Professional Services Consultant, Zero Trust Services

Available Locations: Lisbon, Remote Portugal
Overview:
Cloudflare Professional Services provides consultative and hands-on-keyboard implementation and migration services for enterprise customers. As an Implementation Manager for Zero Trust Services/SASE, you are an individual contributor working in the post-sales landscape, responsible for the technical execution of solutions and guidance to our customers to get the most value possible from their Cloudflare investment. You are a security expert and have experience with ZTNA, Data Loss Prevention, Email security, CASB, SASE.
This position has working hours Monday to Friday 09:00 a.m. to 06:00 p.m. Occasionally, we support our customers during the weekends for specific changes that need to be done outside of their business hours. Travel is expected around 30%.
Responsibilities:

• Plan and deliver timely and organized services for customers, ensure customers see the full value in Cloudflare's products and advice on product best practices.
• Gather business and technical requirements, use cases and any other information required to build, migrate and deliver a solution on behalf of the customer and transition the Cloudflare working environment to the customer. Produce a Solution Design, HLD, LLD, databuilds, procedures, scripts, test plans, drawings, deployment plan, migration plan, as-builts, and any other artifacts necessary to deliver the solution and transition smoothly into the customer's technical teams.
• Implement changes on behalf of the customer in the Cloudflare environment following the customer's change management process. Provide guidance to the customer to configure their CPEs and integration points.
• Troubleshoot implementation issues and collaborate with Customer Support, Engineering and other teams to assist technical escalations.
• Contribute towards the success of the organization through knowledge sharing activities such as contributing to internal and external documentation, answering technical Q&A, and helping to iterate on best practices. Support building operational assets like templates, automation scripts, procedures, workflows, etc.

Experience might include a combination of the skills below:

• 5+ years of experience working in a customer-facing technical implementation or onboarding team, security engineering team, security operations center or other highly technical team
• Layers and protocols of the OSI model, such as TCP/IP, TLS, DNS, HTTP
• Understanding of Internet and Security technologies such as SWG, Sandboxing, Firewalls, DLP, and VPNs
• Understanding of Zero Trust technologies such as Zero Trust Network Access (ZTNA), Secure Web Gateway (SWG), Remote Browser Isolation (RBI), Data Loss Prevention (DLP), CASB and Cloud Email Security
• Understanding of SSO, ADFS, LDAP and SAML and the role of the IdP for SSO. Security aspects of an internet property, such as Firewalls, WAFs, Bot Management, Rate Limiting, (M)TLS
• Performance aspects of an internet property, such as Speed, Latency, Caching, HTTP/2, TLSv1.3
• Network transformation technologies such as MPLS, SD-WAN or WAN Optimization
• Ability to manage a project, work to deadlines, and prioritize between competing demands
• The work will be performed in English. Fluency in a second European Language an advantage

Demonstrated technical experience (hands-on-keyboard) with:

• Experience working with Reverse & Forward proxies with Content Filtering & DLP technologies
• Software distribution & deployment in Microsoft, Mac and Linux environments
• Detailed working knowledge of web based security, network segmentation, security proxies, Firewalls and NGFWs, SSL/IPSec and SSL/TLS VPN appliances & services, etc
• Windows & Linux Server system administration
• Windows, MacOS and Linux client endpoints troubleshooting
• Experience debugging Network connectivity issues using Network Troubleshooting Tools

Preferred but not mandatory:

• Software distribution via Mobile Device Management platforms
• Experience with Microsoft Active Directory, GPO, AzureAD and Intune
• Experience with Zero Trust Implementation and deep understanding of the Zero Trust Frameworks like NIST will be a huge plus
• Experience implementing or understanding of regulatory requirements such as PCI DSS, HIPAA, and SOC-2
• Security skills and certifications such as CISSP, GCIA GCIH, GCFA, GCFE, CCIE, CCNP, JNCIE or MCSE will be a huge plus