We are looking for a motivated Senior Infrastructure Security Engineer to support the design, implementation and operation of data security controls across cloud and SaaS environments. This role focuses on Cloud Access Security Broker (CASB), Data Security Posture Management (DSPM), and Microsoft 365 (O365) security technologies by leveraging Z Scaler or similar products.
You will work closely with senior engineers to help protect sensitive data, monitor cloud activity, and support compliance initiatives while building hands-on expertise in modern data security practices.
Key Responsibilities
CASB Architectural and Design
Design and implement enterprise-wide data security solutions leveraging CASB, DSPM, and Microsoft 365 security capabilities preferably with Z Scaler
Develop secure architectures for SaaS, IaaS, and PaaS environments with a focus on data visibility and protection.
CASB Operations Support
Create automated monitoring alerts for CASB tools to identify risky user behavior and potential data exposure.
Help create, test, and enforce security policies across cloud applications.
DSPM Support
Support data discovery and classification efforts across cloud and SaaS environments.
Assist in maintaining data classification labels and policies in Microsoft Copilot
Help identify data risks such as overexposure or improper access.
Microsoft 365 Security Administration
Assist in managing Microsoft 365 security and compliance features, including:
Sensitivity labels from Microsoft CoPilot
Secure sharing policies for SharePoint, OneDrive, and Teams
Monitoring & Incident Response
Review security alerts and logs related to data access and sharing.
Assist in investigating potential data security incidents.
Document findings and contribute to incident response activities.
Collaboration & Learning
Work closely with senior engineers, IT teams, and compliance stakeholders.
Participate in knowledge-sharing sessions and training.
Stay up to date on cloud security trends and tools.
The Skills & Expertise You Bring
Required Qualifications
Bachelor's degree in Computer Science, Cybersecurity, Information Technology, or related field (or equivalent experience).
2-5 years of hands on experience in CASB, DSPM or cloud technologies, preferably with Z Scaler.
Basic understanding of cloud computing and SaaS applications.
Familiarity with Microsoft 365 (Exchange Online, SharePoint, OneDrive, Teams).
Strong analytical and problem-solving skills.
Good written and verbal communication skills.
Preferred Qualifications
Experience with Z Scaler for CASB, DSPM and DLP functions
Experience with Azure / AWS to design the appropriate security controls
Experience with Splunk and Entra ID
Relevant certifications (e.g., CISSP, CCSP, Microsoft Security certifications).
Experience with automation and scripting (PowerShell, Python).
Knowledge of API integrations and security orchestration.