PS Zero Trust / SASE Engineer (Cloudflare One)

About Brixio

Brixio is a specialist Cloudflare partner: integration, professional services, and managed services across the entire platform, from application security to SASE. Brixio is a certified Cloudflare ASDP partner and, since July 2026, part of the Equans group (Bouygues group), with a turnover of €18.7 billion and approximately 85,000 employees.

The team consists of around thirty engineers spread across Paris, Dubai, and a production center in Casablanca. Clients include large corporations and mid-sized companies in France, Europe, and the Middle East, as well as entities within the Equans group.

The Mission

The PS Zero Trust / SASE Engineer deploys Cloudflare One for Brixio's French clients, from technical scoping to production rollout. They will become the operational Zero Trust reference for the France team and will take charge of SASE projects upon arrival, including the internal deployment of Cloudflare One at Brixio and secure remote access to the Equans group's industrial sites.

They will work with the France Delivery Manager, who oversees planning, budget, and project relationships, and with the Principal Architect, the team's technical lead.

Responsibilities

• Scoping: Facilitate technical workshops with the client's network, security, and workstation teams, then draft the detailed design (access architecture, policies, migration plan).
• Cloudflare One Deployment: Access (ZTNA), Gateway (SWG and DNS filtering), WARP client, Tunnel, CASB, DLP, browsing isolation (RBI), and depending on projects, Magic WAN, Magic Firewall, and Email Security.
• Migrations: Replace VPNs with ZTNA and existing proxies with Gateway, without service disruption for users.
• Integrations: Identity providers (Entra ID, Okta) via SAML, OIDC, and SCIM, posture checks (Intune, EDR), log forwarding to the client's SIEM.
• OT and Industry: Secure remote access for contractors and technicians to industrial and technical equipment.
• AI Usage Security: Apply Cloudflare One controls to AI usage (shadow AI detection, prompt DLP, AI application governance).
• Delivery and Handover: Documentation (HLD, LLD, runbooks), acceptance testing with the client, handover to support and the Casablanca MSP.
• Project Rigor: Work within the signed scope, report any out-of-scope requests to the Delivery Manager before addressing them, and log time weekly in Brixio One.
• Industrialization: Contribute to reusable deployment models (standard configurations, Terraform, playbooks) to accelerate subsequent projects.

Requirements

Essential Profile

The position requires being operational on SASE within the first few weeks. Applications without production SASE experience will not be considered.

• SASE in Production: At least 2 years of Zero Trust / SASE deployments with clients, using Cloudflare One, Zscaler (ZIA, ZPA), Netskope, Palo Alto Prisma Access, Cato Networks, or Fortinet SASE.
• Experience: 3 to 6 years in network security, integration, or professional services.
• Network Fundamentals: TCP/IP, DNS, TLS and PKI, routing, IPsec VPNs, proxies, firewalls.
• Identity: SSO via SAML and OIDC, SCIM provisioning, Entra ID or Okta.
• Workstation: Large-scale agent deployment, MDM, and posture checks.
• Client Relations: Ability to lead a technical workshop independently and write clear documentation.
• Languages: Fluent French, professional English (international team).
• Mobility: Regular travel to clients in France, occasional travel in Europe.

Advantages

• Direct experience with Cloudflare One, or a Cloudflare certification (if not, to be obtained within 90 days of arrival).
• Automation: Terraform, APIs, Python scripts.
• Knowledge of OT and industrial environments.
• Knowledge of NIS2 and DORA requirements.
• Interest in AI and Cloudflare's developer platform (AI Gateway, Workers).

Growth and What Brixio Offers

The role starts with SASE but is not limited to it. It will then expand to other Cloudflare products (application security, API Shield, Workers, AI), depending on the individual's progress and interest. AI security relies heavily on Cloudflare One, making this role a natural entry point into Brixio's AI projects.

• Fixed salary based on profile, plus a variable component linked to project objectives (quality, adherence to deadlines, time logging).
• Cloudflare certifications supported.
• Diverse projects with large corporations, mid-sized companies, and entities of an international group.
• A human-sized team, with the stability of the Equans group.

Recruitment Process

1. Introductory interview with the recruitment agency.
2. Technical interview with the Principal Architect, including a practical SASE case study (VPN migration to ZTNA).