Cloudflare SASE / Zero Trust Engineer

Build the baseline: Configure Cloudflare One, including IdP integration, device posture providers, WARP client settings, Logpush to the SIEM/MDR (ReliaQuest), and dedicated egress IPs. - Migrate web security: Design and migrate SWG and DLP policies from Cisco Umbrella, including TLS inspection and Do-Not-Inspect lists. - Roll out WARP in waves: Deploy through Intune in phases, starting with a 1,000-user pilot and then 5,000, 14,000, and 10,000 seats. - Connect sites: Deploy Cloudflare Tunnels and Cloudflare WAN (Magic WAN) IPsec tunnels across data centers and WAN sites. Route site traffic through Cloudflare SWG and validate route propagation and failover. - Replace VPN access: Migrate ZTNA application access policies from Cisco and Fortinet VPN into Cloudflare Access, and run the pilot and full production rollout. - Cut over DNS: Migrate internal DNS zones and records. - Integrate: Connect CrowdStrike (device posture), Microsoft Intune, and Microsoft Purview (label matching for DLP). - Hand off: Run testing playbooks, produce deployment verification reports, and deliver knowledge-transfer workshops to client IT and Security teams.