Richemont Connectivity SASE Architect
- Employment
- Full-Time
- Seniority
- Senior
- Department
- IT & Technology Systems
- Industry
- High Jewelry
- Posted
- Aug 18, 2026
About Richemont
Richemont is one of the world’s foremost luxury groups, stewarding a distinguished portfolio of maisons across jewellery, watchmaking, fashion and accessories, including Cartier, Van Cleef & Arpels, Jaeger-LeCoultre and Montblanc. As an employer, it combines the heritage of artisanal excellence with a forward-looking culture shaped by innovation, client-centricity and responsible business. Its global teams operate in an environment that values craftsmanship, entrepreneurship and collaboration, offering opportunities to grow within iconic maisons and group functions alike. Richemont attracts professionals who aspire to contribute to enduring luxury, preserving rare savoir-faire while helping define the future of high craftsmanship.
Richemont seeks a Connectivity SASE Architect in Moscavide, Portugal to lead cloud-security architecture, Zero Trust frameworks, and global SASE strategy.
Role & Responsibilities
- Architect, design, and govern Richemont's global SASE roadmap with primary focus on enterprise cloud security platforms and cloud-native security services
- Lead design, configuration, and optimisation of Secure Web Gateway, Cloud Access Security Broker, and Zero Trust Network Access solutions to secure web traffic and private application access globally
- Leverage Digital Experience Monitoring capabilities to proactively monitor, analyse, and optimise end-user digital performance, isolating and troubleshooting connectivity and application latency issues
- Design and align SASE strategies with hybrid and multi-cloud connectivity architectures leveraging AWS, GCP, and SD-WAN services
- Define and implement granular, identity-aware security policies, cloud-firewall rules, and access controls across cloud and remote-work environments
- Provide high-level architectural standards for office and branch connectivity, collaborating with local infrastructure teams
- Automate secure network provisioning, policy updates, and deployments using Python, REST APIs, Ansible, or Terraform
- Maintain comprehensive SASE architectural documentation, service definitions, reference designs, and security standards
- Collaborate closely with Cybersecurity, Cloud, Identity (IAM), and Workplace engineering teams to ensure end-to-end integration
Qualifications
- Bachelor's degree or equivalent professional experience
- Subject matter expertise in leading SASE platforms, preferably Zscaler (including ZIA, ZPA, and ZDX)
- Extensive experience with Secure Web Gateway, CASB, URL filtering, SSL inspection, DLP, Cloud Firewall, and Sandboxing
- Demonstrated expertise in Zero Trust Network Access including app connectors, private access policies, and segment groups
- Proficiency with Digital Experience Monitoring, including dashboard development and telemetry analysis
- Solid foundational knowledge of enterprise LAN/WLAN environments
- Strong understanding of cloud networking architectures within AWS and/or GCP
- Familiarity with modern SD-WAN and secure-edge technologies (e.g., Cato Networks, Silver Peak)
- SASE/Cloud Security Certifications highly preferred (e.g., Zscaler ZCCA/ZCCP, Cato SASE Expert)
- Cloud certifications such as AWS Certified Advanced Networking or GCP Cloud Network Engineer are advantageous
Skills
Experience
Extensive experience in network security architecture with a heavy focus on SASE, Zero Trust, and Cloud Security. Proven subject matter expertise in leading SASE platforms with demonstrated capability in designing and deploying enterprise-scale Secure Web Gateway and Zero Trust Network Access solutions. Deep experience with cloud networking and hybrid multi-cloud architectures, as well as proficiency in network automation and Infrastructure as Code tools.
Education
Bachelor's degree or equivalent professional experience
Workplace
This position is based in Moscavide, Lisbon, Portugal, within easy reach of Lisbon.
Culture
Richemont fosters a refined, international workplace where its Maisons preserve exceptional craftsmanship while benefiting from the strength and perspective of a global luxury group. As an employer, it values long-term stewardship, collaboration, innovation, and the development of talent within an environment shaped by heritage, creativity, and high standards.
About Cerulean
Cerulean is the definitive career portal for the global luxury industry. We match exceptional professionals with exclusive opportunities at the world's most prestigious brands. From haute couture and fine watchmaking to prestige beauty, hospitality, and boutique retail, Cerulean centralises luxury employment to help you find the career for which you were destined.
Frequently Asked Questions
The luxury industry is characterised by a diverse and nuanced nomenclature. Esteemed houses frequently employ proprietary terminology, and even within a single organisation like Richemont, titles may vary across global markets to reflect local conventions. To ensure absolute clarity, Cerulean assigns a standardised, industry-coherent canonical title to every listing. However, it is worth noting that this role is functionally synonymous with «Cloud Security Architecture Lead», «Enterprise SASE Strategist», «Zero Trust Network Architect», «Cloud Connectivity Engineer», «Security Access Edge Architect», and other variations. Our sophisticated search architecture anticipates these variations, ensuring that inquiries using related terms will seamlessly yield the exact roles you desire.