GMS - Senior - Zscaler And CheckPoint

At EY, we’re all in to shape your future with confidence.

We’ll help you succeed in a globally connected powerhouse of diverse teams and take your career wherever you want it to go.

Join EY and help to build a better working world.

Infra Security – Zscaler, Check Point_Senior   We are looking for Infra Sec specialist who will be responsible for day-to-day operations, administration, troubleshooting, and optimization of Zscaler Internet Access (ZIA), Zscaler Private Access (ZPA), and Check Point firewalls in a production enterprise environment. The role includes policy management, secure access enablement, incident troubleshooting, performance tuning, upgrades, change execution, and compliance support across on-prem and cloud connectivity.     Key Responsibilities:   Administer and support Zscaler Internet Access (ZIA) features:

URL Filtering, Web Security, SSL inspection, Malware protection, Advanced Threat features (as licensed) Cloud firewall policies, bandwidth control, DLP policy support (if applicable)

App Segmentation, App Connector configuration, Server Group/Segment Group policies Identity-based access enforcement, posture checks (if enabled), user access troubleshooting

GRE/IPsec tunnels, PAC files, Zscaler Client Connector, proxy chaining (as applicable)

Authentication failures, policy mismatch, SSL inspection problems, application latency and connectivity issues Analyze Zscaler logs (web insights, audit logs, connector logs) and coordinate with ISP/Network teams

SAML/SSO integration (Azure AD/Okta), SCIM provisioning, certificate management Log streaming to SIEM (e.g., Sentinel/Splunk/QRadar) and alert tuning Perform policy reviews, rulebase cleanup, and implement least privilege access patterns.

Policy creation/maintenance (NAT, Access Control, Application Control, IPS, Anti-Bot/AV as licensed) Object management, service groups, VPN communities, route-based vs domain-based VPN

Site-to-site IPsec VPN, remote access VPN (if used), certificate-based authentication

VPN tunnel instability, packet drops, asymmetric routing, NAT issues, throughput constraints Use tools: SmartConsole , SmartView/Logs , tcpdump , fw monitor , cpinfo , debugs

Backup/restore, upgrades/patching, hotfix installation, cluster management (HA/VSX if applicable)

Rulebase optimization, threat prevention tuning, logging strategy, segmentation and zone design

Over 4 years of experience in Infrastructure Security, Network Security, or Cloud Security. Solid hands-on with  ZIA policy administration and troubleshooting Working knowledge of ZPA application access design and troubleshooting Experience with Zscaler Client Connector , PAC files, GRE/IPsec forwarding Understanding of SSL inspection , certificate chains, and browser/app compatibility Hands-on policy management using Check Point SmartConsole Strong understanding of NAT, VPN, routing, clustering/HA basics Strong troubleshooting using fw monitor , logs, packet captures, debug utilities Knowledge of threat prevention blades (IPS/AV/Anti-Bot) is a plus Hands-on knowledge on Cisco ASA firewall is also preferred.

Bachelor’s degree in Engineering/Computer Science or equivalent experience Industry certifications (preferred): Zscaler (ZIA/ZPA admin certifications) – preferred Check Point CCSA/CCSE – preferred Network fundamentals: CCNA (nice to have), CCNP Security Strong communication skills with ability to explain issues to stakeholders and coordinate across teams