Job Description: Professional Services Engineer – Cloud & Network Security
Experience: 5–8 Years
Job Summary
We are seeking an experienced Professional Services Engineer with strong expertise in network security and hands-on implementation experience with Netskope and/or Zscaler. The ideal candidate will be responsible for designing, implementing, configuring, migrating, and optimising cloud security solutions for enterprise customers, with a focus on SSE/SASE, Zero Trust, Secure Web Gateway, and private application access.
Key Responsibilities
- Design, implement, configure, and optimise Netskope and/or Zscaler security solutions for enterprise customers.
- Deliver SSE/SASE, Zero Trust, Secure Web Gateway (SWG), and Zero Trust Network Access (ZTNA) implementations.
- Manage migrations from legacy proxy, VPN, and network security solutions to cloud-based security platforms.
- Conduct customer requirement-gathering sessions, technical workshops, and solution-design discussions.
- Configure security policies, traffic steering, authentication, user access controls, and application access.
- Integrate security platforms with SSO, identity providers (IdP), SIEM, MDM, and firewalls.
- Troubleshoot network security issues involving TCP/IP, DNS, routing, proxies, SSL/TLS, VPNs, and application connectivity.
- Conduct solution testing, validation, and production readiness assessments.
- Prepare technical designs, implementation plans, configuration documents, runbooks, and knowledge-transfer materials.
- Provide post-implementation support, optimisation, and technical guidance to customers.
Mandatory Technical Skills
- 5–8 years of experience in network security, cloud security, or professional services engineering.
- Hands-on implementation experience with at least one platform:
- Netskope – Cloud Security / SSE
- Zscaler – ZIA / ZPA
- Strong understanding of SSE/SASE architecture, Zero Trust principles, and cloud security solutions.
- Solid networking fundamentals, including TCP/IP, DNS, HTTP/HTTPS, routing, and network architecture.
- Practical experience with Secure Web Gateways, proxies, next-generation firewalls, SSL/IPSec, and VPN technologies.
- Knowledge of SSO, identity integration, Data Loss Prevention (DLP), SIEM, and security monitoring.
- Strong troubleshooting skills across network connectivity, authentication, and security policies.
- Fluency in Mandarin and English for customer-facing technical discussions.
Preferred Skills
- Experience with both Netskope and Zscaler platforms.
- Migration experience from traditional proxy/VPN solutions to cloud-based SSE/SASE platforms.
- Familiarity with enterprise identity providers, endpoint security, MDM, and Cloud APIs.
- Basic scripting or automation experience using Python or similar languages.
- Understanding of security and compliance frameworks, including PCI, PII, and SOX.
- Experience supporting large enterprise customers.
- Relevant Netskope or Zscaler certifications.
Professional Competencies
- Strong customer-facing communication and presentation skills.
- Ability to independently lead technical workshops and implementation projects.
- Excellent analytical, troubleshooting, and problem-solving abilities.
- Ability to translate customer requirements into practical technical solutions.
- Strong documentation, stakeholder management, and knowledge-transfer skills.