ZScaler Firewall Management Engineer (L3)

Xurpas; Quezon City; On-site; PHP 900,000 - 1,300,000; Full time

Benefits offered by this job

HMO

13th Month Pay

Flexible Hours

Job Training

Professional Development

Office Parties

Company Equipment

Job summary

Xurpas is seeking a Senior Zscaler Firewall Management Engineer (L3) to lead the configuration, operation, and optimization of our ZIA/ZPA environments. The role requires hands-on expertise with GRE/IPsec tunnels, SSL inspection, and threat intelligence integration to ensure secure connectivity and threat protection across the enterprise.

The ideal candidate will have 4+ years of experience, strong communication skills for executive updates, and be amenable to hybrid work with one day onsite

Qualifications

• 4+ years of experience with advanced Zscaler configurations and firewall management.
• Proficiency with GRE/IPsec tunnel troubleshooting and latency resolution.
• Experience with ZPA policies and advanced access controls.

Responsibilities

• Configure, manage, and support Zscaler environments including ZIA and ZPA.
• Troubleshoot GRE and IPsec tunnels, latency, and connectivity issues.
• Implement and maintain ZPA policies and access controls.
• Configure traffic forwarding and SSL inspection settings.
• Support firewall management operations including TLS/HTTPS traffic analysis.
• Assist with threat intelligence integration and telemetry workflows.
• Perform root cause analysis for complex network security incidents.
• Collaborate with cross-functional teams to communicate technical solutions.

Skills

Zscaler firewall management

GRE/IPsec tunnel management

ZPA policies

SSL inspection

Threat intel integration

SIEM integration

Cloud firewall analytics

Executive communication

Night shift readiness

Tools

Splunk

Azure Sentinel

Job description

ZScaler Firewall Management Engineer (L3)

Xurpas

Hybrid - Quezon City 3-5 Yrs Exp Bachelor Contract

Job Description

Employee Recognition and Rewards

Employee Recognition Program

Government Mandated Benefits

13th Month Pay

Insurance Health & Wellness

HMO

Others

Office Parties

Company Equipment

Professional Development

Job Training, Professional Development

Work-Life Balance

Flexible Hours

Read More

We are seeking a highly skilled Senior Zscaler Firewall Management Engineer (L3) with strong expertise in cloud security, firewall operations, and secure access technologies. The ideal candidate will be responsible for managing, troubleshooting, and optimizing enterprise firewall and Zscaler environments, ensuring secure connectivity, threat protection, and operational stability across the organization.

Key Responsibilities

• Configure, manage, and support advanced Zscaler environments, including ZIA and ZPA solutions.
• Manage and troubleshoot GRE and IPsec tunnels, including latency issues, tunnel failures, and connectivity problems.
• Implement and maintain Zscaler Private Access (ZPA) policies and advanced access control configurations.
• Configure traffic forwarding policies and SSL inspection settings to secure enterprise traffic.
• Support firewall management operations, including Layer 7 traffic analysis, policy management, and threat intelligence integration.
• Implement deception technology solutions for threat hunting, malware detection, and containment.
• Integrate ZPA with Identity Providers (IdPs) and manage user- and role-based access controls.
• Perform SIEM integrations by forwarding logs from ZIA/ZPA to platforms such as Splunk and Microsoft Sentinel for monitoring and incident response.
• Conduct root cause analysis and provide resolution for complex network and security incidents.
• Evaluate and contribute to enterprise security architecture and cloud security best practices.
• Collaborate with cross-functional teams and communicate technical solutions effectively to stakeholders and leadership.
• Prepare and present security findings, operational reports, and recommendations to technical and non-technical audiences.

Required Qualifications

• Minimum of 4+ years of experience with advanced Zscaler configurations and firewall management operations.
• Expertise in GRE and IPsec tunnel management, including troubleshooting latency and tunnel failures
• Proficiency with Zscaler Private Access (ZPA) policies and advanced access control rules
• Experience with deception technology implementation using Zscaler for threat hunting and malware containment
• Hands-on with traffic forwarding policies and SSL inspection configurations
• Advanced skills in cloud firewall capabilities, including layer 7 traffic analysis and threat intelligence feeds
• Strong understanding of user and role-based access management integrated with ZPA and identity providers (IdPs)
• SIEM integration expertise, forwarding logs from ZIA/ZPA to Splunk or Azure Sentinel for monitoring and incident response
• Ability to perform root cause analysis and evaluate security architecture
• Has good communication skills to clearly convey technical details to executives, collaborate effectively with cross-functional teams, and present security reports.
• Willing to work night shift
• Amenable to hybrid 1x week onsite

Preferred Certifications

• Zscaler Certified Cloud Expert (ZCCE) or equivalent
• EC-Council Certified Ethical Hacker (CEH)
• EC-Council Certified Security Analyst (ECSA)

Tips

Some of our features may not work properly on your device.