Description

You will architect and manage enterprise security infrastructure across email, network, cloud, and endpoint domains.

Responsibilities

• Manage Proofpoint email security (POD, TRAP, TAP) and configure Imperva WAF for web application protection.
• Deploy Zscaler for cloud internet security and maintain Cisco ISE for network access control and segmentation.
• Administer enterprise PKI (Microsoft ADCS) with Venafi automation and DigiCert certificate lifecycle management.
• Operate Microsoft Defender for Cloud Apps and Netskope CASB for SaaS discovery, OAuth governance, and shadow IT detection.
• Deploy and tune endpoint security (CrowdStrike Falcon, Trellix) and implement DLP policies via Microsoft Purview and Netskope.

Required Skills

• 15+ years of experience in network, endpoint, and data security architectures.
• Deep expertise in Proofpoint, Imperva WAF, Zscaler, and Cisco ISE.
• Strong knowledge of PKI infrastructure, including Microsoft ADCS, Venafi, and DigiCert.
• Experience with Microsoft Defender for Cloud Apps, Netskope CASB, and Microsoft Purview DLP.
• Proficiency in endpoint protection tools such as CrowdStrike Falcon and Trellix.
• Ability to lead incident response, forensic analysis, and security audits.
• Strong communication and leadership skills for mentoring staff and cross-department collaboration.

Preferred Skills

• CISSP, CCNA/CCNP Security, or Zscaler Certified Cloud Security Engineer (ZCCSE).
• Microsoft SC-200, MCSE, or CompTIA Security+/CySA+ certifications.
• Trellix DLP or Netskope Certified Cloud Security Administrator (NCCSA).

Key Skills

Education

Not specified