Senior Cloud Security Engineer (Zscaler / Netskope)

Job Description

• Lead the administration, engineering, monitoring and operational management of enterprise cloud security platforms, primarily Zscaler and/or Netskope.

• Design, implement and maintain cloud security architectures and policies covering Secure Web Gateway (SWG), Cloud Access Security Broker (CASB), Zero Trust Network Access (ZTNA) and Secure Access Service Edge (SASE).

• Take ownership of security policy design, configuration, optimisation and enforcement, including web filtering, application access, data protection and user access controls.

• Lead the implementation, configuration and enhancement of cloud security solutions to meet customer security requirements and organisational standards.

• Manage complex technical troubleshooting and escalations involving connectivity, authentication, proxy, SSL inspection, DNS, routing and policy enforcement.

• Analyse security logs, traffic patterns, alerts and platform performance to identify potential threats, security gaps and operational issues.

• Lead security incident investigations, perform root cause analysis (RCA) and recommend corrective and preventive measures.

• Review and optimise existing security policies, identifying policy conflicts, excessive permissions, security gaps and opportunities for improvement.

• Manage and execute Change Requests (CR), Service Requests (SR) and Incident Requests, ensuring all activities comply with established change management and operational procedures.

• Plan and execute security platform upgrades, patches, migrations, feature enhancements and configuration changes.

• Lead integration activities involving endpoint security, identity and access management (IAM), authentication systems, network infrastructure and cloud applications.

• Develop and maintain technical documentation, solution designs, implementation plans, operational procedures, configuration records and network/security diagrams.

• Provide technical guidance and mentorship to junior engineers and operational support teams.

• Work closely with customers, vendors, internal technical teams and stakeholders to resolve complex technical challenges and deliver security solutions.

• Participate in customer engagements, technical discussions and solution design sessions to understand requirements and recommend appropriate security solutions.

• Identify opportunities to improve security posture, operational efficiency and platform performance through continuous optimisation and automation.

• Provide remote and onsite technical support, including participation in planned maintenance and project deployments when required.

Requirements

• Diploma or Degree in Information Technology, Computer Science, Cybersecurity, Computer Engineering or a related discipline.

• Minimum 4–6 years of relevant experience in cybersecurity, network security, cloud security, security engineering or SASE implementation and operations.

• Strong hands-on experience administering and engineering Zscaler and/or Netskope enterprise security platforms.

• Proven experience implementing and managing cloud security solutions, including one or more of the following:

  • Zscaler Internet Access (ZIA)

  • Zscaler Private Access (ZPA)

  • Netskope Security Cloud Platform

  • Secure Web Gateway (SWG)

  • Cloud Access Security Broker (CASB)

  • Zero Trust Network Access (ZTNA)

  • Secure Access Service Edge (SASE)

• Strong understanding of security policy architecture, web filtering, SSL inspection, data loss prevention (DLP), application control and access management.

• Good knowledge of networking concepts, including TCP/IP, DNS, HTTP/HTTPS, SSL/TLS, VPN, routing, firewalls, proxies and network traffic analysis.

• Experience integrating cloud security platforms with Active Directory, Microsoft Entra ID, SSO, MFA and endpoint security solutions.

• Proven ability to troubleshoot complex technical issues, conduct root cause analysis and implement long-term corrective solutions.

• Experience managing security incidents, change management, service requests, technical escalations and platform maintenance.

• Experience in security migrations, enterprise deployments, infrastructure upgrades or cloud security transformation projects.

• Relevant professional certifications such as Zscaler, Netskope, CISSP, CCSP, CISM, CompTIA Security+ or other recognised cybersecurity certifications will be advantageous.

• Strong technical documentation, communication and stakeholder management skills.

• Ability to work independently, manage multiple priorities and take ownership of technical deliverables.

• Candidates must possess relevant hands-on cybersecurity, network security or cloud security engineering experience. Candidates without relevant experience will not be considered.

Working Hours

Monday to Friday: 9:00am – 6:00pm