Senior Cloud Security Engineer (Zscaler / Netskope)

Job Description • Lead the administration, engineering, monitoring and operational management of enterprise cloud security platforms, primarily Zscaler and/or Netskope. • Design, implement and maintain cloud security architectures and policies covering Secure Web Gateway (SWG), Cloud Access Security Broker (CASB), Zero Trust Network Access (ZTNA) and Secure Access Service Edge (SASE). • Take ownership of security policy design, configuration, optimisation and enforcement, including web filtering, application access, data protection and user access controls. • Lead the implementation, configuration and enhancement of cloud security solutions to meet customer security requirements and organisational standards. • Manage complex technical troubleshooting and escalations involving connectivity, authentication, proxy, SSL inspection, DNS, routing and policy enforcement. • Analyse security logs, traffic patterns, alerts and platform performance to identify potential threats, security gaps and operational issues. • Lead security incident investigations, perform root cause analysis (RCA) and recommend corrective and preventive measures. • Review and optimise existing security policies, identifying policy conflicts, excessive permissions, security gaps and opportunities for improvement. • Manage and execute Change Requests (CR), Service Requests (SR) and Incident Requests, ensuring all activities comply with established change management and operational procedures. • Plan and execute security platform upgrades, patches, migrations, feature enhancements and configuration changes. • Lead integration activities involving endpoint security, identity and access management (IAM), authentication systems, network infrastructure and cloud applications. • Develop and maintain technical documentation, solution designs, implementation plans, operational procedures, configuration records and network/security diagrams. • Provide technical guidance and mentorship to junior engineers and operational support teams. • Work closely with customers, vendors, internal technical teams and stakeholders to resolve complex technical challenges and deliver security solutions. • Participate in customer engagements, technical discussions and solution design sessions to understand requirements and recommend appropriate security solutions. • Identify opportunities to improve security posture, operational efficiency and platform performance through continuous optimisation and automation. • Provide remote and onsite technical support, including participation in planned maintenance and project deployments when required. Requirements • Diploma or Degree in Information Technology, Computer Science, Cybersecurity, Computer Engineering or a related discipline. • Minimum 4–6 years of relevant experience in cybersecurity, network security, cloud security, security engineering or SASE implementation and operations. • Strong hands-on experience administering and engineering Zscaler and/or Netskope enterprise security platforms. • Proven experience implementing and managing cloud security solutions, including one or more of the following: • Zscaler Internet Access (ZIA) • Zscaler Private Access (ZPA) • Netskope Security Cloud Platform • Secure Web Gateway (SWG) • Cloud Access Security Broker (CASB) • Zero Trust Network Access (ZTNA) • Secure Access Service Edge (SASE) • Strong understanding of security policy architecture, web filtering, SSL inspection, data loss prevention (DLP), application control and access management. • Good knowledge of networking concepts, including TCP/IP, DNS, HTTP/HTTPS, SSL/TLS, VPN, routing, firewalls, proxies and network traffic analysis. • Experience integrating cloud security platforms with Active Directory, Microsoft Entra ID, SSO, MFA and endpoint security solutions. • Proven ability to troubleshoot complex technical issues, conduct root cause analysis and implement long-term corrective solutions. • Experience managing security incidents, change management, service requests, technical escalations and platform maintenance. • Experience in security migrations, enterprise deployments, infrastructure upgrades or cloud security transformation projects. • Relevant professional certifications such as Zscaler, Netskope, CISSP, CCSP, CISM, CompTIA Security+ or other recognised cybersecurity certifications will be advantageous. • Strong technical documentation, communication and stakeholder management skills. • Ability to work independently, manage multiple priorities and take ownership of technical deliverables. • Candidates must possess relevant hands-on cybersecurity, network security or cloud security engineering experience. Candidates without relevant experience will not be considered. Working Hours Monday to Friday: 9:00am – 6:00pm