CheckPoint Firewall Engineer

CheckPoint Firewall Engineer / Administrator Cebu IT Park, Cebu City (Onsite) 5 days ago Overview We are seeking an experienced and dedicated Check Point Firewall Engineer / Administrator to join our Network Security team. The ideal candidate will be responsible for the end-to-end management of our Check Point security infrastructure, ensuring optimal performance, high availability, and robust protection against cyber threats. This role requires a strong background in network security, hands‑on Check Point expertise, and the ability to provide advanced technical support. Key Responsibility - Firewall Management and Configuration Design and Implementation: Install, configure, and deploy new Check Point Security Gateways (physical and virtual) and Security Management Servers (SMS/Smart-1/Multi-Domain Server). High Availability & Clustering: Configure and maintain High Availability (HA) and clustering (e.g., ClusterXL) environments to ensure continuous uptime and minimal service disruption. Upgrades & Patching: Plan and execute upgrades and patching of Check Point gateways and management servers (e.g., migrations from R77.x to R80.x). Policy Administration: Develop, implement, manage, and optimize security policies, rules, and objects using the Check Point SmartConsole and SmartDashboard (R80.x experience highly desirable). Security Features: Configure and manage advanced Check Point features, including VPNs (IPSec/SSL), Network Address Translation (NAT), Identity Awareness, Application Control, URL Filtering, Intrusion Prevention System (IPS), and Anti-Bot/Anti-Virus blades. Key Responsibility - Deployment, Best Practices & Documentation Documentation: Create and maintain comprehensive documentation, including network diagrams, standard operating procedures (SOPs), configuration guides, and troubleshooting runbooks. Automation: Utilize tools like Tufin or AlgoSec for policy management, optimization, auditing, and secure change workflow (a plus). Deployment Methods: Understand and execute various Check Point deployment methods, including Security Gateway on GAiA OS, virtual appliances, and cloud deployments. Best Practices: Ensure all configurations and operations adhere to industry security best practices and corporate policies, regularly auditing policies for optimization and adherence to a zero-trust model where applicable. Key Responsibility - Support and Troubleshooting (L1, L2, and L3) Change Management: Execute complex firewall changes following strict change management processes, including peer reviews, impact analysis, and back-out plans. Monitoring & Reporting: Monitor the health, performance, and security posture of the Check Point infrastructure and generate routine and ad-hoc reports for management. On-Call: Participate in an on-call rotation for after-hours support for critical security incidents and major changes. Level 1 & 2 Support: Provide initial response, triage, diagnosis, and resolution for day-to-day firewall incidents, including connectivity issues, policy changes, and performance alerts. Level 3 Support & Escalation: Act as the final point of escalation for complex, persistent, or escalated security incidents and performance issues. This includes in-depth analysis of Check Point logs (SmartLog, SmartView Tracker, CLI), packet captures, and routing tables to determine the root cause. Required Qualifications Technical Knowledge: Expert-level knowledge of TCP/IP, routing protocols (e.g., BGP, OSPF), Layer 2/3 switching, and network troubleshooting tools. Check Point Certified Security Expert (CCSE) Experience: Minimum of 4+ years of hands‑on experience as a Firewall Engineer/Administrator, with a strong focus on Check Point firewall technologies. Platform Proficiency: Proven experience with Check Point GAiA OS and the R80.x management platform. Check Point Certified Security Administrator (CCSA) Certifications (Highly Preferred): Desired Skills Scripting skills (e.g., Python, Bash) for automation of repetitive tasks. Knowledge of compliance standards (e.g., ISO 27001, PCI-DSS). Experience with other security technologies (e.g., IDS/IPS, Proxy, Load Balancers, SIEM). Familiarity with cloud networking and security concepts (AWS, Azure, or GCP). #J-18808-Ljbffr