SWG)Zero Trust Network Access (ZTNA)Data Loss Prevention (DLP)Data Security Posture Management (DSPM)Private AccessClient SteeringSASE architecturesidentity platformsAzure ADOktaSIEMSplunkSentinelQRadarnetwork protocolsDNSTLSHTTP/HTTPSIPsecGREAWSAmazon Web ServicesAzureGCPGoogle Cloud PlatformPythonPowerShellTerraformNIST 800-207Netskope SSECASBSWGZTNADLPDSPM
Deal Breakers
Must have 3+ years hands-on experience with Netskope SSE (CASB, SWG, ZTNA, DLP, DSPM, Client Steering, Private Access), Must demonstrate proficiency with Azure AD and Okta, Must have SIEM experience with Splunk, Sentinel, or QRadar, Must be able to work Remote (work location stated as Remote)
Get matched to jobs like this
Luna finds roles that fit your skills and career goals — no endless scrolling required.
Create a Free Profile