CheckPoint Firewall Engineer

CEBU IT PARK, CEBU CITY (ONSITE)

1 day ago

Overview

We are seeking an experienced and dedicated Check Point Firewall Engineer / Administrator to join our Network Security team. The ideal candidate will be responsible for the end-to-end management of our Check Point security infrastructure, ensuring optimal performance, high availability, and robust protection against cyber threats. This role requires a strong background in network security, hands-on Check Point expertise, and the ability to provide advanced technical support.

Key Responsibility - Firewall Management and Configuration

Design and Implementation: Install, configure, and deploy new Check Point Security Gateways (physical and virtual) and Security Management Servers (SMS/Smart-1/Multi-Domain Server).

High Availability & Clustering: Configure and maintain High Availability (HA) and clustering (e.g., ClusterXL) environments to ensure continuous uptime and minimal service disruption.

Upgrades & Patching: Plan and execute upgrades and patching of Check Point gateways and management servers (e.g., migrations from R77.x to R80.x).

Policy Administration: Develop, implement, manage, and optimize security policies, rules, and objects using the Check Point SmartConsole and SmartDashboard (R80.x experience highly desirable).

Security Features: Configure and manage advanced Check Point features, including VPNs (IPSec/SSL), Network Address Translation (NAT), Identity Awareness, Application Control, URL Filtering, Intrusion Prevention System (IPS), and Anti-Bot/Anti-Virus blades.

Key Responsibility - Deployment, Best Practices & Documentation

Documentation: Create and maintain comprehensive documentation, including network diagrams, standard operating procedures (SOPs), configuration guides, and troubleshooting runbooks.

Automation: Utilize tools like Tufin or AlgoSec for policy management, optimization, auditing, and secure change workflow (a plus).

Deployment Methods: Understand and execute various Check Point deployment methods, including Security Gateway on GAiA OS, virtual appliances, and cloud deployments.

Best Practices: Ensure all configurations and operations adhere to industry security best practices and corporate policies, regularly auditing policies for optimization and adherence to a zero-trust model where applicable.

Key Responsibility - Support and Troubleshooting (L1, L2, and L3)

Change Management: Execute complex firewall changes following strict change management processes, including peer reviews, impact analysis, and back-out plans.

Monitoring & Reporting: Monitor the health, performance, and security posture of the Check Point infrastructure and generate routine and ad-hoc reports for management.

On-Call: Participate in an on-call rotation for after-hours support for critical security incidents and major changes.

Level 1 & 2 Support: Provide initial response, triage, diagnosis, and resolution for day-to-day firewall incidents, including connectivity issues, policy changes, and performance alerts.

Level 3 Support & Escalation: Act as a final point of escalation for complex, persistent, or escalated security incidents and performance issues. This includes in-depth analysis of Check Point logs (SmartLog, SmartView Tracker, CLI), packet captures, and routing tables to determine the root cause.

Required Qualifications

Technical Knowledge: Expert-level knowledge of TCP/IP, routing protocols (e.g., BGP, OSPF), Layer 2/3 switching, and network troubleshooting tools.

Check Point Certified Security Expert (CCSE)

Experience: Minimum of 4+ years of hands-on experience as a Firewall Engineer/Administrator, with a strong focus on Check Point firewall technologies.

Platform Proficiency: Proven experience with Check Point GAiA OS and the R80.x management platform.

Check Point Certified Security Administrator (CCSA)

Certifications (Highly Preferred):

Desired Skills

Scripting skills (e.g., Python, Bash) for automation of repetitive tasks.

Knowledge of compliance standards (e.g., ISO 27001, PCI-DSS).

Experience with other security technologies (e.g., IDS/IPS, Proxy, Load Balancers, SIEM).

Familiarity with cloud networking and security concepts (AWS, Azure, or GCP).

If you are interested in this position, please email to and CC