GMS-Senior-Zscaler and CheckPoint and Firemon

Infra Security Zscaler Check PointSenior

We are looking for Infra Sec specialist who will be responsible for day-to-day operations administration troubleshooting and optimization of Zscaler Internet Access (ZIA) Zscaler Private Access (ZPA) and Check Point firewalls in a production enterprise environment. The role includes policy management secure access enablement incident troubleshooting performance tuning upgrades change execution and compliance support across on-prem and cloud connectivity.

Key Responsibilities:

• Administer and support Zscaler Internet Access (ZIA) features:
  • URL Filtering Web Security SSL inspection Malware protection Advanced Threat features (as licensed)
  • Cloud firewall policies bandwidth control DLP policy support (if applicable)

• Administer and support Zscaler Private Access (ZPA):
  • App Segmentation App Connector configuration Server Group/Segment Group policies
  • Identity-based access enforcement posture checks (if enabled) user access troubleshooting

• Configure and maintain traffic forwarding methods:
  • GRE/IPsec tunnels PAC files Zscaler Client Connector proxy chaining (as applicable)

• Troubleshoot Zscaler access issues:
  • Authentication failures policy mismatch SSL inspection problems application latency and connectivity issues
  • Analyze Zscaler logs (web insights audit logs connector logs) and coordinate with ISP/Network teams

• Integrate with enterprise identity/security tooling:
  • SAML/SSO integration (Azure AD/Okta) SCIM provisioning certificate management
  • Log streaming to SIEM (e.g. Sentinel/Splunk/QRadar) and alert tuning
  • Perform policy reviews rulebase cleanup and implement least privilege access patterns.

• Manage Check Point Security Gateways and Management:
  • Policy creation/maintenance (NAT Access Control Application Control IPS Anti-Bot/AV as licensed)
  • Object management service groups VPN communities route-based vs domain-based VPN

• Administer Check Point VPNs:
  • Site-to-site IPsec VPN remote access VPN (if used) certificate-based authentication

• Perform troubleshooting and performance analysis:
  • VPN tunnel instability packet drops asymmetric routing NAT issues throughput constraints
  • Use tools: SmartConsole SmartView/Logs tcpdump fw monitor cpinfo debugs

• Handle firewall lifecycle activities:
  • Backup/restore upgrades/patching hotfix installation cluster management (HA/VSX if applicable)

• Implement security best practices:
  • Rulebase optimization threat prevention tuning logging strategy segmentation and zone design

Preferred Requirements:

• Over 4 years of experience in Infrastructure Security Network Security or Cloud Security.
• Solid hands-on with ZIA policy administration and troubleshooting
• Working knowledge of ZPA application access design and troubleshooting
• Experience with Zscaler Client Connector PAC files GRE/IPsec forwarding
• Understanding of SSL inspection certificate chains and browser/app compatibility
• Hands-on policy management using Check Point SmartConsole
• Strong understanding of NAT VPN routing clustering/HA basics
• Strong troubleshooting using fw monitor logs packet captures debug utilities
• Knowledge of threat prevention blades (IPS/AV/Anti-Bot) is a plus
• Hands-on knowledge on Cisco ASA firewall is also preferred.

Qualifications:

• Bachelors degree in Engineering/Computer Science or equivalent experience

Industry certifications (preferred):

• Zscaler (ZIA/ZPA admin certifications) preferred
• Check Point CCSA/CCSE preferred
• Network fundamentals: CCNA (nice to have) CCNP Security
• Strong communication skills with ability to explain issues to stakeholders and coordinate across teams
• Willingness to work in 24x7 shift