The posting
We are seeking an experienced Netskope Secure Access Service Edge (SASE) Subject Matter Expert (SME) to manage, operate, maintain, and optimize enterprise-wide Netskope SASE security solutions.
The ideal candidate will have strong hands-on experience in Netskope Security Operations, Cloud Access Security Broker (CASB), Secure Web Gateway (SWG), Zero Trust Network Access (ZTNA), Data Loss Prevention (DLP), and cloud security policy management.
The role primarily focuses on BAU security operations, incident management, troubleshooting, policy administration, service optimization, and continuous improvement of the Netskope SASE platform, ensuring secure and seamless access to corporate applications, cloud services, and private resources.
The candidate will work closely with Security Operations (SOC), Network Security, Endpoint Security, and Infrastructure teams to maintain a robust security posture and ensure operational stability.
Key Responsibilities
1. Netskope SASE Operations & Administration
- Manage day-to-day administration, monitoring, and operational support of the Netskope SASE platform.
- Configure, maintain, and optimize Netskope CASB, SWG, ZTNA (Netskope Private Access), DLP, and other deployed security capabilities.
- Manage security policies, application access controls, URL filtering, SSL/TLS inspection, and cloud application governance.
- Perform routine platform health checks, configuration reviews, and operational maintenance.
- Manage Netskope Client deployment, configuration, upgrades, and troubleshooting across supported endpoints.
- Ensure platform availability, operational performance, and compliance with agreed service levels.
2. Security Policy Management & Optimization
- Administer and fine-tune CASB, SWG, ZTNA, and DLP policies based on business and security requirements.
- Manage sanctioned and unsanctioned cloud applications, risk-based access policies, and application categorization.
- Investigate policy violations, false positives, and access-related issues, implementing appropriate remediation.
- Review security policies periodically to identify opportunities for optimization and enhanced protection.
- Support Zero Trust security principles through identity-aware and context-based access controls.
3. Incident Management & Troubleshooting
- Provide L2/L3 technical support for Netskope-related incidents, service requests, and operational issues.
- Troubleshoot connectivity failures, traffic steering issues, SSL/TLS inspection errors, application access restrictions, and policy enforcement failures.
- Investigate DLP violations, suspicious cloud activities, malware alerts, and other security events.
- Perform detailed log analysis, root cause analysis (RCA), and corrective actions for recurring incidents.
- Coordinate with Netskope TAC/vendor support for complex technical issues and escalations.
- Ensure timely incident resolution in accordance with agreed SLAs.
4. Cloud & Network Security Operations
- Maintain secure access to SaaS, IaaS, web applications, and private enterprise resources.
- Support Netskope Private Access (NPA), including private application onboarding, publisher connectivity, and access policy management.
- Troubleshoot network traffic forwarding, proxy configurations, GRE/IPsec tunnels, and endpoint traffic steering.
- Monitor and optimize security service performance, latency, and user connectivity.
- Collaborate with Network and Infrastructure teams to resolve routing, DNS, firewall, and application connectivity issues.
5. Security Monitoring, Reporting & Compliance
- Monitor Netskope security dashboards, alerts, and operational reports to identify potential threats and policy violations.
- Integrate and support Netskope security event forwarding to SIEM platforms and SOC monitoring solutions.
- Generate periodic security reports covering cloud application usage, DLP incidents, policy violations, and operational performance.
- Support security audits, compliance assessments, and evidence collection aligned with ISO 27001, NIST, GDPR, and applicable organizational policies.
- Identify security gaps and recommend improvements to strengthen the organization's cloud security posture.
6. Change Management & Continuous Improvement
- Implement approved configuration changes, policy updates, and platform enhancements following established change management procedures.
- Conduct impact assessments, testing, and validation before implementing changes in production.
- Support pilot testing and phased deployment of Netskope Client updates and security policies.
- Maintain operational documentation, standard operating procedures (SOPs), troubleshooting guides, and knowledge base articles.
- Proactively identify opportunities for automation, operational efficiency, and continuous service improvement.
7. Stakeholder & Vendor Coordination
- Collaborate with SOC, Network Security, Endpoint Security, Cloud Security, and IT Operations teams.
- Act as the technical SME for Netskope-related operational issues and escalations.
- Coordinate with Netskope technical support and other technology vendors to resolve platform-related issues.
- Provide technical guidance, knowledge transfer, and operational support to junior engineers and internal teams.
- Participate in operational reviews, incident discussions, and security improvement initiatives.
Required Skills & Qualifications
Professional Experience
- 3–6 years of overall experience in IT Infrastructure, Network Security, Cloud Security, or Cybersecurity Operations.
- Minimum 3 years of hands-on experience in Netskope SASE administration, configuration, troubleshooting, and BAU operations.
- Proven experience supporting enterprise-scale Netskope deployments in complex environments.
- Strong understanding of ITIL-based incident, problem, change, and service request management processes.
Netskope Technical Expertise
- Strong hands-on experience with the following Netskope capabilities: Netskope CASB/ SWG/ NPA/ ZTNA/ DLP/ RBI
- Experience troubleshooting SSL/TLS inspection, proxy traffic, application access, and Netskope steering configurations.
- Knowledge of Netskope security dashboards, event logs, reporting, and analytics.
- Experience managing security policy exceptions, application allow/block lists, and user-based access restrictions.
Network & Cloud Security Knowledge
- Strong understanding of Zero Trust Security, SASE architecture, Secure Web Gateway, and Firewall-as-a-Service (FWaaS).
- Good knowledge of network security technologies, including VPN, SD-WAN, DNS Security, firewalls, and IDS/IPS.
- Working knowledge of cloud platforms such as Microsoft Azure, AWS, and Google Cloud
- Experience integrating Netskope with SIEM solutions and enterprise security monitoring platforms.
Education & Certifications
- Bachelor's degree in Information Security, Information Technology, Computer Science, Engineering, or a related discipline.
- Mandatory Netskope Certifications: Netskope Certified Cloud Security Integrator (NCCSI); Netskope Administrator certification or equivalent Netskope administration certification.
- Additional industry certifications such as CISSP, CompTIA Security+, CCNA, or equivalent security/networking certifications will be advantageous.
Preferred Skills
- Experience supporting large-scale Netskope SASE environments with thousands of enterprise users.
- Familiarity with Microsoft Intune, Ivanti, or other endpoint management solutions for Netskope Client deployment.
- Experience with Microsoft Sentinel, Splunk, QRadar, or other SIEM platforms.
- Understanding of DLP incident investigation, sensitive data classification, and cloud application security.
- Experience with Netskope API integrations, scripting, and security operations automation.
- Strong analytical, troubleshooting, communication, and stakeholder management skills.
Location: Dubai, UAE (onsite) | Duration: 12 months | Start: ASAP
Vertical:
Technology
