Non-Employee Cybersecurity Engineer

EPITEC is seeking a Cyber Security Engineer to design and implement security solutions that align with corporate technology goals and risk tolerance levels. The role involves analyzing cybersecurity technologies, managing relationships with security partners, and ensuring compliance with audit and regulatory requirements.

Responsibilities:

• Analyzes, designs and develops security solutions with Cybersecurity architects to ensure it is consistent with corporate technology goals and risk tolerance levels. Designs and engineers solutions to align with the Cybersecurity Strategy
• Serves as the subject matter expert for supported security technologies, and act as subject matter expert during escalations
• Validates current and future state architectural models to assess impact across assigned Cybersecurity technology systems. Oversees security requirements and technical specifications to guide project implementation towards successful solution delivery
• Provides direction to infrastructure, operations, data and application developments groups throughout transitioning phase, implementation in production and beyond
• Manages relationships with security partners and vendors. Builds and maintains effective relationships with management, peers, project managers and internal customer
• Maintains knowledge of engineering next-gen designs, security trends, threats and attack techniques
• Ensures compliance to audit, regulatory and legal requirements

Requirements:

• Experience in managing Netskope SWG, CASB, DLP policies and configurations
• Experience monitoring, reporting, and tuning security policies
• Ability to architect, deploy, and optimize Netskope solutions for enterprise-scale environments
• Hands-on experience with Broadcom Web Proxy and Web Security Services (WSS)
• Proficient in configuration and maintaining policies, content filtering, and secure web access
• Experience with migration, upgrade, and integration projects involving Broadcom solutions
• Experience with Palo Alto Networks firewall policies, including URL/content filtering
• Strong knowledge of Cisco ASA/Firepower platforms, AnyConnect VPN, and Palo Alto Networks Global Protect
• Experience with network segmentation, access control, and policy enforcement for secure connectivity
• Experience with Secure Remote Access platform migration
• Ability to design, implement, and maintain enterprise security policies across multiple platforms
• Strong understanding of SWG, CASB, and Firewall best practices for cloud, on-premise, and hybrid environments
• Capable of evaluating policy impact and implementing tuning to minimize business disruption
• Proficient in Python for automation, reporting, and security tool integration
• Experience with Ansible for configuration management and automated deployments
• Familiarity with Github for version control and collaborative development
• Ability to design and implement complex security architectures to meet business and compliance requirements
• Experience with large-scale migrations, integrations, and cross-platform security solutions
• Understanding of security protocols, encryption standards, and secure network architectures
• Experience with AWS services and cloud security best practices
• Ability to design, monitor, and secure cloud-based workloads and applications
• Experience creating, modifying, and optimizing dashboards in Grafana and Solarwinds
• Strong problem-solving skills and ability to analyze complex technical incidents
• Proficient in root cause analysis for network, policy, or configuration related issues
• Ability to correlate data from multiple sources to identify trends and anomalies
• Comfortable navigating and performing administrative tasks in a Linux shell environment
• Strong documentation and communication skills for both technical and non-technical audiences
• Ability to mentor and guide junior engineers
• Strong relationship management skills with business partners, vendors, and internal stakeholders
• Familiarity with regulatory frameworks and audits, specifically PCI-DSS and SOX