Senior Zscaler & Check Point Consultant

Job Summary

We are looking for Infra Sec specialist who will be responsible for day-to-day operations, administration, troubleshooting, and optimization of Zscaler Internet Access (ZIA), Zscaler Private Access (ZPA), and Check Point firewalls in a production enterprise environment. The role includes policy management, secure access enablement, incident troubleshooting, performance tuning, upgrades, change execution, and compliance support across on-prem and cloud connectivity.

Key Responsibilities

• Administer and support Zscaler Internet Access (ZIA) features:
  • URL Filtering, Web Security, SSL inspection, Malware protection, Advanced Threat features (as licensed)
  • Cloud firewall policies, bandwidth control, DLP policy support (if applicable)
• Administer and support Zscaler Private Access (ZPA):
  • App Segmentation, App Connector configuration, Server Group/Segment Group policies
  • Identity-based access enforcement, posture checks (if enabled), user access troubleshooting
• Configure and maintain traffic forwarding methods:
  • GRE/IPsec tunnels, PAC files, Zscaler Client Connector, proxy chaining (as applicable)
• Troubleshoot Zscaler access issues:
  • Authentication failures, policy mismatch, SSL inspection problems, application latency and connectivity issues
  • Analyze Zscaler logs (web insights, audit logs, connector logs) and coordinate with ISP/Network teams
• Integrate with enterprise identity/security tooling:
  • SAML/SSO integration (Azure AD/Okta), SCIM provisioning, certificate management
  • Log streaming to SIEM (e.g., Sentinel/Splunk/QRadar) and alert tuning
  • Perform policy reviews, rulebase cleanup, and implement least privilege access patterns.
• Manage Check Point Security Gateways and Management:
  • Policy creation/maintenance (NAT, Access Control, Application Control, IPS, Anti-Bot/AV as licensed)
  • Object management, service groups, VPN communities, route-based vs domain-based VPN
• Administer Check Point VPNs:
  • Site-to-site IPsec VPN, remote access VPN (if used), certificate-based authentication
• Perform troubleshooting and performance analysis:
  • VPN tunnel instability, packet drops, asymmetric routing, NAT issues, throughput constraints
  • Use tools: SmartConsole, SmartView/Logs, tcpdump, fw monitor, cpinfo, debugs
• Handle firewall lifecycle activities:
  • Backup/restore, upgrades/patching, hotfix installation, cluster management (HA/VSX if applicable)
• Implement security best practices:
  • Rulebase optimization, threat prevention tuning, logging strategy, segmentation and zone design

Preferred Requirements

• Over 4 years of experience in Infrastructure Security, Network Security, or Cloud Security.
• Solid hands-on with ZIA policy administration and troubleshooting
• Working knowledge of ZPA application access design and troubleshooting
• Experience with Zscaler Client Connector, PAC files, GRE/IPsec forwarding
• Understanding of SSL inspection, certificate chains, and browser/app compatibility
• Hands-on policy management using Check Point SmartConsole
• Strong understanding of NAT, VPN, routing, clustering/HA basics
• Strong troubleshooting using fw monitor, logs, packet captures, debug utilities
• Knowledge of threat prevention blades (IPS/AV) is a plus
• Hands-on knowledge on Cisco ASA firewall is also preferred.

Qualifications

• Bachelors degree in Engineering/Computer Science or equivalent experience

Industry certifications (preferred):

• Zscaler (ZIA/ZPA admin certifications) preferred
• Check Point CCSA/CCSE preferred
• Network fundamentals: CCNA (nice to have), CCNP Security
• Strong communication skills with ability to explain issues to stakeholders and coordinate across teams
• Willingness to work in 24x7 shift