The role
Job description
Start: asap
Duration: 30.09.2027, with possibility to extend
Location: Remote position
Description:
We are looking for an experienced Firewall Engineer to support a large-scale network
segmentation and firewall transformation initiative. The role focuses on Check Point firewall
technologies, Identity Awareness, firewall policy optimization, migration support,
troubleshooting, and security operations. The engineer will work closely with network and
security teams to maintain and enhance firewall services while supporting ongoing
infrastructure and location separation projects.
Key Responsibilities
• Define, analyze, and optimize firewall policies and rulesets
• Support network segmentation and location separation initiatives
• Implement and support user-based firewalling using Check Point Identity Awareness
• Coordinate firewall changes, routing updates, and migration activities
• Troubleshoot firewall, routing, and authentication-related issues
• Perform firewall log analysis, reporting, and performance monitoring
• Support internal and external security audits
• Maintain and improve firewall policy management processes and tooling
Required Skills & Experiences:
Firewall & Security
• Expert knowledge of Check Point Firewall technologies
• Strong experience with Check Point Identity Awareness
• Strong cybersecurity and network security background
• Experience with Tufin SecureTrack and SecureChange
Networking
• Strong Cisco networking experience
• Profound TCP/IP knowledge, including:
o Routing
o Protocol analysis
o Port utilization
o Packet sequencing
o Network traffic analysis
Infrastructure
• Microsoft Active Directory (OU structures, groups, authentication concepts)
• Linux administration (RHEL)
• Windows Server administration
Monitoring & Analysis
• Firewall log analysis and troubleshooting
• Log enrichment and reporting using Elasticsearch / ELK Stack
Languages
• Business-fluent English
• German is advantageous
Nice to have
• Automation skills using Ansible and/or Python
• Relevant certifications such as CCSE (Check Point), CCNP Security, NSE or equivalent security
certifications