System Administrator

Job Description:Network Security Engineering & Firewall Management• Implementation and management of security policies Palo Alto Networks (PAN-OS) enterprise firewalls.• Experience in firewall policy CLI scripting.Route and NAT configuration.• Centralized Management- Panorama centralized configuration, OS upgrades, and threat/application updates across a distributed firewall fleet.• Hardware Expertise: Deployement and maintenance of Palo Alto hardware including the 3000, 5000, and 7000 series platforms.• Traffic Control: complex NAT strategies (Static, Dynamic, Manual) to facilitate secure outbound internet access and internal resource mapping.• Compliance & Auditing: Track policy changes and maintain an accurate security posture across the hybrid network.VPN & Secure Remote Access• Tunnel Orchestration: Configured and troubleshoot IPsec and SSL VPN (Mobile Access) tunnels on Palo Alto platforms.• Remote Workforce Support: Managed and optimized Palo Alto GlobalProtect configurations to ensure seamless, secure connectivity for remote users.Zscaler• Advanced Support: Act as the final escalation point for complex ZIA/ZPA/ZDX connectivity and performance issues.• Policy Management: Configure and optimize ZIA/ZPA policies (SWG, FWaaS, DLP, CASB, URL filtering).• Troubleshooting: Perform deep packet flow analysis (PCAP), debugging, and root cause analysis (RCA) for traffic, authentication (SAML, SCIM, Azure AD), and application access issues.• Infrastructure Management: Deploy and maintain Zscaler App Connectors and ZCC (Zscaler Client Connector).• Security Architecture: Implement and manage Zero Trust Architecture, microsegmentation, and SSL inspection.• Automation: Utilize APIs to automate Zscaler policy management and reporting.Required Skills and Qualifications• Experience: 10+ years in network/security roles, with 4+ years of hands-on Zscaler (ZIA/ZPA) experience.• Technical Expertise: Strong knowledge of TCP/IP, DNS, HTTP/S, SSL/TLS, PAC file management, and VPN technologies.• Certifications: Zscaler Certified Professional (ZCP) or equivalent expertise is preferred.• Scripting: Knowledge of Python or Bash for automation.• Security Frameworks: Experience with firewall migrations and cloud security integration (AWS, Azure, GCP).Operations & Troubleshooting• Lifecycle Management: Coordinated hardware refreshes, firmware patches, and the integration of new corporate technologies.• Incident Resolution: Proactively managed daily ticket queues, ensuring all technical issues were resolved within defined SLA parameters.• Performance Tuning: Monitor network traffic patterns to implement performance tuning and hardware optimization