Talent.com
EY
GMS-Senior-Zscaler and CheckPoint and FiremonEY • Hyderabad / Secunderabad, Telangana, India
GMS-Senior-Zscaler and CheckPoint and Firemon

GMS-Senior-Zscaler and CheckPoint and Firemon

EY • Hyderabad / Secunderabad, Telangana, India
3 days ago
Job description
At EY, we're all in to shape your future with confidence.

We'll help you succeed in a globally connected powerhouse of diverse teams and take your career wherever you want it to go.

Join EY and help to build a better working world.

Infra Security – Zscaler, Check Point_Senior

We are looking for Infra Sec specialist who will be responsible for day-to-day operations, administration, troubleshooting, and optimization of Zscaler Internet Access (ZIA), Zscaler Private Access (ZPA), and Check Point firewalls in a production enterprise environment. The role includes policy management, secure access enablement, incident troubleshooting, performance tuning, upgrades, change execution, and compliance support across on-prem and cloud connectivity.

Key Responsibilities:

  • Administer and support Zscaler Internet Access (ZIA) features:
    • URL Filtering, Web Security, SSL inspection, Malware protection, Advanced Threat features (as licensed)
    • Cloud firewall policies, bandwidth control, DLP policy support (if applicable)

  • Administer and support Zscaler Private Access (ZPA):
    • App Segmentation, App Connector configuration, Server Group/Segment Group policies
    • Identity-based access enforcement, posture checks (if enabled), user access troubleshooting

  • Configure and maintain traffic forwarding methods:
    • GRE/IPsec tunnels, PAC files, Zscaler Client Connector, proxy chaining (as applicable)

  • Troubleshoot Zscaler access issues:
    • Authentication failures, policy mismatch, SSL inspection problems, application latency and connectivity issues
    • Analyze Zscaler logs (web insights, audit logs, connector logs) and coordinate with ISP/Network teams

  • Integrate with enterprise identity/security tooling:
    • SAML/SSO integration (Azure AD/Okta), SCIM provisioning, certificate management
    • Log streaming to SIEM (e.g., Sentinel/Splunk/QRadar) and alert tuning
    • Perform policy reviews, rulebase cleanup, and implement least privilege access patterns.

  • Manage Check Point Security Gateways and Management:
    • Policy creation/maintenance (NAT, Access Control, Application Control, IPS, Anti-Bot/AV as licensed)
    • Object management, service groups, VPN communities, route-based vs domain-based VPN

  • Administer Check Point VPNs:
    • Site-to-site IPsec VPN, remote access VPN (if used), certificate-based authentication

  • Perform troubleshooting and performance analysis:
    • VPN tunnel instability, packet drops, asymmetric routing, NAT issues, throughput constraints
    • Use tools: SmartConsole, SmartView/Logs, tcpdump, fw monitor, cpinfo, debugs

  • Handle firewall lifecycle activities:
    • Backup/restore, upgrades/patching, hotfix installation, cluster management (HA/VSX if applicable)

  • Implement security best practices:
    • Rulebase optimization, threat prevention tuning, logging strategy, segmentation and zone design
Preferred Requirements:

  • Over 4 years of experience in Infrastructure Security, Network Security, or Cloud Security.
  • Solid hands-on with ZIA policy administration and troubleshooting
  • Working knowledge of ZPA application access design and troubleshooting
  • Experience with Zscaler Client Connector, PAC files, GRE/IPsec forwarding
  • Understanding of SSL inspection, certificate chains, and browser/app compatibility
  • Hands-on policy management using Check Point SmartConsole
  • Strong understanding of NAT, VPN, routing, clustering/HA basics
  • Strong troubleshooting using fw monitor, logs, packet captures, debug utilities
  • Knowledge of threat prevention blades (IPS/AV/Anti-Bot) is a plus
  • Hands-on knowledge on Cisco ASA firewall is also preferred.

Qualifications:

  • Bachelor's degree in Engineering/Computer Science or equivalent experience

Industry certifications (preferred):

  • Zscaler (ZIA/ZPA admin certifications) – preferred
  • Check Point CCSA/CCSE – preferred
  • Network fundamentals: CCNA (nice to have), CCNP Security
  • Strong communication skills with ability to explain issues to stakeholders and coordinate across teams
  • Willingness to work in 24x7 shift

EY | Building a better working world

EY is building a better working world by creating new value for clients, people, society and the planet, while building trust in capital markets.

Enabled by data, AI and advanced technology, EY teams help clients shape the future with confidence and develop answers for the most pressing issues of today and tomorrow.

EY teams work across a full spectrum of services in assurance, consulting, tax, strategy and transactions. Fueled by sector insights, a globally connected, multi-disciplinary network and diverse ecosystem partners, EY teams can provide services in more than 150 countries and territories.
Skills Required
Nat, Ips, Cisco Asa Firewall, Tcpdump, Azure Ad, Okta
Create a job alert for this search

GMS-Senior-Zscaler and CheckPoint and Firemon • Hyderabad / Secunderabad, Telangana, India

Similar jobs

Zscaler Principal Consultant

Providence Indiahyderabad, telangana, in

How is this team contributing to the vision of Providence?.We, at Enterprise Services, the healthcare consulting and services arm of Providence India, help build technology solutions that modernize... Show more

 • Promoted

Obsidian SSPM

MethodHubsecunderabad, telangana, in

We are looking for qualified contractors to support the onboarding and implementation of the Obsidian SaaS Security Posture Management (SSPM) solution within our enterprise environment.The objectiv... Show more

