Required Qualifications
· 5+ years of experience in security or network engineering, including hands-on experience with Netskope or a comparable SSE/SASE platform (e.g., Zscaler, Palo Alto Prisma Access).
· Bachelor’s degree in Computer Science, Information Security, or a related field, or equivalent practical experience.
· Hands-on experience administering or engineering Netskope in an enterprise environment, including tenant configuration, policy management, troubleshooting, and operational support.
· Practical experience building and tuning Netskope policies for cloud applications, web traffic, file activity, user activity, threats, and sensitive data controls.
· Strong understanding of CASB, SWG, DLP, SSE/SASE, Zero Trust, secure internet access, SaaS security, and cloud application risk concepts.
· Experience with traffic steering, proxy architecture, Netskope Client behavior, PAC files, GRE/IPsec tunnels, certificates, routing, DNS, and SSL/TLS inspection.
· Experience with identity integrations such as Microsoft Entra ID, Okta, Ping, Active Directory, SAML, SCIM, LDAP, user groups, and conditional access concepts.
· Experience with endpoint deployment and support across Windows, macOS, and mobile platforms using MDM/UEM tools or enterprise software distribution methods.
· Working knowledge of HTTP/HTTPS, TLS, web proxies, browsers, authentication flows, SaaS platforms, APIs, and common enterprise network patterns.
· Experience designing or supporting DLP controls, sensitive data classification, incident review, exception handling, and policy tuning.
· Ability to troubleshoot complex issues across Netskope, endpoint, network, identity, browser, SaaS, and cloud environments.
· Experience reviewing security logs, SkopeIT events, alerts, dashboards, reports, and SIEM data to support investigations and operational decisions.
· Strong documentation and communication skills, including the ability to explain technical controls to security, infrastructure, compliance, legal, and business stakeholders.
Preferred Qualifications
· Netskope certification or accreditation (e.g., Netskope Administrator, Professional, or SSE Accreditation), formal Netskope training, or equivalent production engineering experience.
· Experience with Netskope Private Access (ZTNA), Remote Browser Isolation, Cloud Firewall, DNS Security, SSPM, DSPM, CSPM/public cloud security, SkopeAI/genAI controls, or Cloud Exchange.
· Experience integrating Netskope with Splunk, Microsoft Sentinel, QRadar, ServiceNow, Jira, SOAR platforms, or custom REST API workflows.
· Experience securing Microsoft 365, Google Workspace, Box, Salesforce, ServiceNow, Slack, GitHub, Workday, AWS, Azure, or Google Cloud environments.
· Familiarity with Microsoft Purview, sensitivity labels, information protection, enterprise data governance, or records management programs.
· Scripting or automation experience using Python, PowerShell, REST APIs, JSON, or infrastructure/security automation tools.
· Knowledge of regulatory and security frameworks such as NIST, ISO 27001, PCI DSS, HIPAA, SOX, GLBA, GDPR, or CCPA/CPRA.
· Broader security or networking certifications such as CISSP, CCNP Security, or Microsoft SC-200.