Overview

We are looking for an experienced Firewall Engineer to support a large-scale network segmentation and firewall transformation initiative. The role focuses on Check Point firewall technologies, Identity Awareness, firewall policy optimization, migration support, troubleshooting, and security operations. The engineer will work closely with network and security teams to maintain and enhance firewall services while supporting ongoing infrastructure and location separation projects.

Key Responsibilities

• Define, analyze, and optimize firewall policies and rulesets
• Support network segmentation and location separation initiatives
• Implement and support user-based firewalling using Check Point Identity Awareness
• Coordinate firewall changes, routing updates, and migration activities
• Troubleshoot firewall, routing, and authentication-related issues
• Perform firewall log analysis, reporting, and performance monitoring
• Support internal and external security audits
• Maintain and improve firewall policy management processes and tooling

Required Skills

• Firewall & Security
  • Expert knowledge of Check Point Firewall technologies
  • Strong experience with Check Point Identity Awareness
  • Strong cybersecurity and network security background
  • Experience with Tufin SecureTrack and SecureChange
• Networking
  • Strong Cisco networking experience
  • Profound TCP/IP knowledge, including:
    • Routing
    • Protocol analysis
    • Port utilization
    • Packet sequencing
    • Network traffic analysis
• Infrastructure
  • Microsoft Active Directory (OU structures, groups, authentication concepts)
  • Linux administration (RHEL)
  • Windows Server administration
• Monitoring & Analysis
  • Firewall log analysis and troubleshooting
  • Log enrichment and reporting using Elasticsearch / ELK Stack
• Languages
  • Business-fluent English
  • German is advantageous

Other Details

Exp: 7-10 Years

Type: 6 to 12 Months contract

Location: Remote

Note: Pls do not share AP and Hyderabad Candidates. Also LinkedIn ID is must with at least 150+ connections.