Senior Cloud Security Engineer (Zscaler / Netskope)

Job Description

• Lead the administration, engineering, monitoring and operational management of enterprise cloud security platforms, primarily Zscaler and/or Netskope.
• Design, implement and maintain cloud security architectures and policies covering Secure Web Gateway (SWG), Cloud Access Security Broker (CASB), Zero Trust Network Access (ZTNA) and Secure Access Service Edge (SASE).
• Take ownership of security policy design, configuration, optimisation and enforcement, including web filtering, application access, data protection and user access controls.
• Lead the implementation, configuration and enhancement of cloud security solutions to meet customer security requirements and organisational standards.
• Manage complex technical troubleshooting and escalations involving connectivity, authentication, proxy, SSL inspection, DNS, routing and policy enforcement.
• Analyse security logs, traffic patterns, alerts and platform performance to identify potential threats, security gaps and operational issues.
• Lead security incident investigations, perform root cause analysis (RCA) and recommend corrective and preventive measures.
• Review and optimise existing security policies, identifying policy conflicts, excessive permissions, security gaps and opportunities for improvement.
• Manage and execute Change Requests (CR), Service Requests (SR) and Incident Requests, ensuring all activities comply with established change management and operational procedures.
• Plan and execute security platform upgrades, patches, migrations, feature enhancements and configuration changes.
• Lead integration activities involving endpoint security, identity and access management (IAM), authentication systems, network infrastructure and cloud applications.
• Develop and maintain technical documentation, solution designs, implementation plans, operational procedures, configuration records and network/security diagrams.
• Provide technical guidance and mentorship to junior engineers and operational support teams.
• Work closely with customers, vendors, internal technical teams and stakeholders to resolve complex technical challenges and deliver security solutions.
• Participate in customer engagements, technical discussions and solution design sessions to understand requirements and recommend appropriate security solutions.
• Identify opportunities to improve security posture, operational efficiency and platform performance through continuous optimisation and automation.
• Provide remote and onsite technical support, including participation in planned maintenance and project deployments when required.

Requirements

• Diploma or Degree in Information Technology, Computer Science, Cybersecurity, Computer Engineering or a related discipline.
• Minimum 4–6 years of relevant experience in cybersecurity, network security, cloud security, security engineering or SASE implementation and operations.
• Strong hands-on experience administering and engineering Zscaler and/or Netskope enterprise security platforms.
• Proven experience implementing and managing cloud security solutions, including one or more of the following:
• Zscaler Internet Access (ZIA)
• Zscaler Private Access (ZPA)
• Netskope Security Cloud Platform
• Secure Web Gateway (SWG)
• Cloud Access Security Broker (CASB)
• Zero Trust Network Access (ZTNA)
• Secure Access Service Edge (SASE)
• Strong understanding of security policy architecture, web filtering, SSL inspection, data loss prevention (DLP), application control and access management.
• Good knowledge of networking concepts, including TCP/IP, DNS, HTTP/HTTPS, SSL/TLS, VPN, routing, firewalls, proxies and network traffic analysis.
• Experience integrating cloud security platforms with Active Directory, Microsoft Entra ID, SSO, MFA and endpoint security solutions.
• Proven ability to troubleshoot complex technical issues, conduct root cause analysis and implement long-term corrective solutions.
• Experience managing security incidents, change management, service requests, technical escalations and platform maintenance.
• Experience in security migrations, enterprise deployments, infrastructure upgrades or cloud security transformation projects.
• Relevant professional certifications such as Zscaler, Netskope, CISSP, CCSP, CISM, CompTIA Security+ or other recognised cybersecurity certifications will be advantageous.
• Strong technical documentation, communication and stakeholder management skills.
• Ability to work independently, manage multiple priorities and take ownership of technical deliverables.
• Candidates must possess relevant hands-on cybersecurity, network security or cloud security engineering experience. Candidates without relevant experience will not be considered.

Working Hours

Monday to Friday: 9:00am – 6:00pm