Join EY's Infra Security team as a Senior Zscaler and Check Point specialist. You will be instrumental in the daily operations, administration, and optimization of Zscaler Internet Access (ZIA), Zscaler Private Access (ZPA), and Check Point firewalls within a large-scale enterprise environment. This role involves managing security policies, ensuring secure access, resolving incidents, fine-tuning performance, executing upgrades, and supporting compliance across hybrid cloud infrastructures.

EY is dedicated to empowering your career growth in a globally connected firm. We foster diverse teams and provide the opportunities to advance your professional journey and contribute to building a better working world through innovative solutions.

Key responsibilities include administering ZIA features like URL filtering, web security, and SSL inspection, along with cloud firewall policies. You will manage ZPA for app segmentation and identity-based access. This role also covers configuring traffic forwarding methods, troubleshooting Zscaler access issues, and integrating with enterprise identity and security tools.

Furthermore, you will manage Check Point Security Gateways, create and maintain policies, and administer VPNs. Troubleshooting VPN instability and performance issues, along with handling firewall lifecycle activities and implementing security best practices, are also crucial aspects of this position.

We are seeking candidates with over 4 years of experience in Infrastructure Security, Network Security, or Cloud Security, possessing strong hands-on experience with ZIA policy administration and troubleshooting. A solid understanding of ZPA application access design, Zscaler Client Connector, PAC files, and GRE/IPsec forwarding is essential.

Familiarity with SSL inspection, certificate chains, and browser compatibility is expected. Proficiency in Check Point SmartConsole, NAT, VPN, routing, and clustering fundamentals is required. You should be adept at troubleshooting using tools like fw monitor, logs, and packet captures. Knowledge of threat prevention blades and Cisco ASA firewalls is beneficial. A Bachelor’s degree in Engineering/Computer Science or equivalent experience is necessary.