GMS-Senior-Zscaler and Check Point

Administer and support Zscaler Internet Access (ZIA) features:

• URL Filtering, Web Security, SSL inspection, Malware protection, Advanced Threat features (as licensed)

• Cloud firewall policies, bandwidth control, DLP policy support (if applicable)

Administer and support Zscaler Private Access (ZPA):

• App Segmentation, App Connector configuration, Server Group/Segment Group policies

• Identity-based access enforcement, posture checks (if enabled), user access troubleshooting

Configure and maintain traffic forwarding methods:

• GRE/IPsec tunnels, PAC files, Zscaler Client Connector, proxy chaining (as applicable)

Troubleshoot Zscaler access issues:

• Authentication failures, policy mismatch, SSL inspection problems, application latency and connectivity issues

• Analyze Zscaler logs (web insights, audit logs, connector logs) and coordinate with ISP/Network teams

Integrate with enterprise identity/security tooling:

• SAML/SSO integration (Azure AD/Okta), SCIM provisioning, certificate management

• Log streaming to SIEM (e.g., Sentinel/Splunk/QRadar) and alert tuning

• Perform policy reviews, rulebase cleanup, and implement least privilege access patterns.

Manage Check Point Security Gateways and Management:

• Policy creation/maintenance (NAT, Access Control, Application Control, IPS, Anti-Bot/AV as licensed)

• Object management, service groups, VPN communities, route-based vs domain-based VPN

Administer Check Point VPNs:

• Site-to-site IPsec VPN, remote access VPN (if used), certificate-based authentication

Perform troubleshooting and performance analysis:

• VPN tunnel instability, packet drops, asymmetric routing, NAT issues, throughput constraints

• Use tools: SmartConsole, SmartView/Logs, tcpdump, fw monitor, cpinfo, debugs

Handle firewall lifecycle activities:

• Backup/restore, upgrades/patching, hotfix installation, cluster management (HA/VSX if applicable)

Implement security best practices:

• Rulebase optimization, threat prevention tuning, logging strategy, segmentation and zone design

• Over 4 years of experience in Infrastructure Security, Network Security, or Cloud Security.

• Solid hands-on with ZIA policy administration and troubleshooting

• Working knowledge of ZPA application access design and troubleshooting

• Experience with Zscaler Client Connector, PAC files, GRE/IPsec forwarding

• Understanding of SSL inspection, certificate chains, and browser/app compatibility

• Hands-on policy management using Check Point SmartConsole

• Strong understanding of NAT, VPN, routing, clustering/HA basics

• Strong troubleshooting using fw monitor, logs, packet captures, debug utilities

• Knowledge of threat prevention blades (IPS/AV/Anti-Bot) is a plus

• Hands-on knowledge on Cisco ASA firewall is also preferred.

• Bachelor's degree in Engineering/Computer Science or equivalent experience

Industry certifications (preferred):

• Zscaler (ZIA/ZPA admin certifications) - preferred

• Check Point CCSA/CCSE - preferred

• Network fundamentals: CCNA (nice to have), CCNP Security

• Strong communication skills with ability to explain issues to stakeholders and coordinate across teams

• Willingness to work in 24x7 shift