Netskope ZTNA & Web Proxy Engineer

You are a highly skilled Network Security Contractor with in-depth hands-on experience in Netskope Zero Trust Network Access (ZTNA) and Netskope Web Proxy. Your primary responsibility will be to lead a phase-wise migration from Ivanti SSL VPN to Netskope ZTNA, including support for Web Proxy configurations and policy troubleshooting. This role requires deep analysis of the existing VPN architecture to ensure a smooth transition for both corporate users and contractors. Key Responsibilities: - Lead and manage the enterprise migration from Ivanti SSL VPN to Netskope Private Access ZTNA. - Review and document existing Ivanti SSL VPN configurations across corporate desktops, mobile devices, and contractor endpoints. - Design and implement Netskope ZTNA configurations, including Private Applications App Definitions, Netskope Publisher deployment and configuration, steering configuration and traffic forwarding rules, and Netskope Client Agent deployment. - Collaborate with cross-functional teams to plan, test, and implement changes in accordance with change management processes. - Provide Tier 2/3 support for ongoing issues related to Netskope Web Proxy, including real-time analysis of policy enforcement, SSL inspection, real-time coaching, and anomaly detection. - Monitor logs via Netskope Cloud Security Console and use tools like Security Diagnostics and Advanced Analytics for troubleshooting. - Document and maintain SOPs, user guides, and implementation runbooks. - Organize knowledge transfer sessions for the network team for 24/7 support on Netskope ZTNA Proxy Solution. - Ensure endpoint compliance and secure access for all user groups post-migration. Required Skills: - 5 years of experience in network security access management or cloud security roles. - Deep hands-on expertise in Netskope ZTNA, Private Access, and Web Proxy configurations. - Solid experience with App Definitions and Private Access Policy creation, Publisher deployments for data center cloud application access, Netskope Client installation, and steering rules. - Working knowledge of Ivanti SSL VPN systems with experience in large-scale enterprise migrations. - Familiarity with proxy chaining, SSL decryption, bypass lists, and real-time policy enforcement. - Proficient in network protocols TCP/IP, DNS, HTTPS, and endpoint configuration across Windows, macOS, and mobile platforms. - Strong troubleshooting skills and comfort working in a high-availability production environment. - Excellent communication, documentation, and stakeholder coordination skills. Preferred Qualifications: - Netskope Certified Cloud Security Administrator (NCCSA) or relevant Netskope certification. - ITIL Foundation Certification or experience with structured IT change processes. - Experience with MDM platforms (e.g., Intune, Workspace ONE). - Familiarity with Zero Trust frameworks, NIST standards, and secure access architecture. If you are interested in this opportunity, please share your updated resume to madhuri.p@s3staff.com.,