Experience implementing and administering one or more leading SASE/SSE platforms, such as Netskope, Palo Alto Prisma Access, Zscaler Internet Access (ZIA), or Zscaler Private Access (ZPA).
Experience designing, implementing, and supporting enterprise firewall platforms, such as Check Point, Palo Alto Networks, or Fortinet, including security policy management, network segmentation, NAT, VPN connectivity, and integration with SASE architectures.
Deep understanding of SWG capabilities, including URL filtering, SSL/TLS inspection, cloud application visibility and control, malware protection, DLP, threat prevention, and policy enforcement.
Experience designing ZTNA solutions for secure access to private applications and reducing reliance on traditional VPN technologies.
Experience with SASE traffic steering and service components, including endpoint clients, GRE/IPsec tunnels, private access connectors or publishers, dedicated egress, and high-availability designs.
Strong understanding of identity-driven security and integration with Microsoft Entra ID, Okta, Ping Identity, or similar identity providers using SAML, OAuth, OIDC, and SCIM.
Experience integrating SASE platforms with endpoint security, SIEM, XDR, and security operations workflows.
Knowledge of cloud networking and security architectures across AWS, Azure, and Google Cloud Platform.
Experience with policy lifecycle management, security posture assessments, exception governance, and change control for cloud-delivered security services.
Experience with automation and scripting using Python, PowerShell, REST APIs, Terraform, Ansible, GitHub, or similar tools.
Experience with network, security, and digital-experience observability tools used to monitor user experience, application performance, and security events.
Ability to develop technical architecture documentation, low-level design artifacts, implementation plans, operational runbooks, and support models for SASE deployments.
Experience working within Agile engineering teams using modern engineering and DevSecOps practices.
Demonstrated ability to provide technical leadership, mentor engineers