Cloud Security Architect

- Work to understand product requirements and build Internet Security policies to protect corporate endpoints. - Define, enable, and review Internet Security policies and traffic steering configurations using Secure Web Gateway (SWG) and Cloud Access Security Broker (CASB). - Analyse data exfiltration risks and design Data Loss Prevention (DLP) policies to mitigate threats. - Collaborate with Security Operations to enhance security requirements, apply ad-hoc site restrictions, and manage exception requests. - Apply advanced knowledge of SSL inspection to define secure decryption bypass policies without compromising protection. - Resolve DLP and SSL inspection issues by working closely with end users and SOC teams. - Administer and maintain the Netskope tenant, including upgrades and performance optimization. - Design and build a Quantum-ready Internal PKI, addressing gaps in existing infrastructure and integrating with Certificate Lifecycle Management solutions. - Define certificate templates and integrate cloud Hardware Security Modules (HSM) with Certificate Authorities for enhanced cryptographic security. - Establish infrastructure and rulesets for Zero Trust Network Access (ZTNA) and future VPN solutions. - Discover VPN-dependent applications and plan firewall changes to support ZTNA implementation. - Collaborate with stakeholders and application support teams to deliver ZTNA solutions. - Support network segmentation projects with kill-switch requirements for cyber resilience. - Manage EntraID enterprise apps required for Internet Security tools, ensuring SSO, SCIM, and IDP functionality.