 • Promoted

Guidewire BillingCenter

ValueMomentumhyderabad, telangana, in

Guidewire, P&C Insurance, BillingCenter.Are you a Guidewire BillingCenter (BC) configuration developer specialized in customizing and extending the functionality of Guidewire’s BillingCenter applic... Show more

 • Promoted

Zscaler

Tata Consultancy Serviceshyderabad, telangana, in

Location : In Person Interviews on 9th May at below locations.Tata Consultancy Services 415/21-24, Kumaran Nagar, Sholinganallur, Old Mahabalipuram, Chennai - 600 119, Tamil Nadu.TCS, Rapti, Non-SE... Show more

 • Promoted

Vulnerability management - Tenable, Wiz and Application Security (Australia Shift)

ITC Infotechhyderabad, telangana, in

Vulnerability management Tenable, Wiz and Application Security.Technology : Vulnerability management Tenable, Wiz and Application Security.Mandatory Experience : 5 to 6 Years Mandatory.Location : I... Show more

 • Promoted

L3 Monitor

Response Informaticshyderabad, telangana, in

Hybrid (3 days from client office in Hi-Tech city area).Candidate should agree for Face-to-Face interview with client.Deep expertise in Splunk Enterprise Splunk Enterprise Security ES andor Splunk ... Show more

 • Promoted

OBDX Channel and Payment Testing + Mobile Testing

Net2Source (N2S)hyderabad, telangana, in

Join a Global Leader in Workforce Solutions – Net2Source Inc.Operating in 32 countries | 5,500+ Employees.OBDX Channel and Payment Testing + Mobile Testing.Perform end-to-end Functional testing for... Show more

 • Promoted

Senior SailPoint Engineer - ISC

GSPANN Technologies, Inchyderabad, telangana, in

Headquartered in California, U.GSPANN provides consulting and IT services to global clients.We help clients transform how they deliver business value by helping them optimize their IT capabilities,... Show more

 • Promoted

GCP with specialization in Dataproc

Tata Consultancy Serviceshyderabad, telangana, in

GCP with specialization in Dataflow/ Dataproc.Candidates with less experience and 6 years of experience need not apply.GCP with specialization in Dataflow/ Dataproc.Please read Job description befo... Show more

 • Promoted

Digital: Scala with AWS

Tata Consultancy Serviceshyderabad, telangana, in

Digital : Scala with AWS 18-Apr-26 Virtual Drive.Candidates with less experience THAN 4 years of experience need not apply.Please read Job description before Applying.NOTE: If the skills/profile ma... Show more

 • Promoted

SailPoint IIQ Architect

SIROsecunderabad, telangana, in

SailPoint IdentityIQ Architect is responsible to design and lead compliant identity governance solutions for highly regulated sectors like pharmaceuticals, biotech, and medical devices, where syste... Show more

 • Promoted

SailPoint IIQ

Deloittesecunderabad, telangana, in

Deloitte helps organizations prevent cyberattacks and protect valuable assets.We believe in being secure, vigilant, and resilient—not only by looking at how to prevent and respond to attacks, but a... Show more

 • Promoted

High-Ticket Closer (Remote)

FUMEhyderabad, telangana, in
Remote

India’s fastest-growing wellness companies helping thousands of people reverse chronic lifestyle disorders naturally.At FUME, you won’t just “close” —.Understand client challenges and position the ... Show more

 • Promoted

Senior Executive - HSEQ

SmartQhyderabad, telangana, in

SmartQ is redefining how the world experiences food.As a next-generation food-tech innovator, we solve real operational challenges through empathy-led insights and powerful technology.Our mission i... Show more

 • Promoted

Vulnerability Management

Tata Consultancy Serviceshyderabad, telangana, in

Position : Vulnerability Management.Location : In Person Interviews on 18th April at below location.Old Mahabalipuram Road (OMR), Navallur, Chennai - 603103.Hitech City Main Rd, Software Units Layo... Show more

 • Promoted

ScienceLogic Tool SME

Tata Consultancy Serviceshyderabad, telangana, in

Job Description: ScienceLogic Tool SME.Location: Hyderabad/Bangalore/ Chennai.The ideal candidate will act as the.This role involves maintaining the current setup, implementing best practices, and ... Show more

 • Promoted

AWS DevOps+Terraform

Tata Consultancy Serviceshyderabad, telangana, in

AWS DevOps+Terraform 18-Apr-26 Virtual Drive.Candidates with less experience THAN 6 years of experience need not apply.Must have : AWS DevOps+Terraform.Please read Job description before Applying.N... Show more

 • Promoted

SailPoint ISC

Deloittesecunderabad, telangana, in

Deloitte helps organizations prevent cyberattacks and protect valuable assets.We believe in being secure, vigilant, and resilient—not only by looking at how to prevent and respond to attacks, but a... Show more

 • Promoted

Zscaler Solutions Specialist

Tata Consultancy ServicesHyderabad, Republic Of India, IN

Location : In Person Interviews on 9th May at below locations.Tata Consultancy Services 415/21-24, Kumaran Nagar, Sholinganallur, Old Mahabalipuram, Chennai - 600 119, Tamil Nadu.TCS, Rapti, Non-SE... Show more

 • Promoted

Oracle EBS SCM – Distribution Consultant

Tata Consultancy Serviceshyderabad, telangana, in

Oracle EBS SCM – Distribution Consultant.We are looking for experienced professionals in Oracle E-Business Suite (EBS) Supply Chain Management – Distribution to join our growing team!.Role: Oracle ... Show more