Netskope Engineer - W2 Only

Netskope Engineer

• Remote (U.S.)
• W2 Only

About the Role 

We are seeking an experienced Netskope Engineer to design, implement, and optimize enterprise Security Service Edge (SSE) solutions. This role will be responsible for managing Netskope technologies across Cloud Access Security Broker (CASB), Secure Web Gateway (SWG), Data Loss Prevention (DLP), and Zero Trust Network Access (ZTNA) environments. The ideal candidate will have strong hands-on experience with Netskope policy administration, cloud security, data protection, and security integrations.

Key Responsibilities

• Administer and optimize the Netskope platform, including policy configuration, reporting, and tenant management.

• Design, implement, and tune CASB, SWG, and DLP policies to protect users, applications, and sensitive data.

• Configure and support traffic steering methods, SSL/TLS inspection, certificates, and endpoint deployments.

• Manage SaaS security controls for platforms such as Microsoft 365, Google Workspace, ServiceNow, and GitHub.

• Develop DLP policies for protecting regulated and confidential business data.

• Monitor security events, investigate incidents, and support threat detection and response activities.

• Integrate Netskope with SIEM, SOAR, ITSM, identity providers, and endpoint security platforms.

• Collaborate with security, infrastructure, and business teams to implement security controls and improve cloud security posture.

• Create technical documentation, runbooks, and operational procedures.

• Evaluate new Netskope capabilities and recommend security enhancements.

Required Qualifications

• 5+ years of experience in Security Engineering, Network Security, or Cybersecurity.

• Hands-on experience administering Netskope in an enterprise environment.

• Strong knowledge of:

  • CASB

  • Secure Web Gateway (SWG)

  • Data Loss Prevention (DLP)

  • SSE/SASE architectures

  • Zero Trust security concepts

• Experience with:

  • Netskope policy creation and tuning

  • SSL/TLS inspection

  • Proxy technologies and traffic steering

  • GRE/IPSec tunnels

  • DNS and routing concepts

  • Microsoft Entra ID, Okta, Active Directory, SAML, SCIM, or LDAP

• Experience securing cloud applications and SaaS environments.

• Ability to troubleshoot complex security, networking, and identity-related issues.

• Strong communication and documentation skills.

Preferred Qualifications

• Netskope certifications (Administrator, Professional, SSE Accreditation, etc.).

• Experience with:

  • Netskope Private Access (ZTNA)

  • Remote Browser Isolation (RBI)

  • Cloud Firewall

  • DNS Security

  • SSPM / DSPM

  • Cloud Exchange

• SIEM/SOAR integration experience (Splunk, Microsoft Sentinel, QRadar, ServiceNow, Jira).

• Scripting or automation experience using Python, PowerShell, REST APIs, or JSON.

• Security certifications such as CISSP, CCNP Security, or Microsoft SC-200.

• Experience securing AWS, Azure, or Google Cloud environments.