Network Security Engineer (Level 3)

About the role

A vendor-neutral technology services provider covering cybersecurity, managed services and cloud services is hiring a Level 3 Network Security Engineer in Cape Town, working in the office. The role supports sales teams with technical scoping and solution design, acts as technical champion for Netskope, and serves as the final escalation point for incidents.

Key responsibilities

• Assist sales teams with technical scoping, solution design and client-facing presentations to architect tailored network security solutions.
• Act as technical champion for Netskope and maintain strategic relationships with technology vendors.
• Ensure high customer satisfaction while consistently meeting client SLAs.
• Design, configure and maintain Netskope modules including NG-SWG, CASB, ZTNA and DLP.
• Deploy and optimise CrowdStrike Falcon agents, including detection policies and threat exclusions.
• Administer Mimecast TTP, content filtering and archiving, and maintain DMARC, DKIM and SPF.
• Manage perimeter firewalls, VPNs and network segmentation within SASE architectures.
• Integrate log ingestion and alert telemetry from Netskope, CrowdStrike and Mimecast into a centralised SIEM/SOAR platform.
• Serve as final escalation point for incidents, run root-cause analysis and assist SOC teams.
• Mentor team members, share technical knowledge and keep certifications up to date.

Required profile

• Proven experience as a Level 3 Engineer with expertise in configuring Netskope or similar platforms (Zscaler, Palo Alto Prisma Access), covering SWG, CASB, ZTNA and DLP.
• Strong background supporting sales teams with technical scoping, solution architecture and client presentations.
• Extensive Tier 3 support experience, including complex threats, root-cause analysis and incident support for SOC teams.
• Excellent interpersonal skills for mentoring teams and managing vendor relationships, with a commitment to maintaining certifications.

Required skills

• Netskope, ZTNA, CASB, DLP, SASE, firewall and VPN administration
• CrowdStrike Falcon or SentinelOne, with policy tuning and SIEM/SOAR integration
• Email security protocols (SPF, DKIM, DMARC) and Mimecast
• Incident response and root-cause analysis