Senior Netskope Engineer

Help AG is looking for a highly skilled Senior Netskope Engineer who will have strong hands-on expertise in CASB, SASE/SSE, DLP, and Zero Trust architectures using the Netskope platform. The Senior Netskope Engineer will be responsible for designing, implementing, optimizing, and supporting enterprise-scale Netskope deployments to secure SaaS, IaaS, web, and private application traffic. This role requires deep technical expertise, proactive troubleshooting skills, and the ability to work closely with internal security, IT, and SOC teams.

Responsibilities

• Deploy and manage Netskope CASB solutions in both API and Inline modes.

• Configure and enforce SaaS security policies (e.g., Microsoft 365, Salesforce, Google Workspace).

• Conduct cloud application discovery and risk assessments using Cloud Confidence Index (CCI).

• Manage tenant configurations and optimize policy enforcement.

• Monitor cloud usage and mitigate Shadow IT risks.

• Design and implement Netskope SASE architecture.

• Configure endpoint client steering (Client, PAC, GRE/IPSec).

• Support and integrate SD-WAN solutions for branch connectivity.

• Optimize traffic steering and policy performance.

• Develop and maintain structured and unstructured DLP policies.

• Implement Exact Data Match (EDM), fingerprinting, OCR, and classification policies.

• Tune policies to minimize false positives and operational impact.

• Ensure compliance with organizational and regulatory data protection requirements.

• Configure and manage Netskope Private Access (NPA).

• Integrate with Identity Providers (Okta, Azure AD) using SAML, OAuth, and SCIM.

• Implement role-based and least-privilege access controls.

• Troubleshoot authentication, access, and connectivity issues.

• Integrate Netskope with SIEM platforms (e.g., Splunk, Microsoft Sentinel).

• Configure log forwarding, reporting, dashboards, and alerts.

• Leverage APIs for automation and orchestration.

• Support incident response, investigations, and threat analysis.

• Perform root cause analysis for policy conflicts and performance issues.

• Work with vendor TAC for escalations and complex troubleshooting.
  
  

Qualifications & Skills

• Bachelor’s degree in Computer Science, Information Security, Cybersecurity, or a related field (or equivalent work experience).

• Minimum 7+ years of hands-on experience with Netskope CASB/SASE platform.

• Strong expertise in:

o CASB (API & Inline modes)

o Secure Web Gateway (SWG)

o ZTNA / Private Access

o Data Loss Prevention (DLP)

o SSL inspection and certificate management

• Good understanding of cloud security fundamentals (AWS, Azure, GCP).

• Experience integrating with Identity Providers (Okta, Azure AD).

• Strong networking fundamentals (TCP/IP, DNS, Proxy, VPN, routing concepts).

• Solid understanding of Zero Trust Architecture.

• Familiarity with scripting (PowerShell, Python) is an advantage.

• Strong analytical, troubleshooting, and stakeholder communication skills.

• Preferred Certifications

o Netskope Certified Cloud Security Administrator (NCSA)

o Netskope Certified Cloud Security Architect (NCSO)

o CISSP / CCSP

o Azure / AWS Security Certifications

Benefits

• Health insurance with one of the leading global providers for medical insurance.

• Career progression and growth through challenging projects and work.

• Employee engagement and wellness campaigns activities throughout the year.

• Excellent learning and development opportunities.

• Annual flights tickets.

• Inclusive and diverse working environment.

• Flexible/Hybrid working environment.

• Open door policy.

 

About Us