5+ years of experience supporting enterprise network or security solutions within a large-scale, distributed IT environment.
Hands-on experience with one or more leading SASE/SSE platforms, such as Netskope, Palo Alto Prisma Access, Zscaler Internet Access (ZIA), or Zscaler Private Access (ZPA).
Experience administering SWG capabilities, including URL filtering, SSL/TLS inspection, cloud application controls, malware protection, DLP, threat prevention, and policy enforcement.
Experience configuring ZTNA access to private applications and supporting initiatives that reduce reliance on traditional VPN technologies.
Familiarity with endpoint traffic steering, GRE/IPsec tunnels, private access connectors or publishers, dedicated egress, and high-availability designs.
Understanding of identity-driven security and integration with Microsoft Entra ID, Okta, Ping Identity, or similar identity providers using SAML, OAuth, OIDC, or SCIM.
Experience integrating or operating security services with endpoint security, SIEM, XDR, or security operations workflows.
Knowledge of cloud networking and security concepts across AWS, Azure, or Google Cloud Platform.
Familiarity with automation and scripting using Python, PowerShell, REST APIs, Terraform, Ansible, GitHub, or similar tools.
Experience using network, security, or digital-experience observability tools to investigate user experience, application performance, and security events.
Experience developing low-level design documentation, implementation plans, test plans, and operational runbooks.
Experience working within Agile engineering teams and using modern engineering or DevSecOps practices.
Industry certifications such as CCNA/CCNP Security, PCNSE, Netskope certifications, Zscaler certifications, or equivalent are preferred.
