Cato Networks / SASE Engineer

JOB SUMMARY We are a managed security services provider (MSSP) looking for an experienced Cato Networks engineer to own our SASE practice on an ongoing basis. This is a long-term, part-time relationship, not a one-off project. You will be our go-to person for Cato and the secure-networking work around it across multiple client environments: designing policy, onboarding sites and tenants, hardening deployments, and keeping each environment healthy and current. KEY RESPONSIBILITIES 1. Design and maintain firewall and application-control policy across client tenants 2. Implement TLS inspection, including certificate distribution (MDM/Intune/Jamf/GPO) and handling pinning and breakage 3. Build and tune DLP / Data Control (inline and SaaS Security API) 4. Configure IPS, anti-malware sandboxing, device posture, and Client Connectivity 5. Harden deployments and onboard new sites (socket, IPsec, Client) and new tenants 6. Run a monitor-first rollout: stage, observe, enforce in maintenance windows with documented rollback 7. Set up SIEM / webhook integrations and produce posture reviews and clear reporting 8. Monitor, optimize, troubleshoot, and coordinate with Cato support as needed SKILLS & QUALIFICATIONS **Required:** 1. Hands-on production experience administering Cato Networks / CMA / SASE 2. Deployed TLS inspection rollouts with real-world breakage handling 3. Strong firewall, application-control, and DLP policy skills 4. Site and tenant onboarding experience 5. Disciplined change management: snapshots, staged enforcement, rollback 6. Reliable, clear written communication for a long-term remote relationship **Preferred:** 1. Cato certification (CCSA / CCSE) 2. Multi-tenant MSP / MSSP experience 3. Regulated or healthcare client experience 4. SIEM integration and broader networking depth (routing, DNS, TLS, identity) ADDITIONAL REQUIREMENTS 1. Experience working in an MSSP or multi-tenant environment is a strong plus 2. Strong communication skills and ability to work independently with minimal oversight 3. Responsive and reliable during ET business hours — this role requires timely turnaround on client tickets and requests CONTRACT DETAILS - Position Type: Ongoing, long-term contract - Work Arrangement: Fully remote - Hourly rate - please include your rate and relevant experience in your application BASIC EXPECTATIONS - If you already have a full-time job, then we expect you're too busy to work part-time for us during regular business hours. - Do not contact us outside of Upwork - Your rate must not grossly exceed your public Upwork profile - Do not submit excessively AI-generated applications - No agencies or subcontracting - Do not message us before applying or being invited - No repeated follow-ups if not selected - Use the Upwork time tracker (no manual time) - Do not answer screener questions with "Let's book a call"