PS Zero Trust / SASE Engineer (Cloudflare One)

France | Oct. 28, 2026

Report as Closed

Company: Brixio

Country: France

Type: Onsite

Employment: Full time

Description:

About Brixio

Brixio is a Cloudflare specialist partner: integration, professional services and managed services across the entire platform, from application security to SASE. Brixio is an ASDP certified Cloudflare partner and has been part of the Equans group (Bouygues group) since July 2026, with €18.7 billion in turnover and around 85,000 people.

The team has around thirty engineers spread between Paris, Dubai and a production center in Casablanca. The clients are large accounts and mid-sized companies in France, Europe and the Middle East, as well as entities of the Equans group.

The mission

The PS Zero Trust / SASE engineer deploys Cloudflare One among Brixio's French clients, from technical framing to production. He becomes the Zero Trust operational reference for the France team and takes charge of SASE projects upon his arrival, in particular the internal deployment of Cloudflare One at Brixio and secure remote access to the Equans group's industrial sites.

He works with the Delivery Manager France, who manages the planning, budget and project relations, and with the principal architect, technical referent of the team.

Responsibilities

• Framing:facilitate technical workshops with the client's network, security and workstation teams, then write the detailed design (access architecture, policies, migration plan).
• Cloudflare One deployment: Access (ZTNA), Gateway (SWG and DNS filtering), WARP client, Tunnel, CASB, DLP, navigation isolation (RBI), and according to the Magic WAN, Magic Firewall and Email Security projects.
• Migrations: replace VPNs with ZTNA and existing proxies with Gateway, without interruption of service for users.
• Integrations: identity providers (Entra ID, Okta) in SAML, OIDC and SCIM, posture checks (Intune, EDR), reporting of logs to the client's SIEM.
• OT and industry:securing remote access for service providers and technicians to industrial and technical equipment.
• Security of AI uses:applying Cloudflare One controls to AI uses (AI shadow detection, DLP on prompts, governance of AI applications).
• Delivery and handover : documentation (HLD, LLD, runbooks), recipe with the client, handover to support and the MSP in Casablanca.
• Project rigor: work within the signed scope, report to the Delivery Manager any request outside the scope before processing it, and enter your time each week in Brixio One.
• Industrialization: contribute to reusable deployment models (typical configurations, Terraform, playbooks) to accelerate the following projects.

Requirements

Essential profile

The position requires being operational on SASE from the first weeks. Without SASE experience in production, the application will not be accepted.

• SASE in production: at least 2 years of Zero Trust / SASE deployments with customers, on Cloudflare One, Zscaler (ZIA, ZPA), Netskope, Palo Alto Prisma Access, Cato Networks or Fortinet SASE.
• Experience: 3 to 6 years in network security, integration or services professionals.
• Network fundamentals: TCP/IP, DNS, TLS and PKI, routing, IPsec VPN, proxies, firewalls.
• Identity: SSO in SAML and OIDC, SCIM provisioning, Entra ID or Okta.
• Workstation: Large-scale agent deployment, MDM and posture checks.
• Customer relations: ability to lead a technical workshop alone and write clear documentation.
• Languages: fluent French, professional English (international team).
• Mobility: regular trips to clients in France, occasionally in Europe.

Assets

• Direct experience of Cloudflare One, or Cloudflare certification (otherwise, to be obtained within 90 days of arrival).
• Automation: Terraform, API, Python scripts.
• Knowledge of OT and industrial environments.
• Knowledge of NIS2 and DORA requirements.
• Interest in AI and in the Cloudflare developer platform (AI Gateway, Workers).

Evolution and what Brixio offers

The position starts on SASE but is not limited to it. It then opens up to other Cloudflare products (application security, API Shield, Workers, AI), depending on the person's progress and interest. AI security is largely based on Cloudflare One, which makes this position a natural gateway to Brixio's AI projects.

• Fixed remuneration depending on profile, plus a variable part linked to project objectives (quality, meeting deadlines, time recording).
• Cloudflare certifications supported.
• Various projects with major accounts, mid-sized companies and group entities international.
• A team on a human scale, with the solidity of the Equans group.

Recruitment process

1. Presentation interview with the recruitment firm.
2. Technical interview with the main architect, with a practical SASE case (VPN migration to ZTNA).

Find more English Speaking Jobs in France on Arbeitnow

Apply here:

Web: Apply here

Emails: