CheckPoint Firewall Engineer/Administrator

Job Role: Experienced CheckPoint Firewall Engineer / Administrator

Job Type: Full-Time

Job Location: Onsite (IT Park, Cebu City)

Role Summary

We are seeking an experienced and dedicated Check Point Firewall Engineer / Administrator to join our Network Security team. The ideal candidate will be responsible for the end-to-end management of our Check Point security infrastructure, ensuring optimal performance, high availability, and robust protection against cyber threats. This role requires a strong background in network security, hands-on Check Point expertise, and the ability to provide advanced technical support.

Key Responsibilities

Firewall Management and Configuration

• Design and Implementation: Install, configure, and deploy new Check Point Security Gateways (physical and virtual) and Security Management Servers (SMS/Smart-1/Multi-Domain Server).
• Policy Administration: Develop, implement, manage, and optimize security policies, rules, and objects using the Check Point SmartConsole and SmartDashboard (R80.x experience highly desirable).
• Security Features: Configure and manage advanced Check Point features, including VPNs (IPSec/SSL), Network Address Translation (NAT), Identity Awareness, Application Control, URL Filtering, Intrusion Prevention System (IPS), and Anti-Bot/Anti-Virus blades.
• High Availability & Clustering: Configure and maintain High Availability (HA) and clustering (e.g., ClusterXL) environments to ensure continuous uptime and minimal service disruption.
• Upgrades & Patching: Plan and execute upgrades and patching of Check Point gateways and management servers (e.g., migrations from R77.x to R80.x).

Deployment, Best Practices & Documentation

• Deployment Methods: Understand and execute various Check Point deployment methods, including Security Gateway on GAiA OS, virtual appliances, and cloud deployments.
• Best Practices: Ensure all configurations and operations adhere to industry security best practices and corporate policies, regularly auditing policies for optimization and adherence to a zero-trust model where applicable.
• Automation: Utilize tools like Tufin or AlgoSec for policy management, optimization, auditing, and secure change workflow (a plus).
• Documentation: Create and maintain comprehensive documentation, including network diagrams, standard operating procedures (SOPs), configuration guides, and troubleshooting runbooks.

Support and Troubleshooting (L1, L2, and L3)

• Level 1 & 2 Support: Provide initial response, triage, diagnosis, and resolution for day-to-day firewall incidents, including connectivity issues, policy changes, and performance alerts.
• Level 3 Support & Escalation: Act as a final point of escalation for complex, persistent, or escalated security incidents and performance issues. This includes in-depth analysis of Check Point logs (SmartLog, SmartView Tracker, CLI), packet captures, and routing tables to determine the root cause.
• Change Management: Execute complex firewall changes following strict change management processes, including peer reviews, impact analysis, and back-out plans.
• Monitoring & Reporting: Monitor the health, performance, and security posture of the Check Point infrastructure and generate routine and ad-hoc reports for management.
• On-Call: Participate in an on-call rotation for after-hours support for critical security incidents and major changes.

Required Qualifications

• Experience: Minimum of 4+ years of hands-on experience as a Firewall Engineer/Administrator, with a strong focus on Check Point firewall technologies.
• Technical Knowledge: Expert-level knowledge of TCP/IP, routing protocols (e.g., BGP, OSPF), Layer 2/3 switching, and network troubleshooting tools.
• Platform Proficiency: Proven experience with Check Point GAiA OS and the R80.x management platform.
• Certifications (Highly Preferred):
• Check Point Certified Security Administrator (CCSA)
• Check Point Certified Security Expert (CCSE)

Desired Skills

• Experience with other security technologies (e.g., IDS/IPS, Proxy, Load Balancers, SIEM).
• Scripting skills (e.g., Python, Bash) for automation of repetitive tasks.
• Familiarity with cloud networking and security concepts (AWS, Azure, or GCP).
• Knowledge of compliance standards (e.g., ISO 27001, PCI-DSS).

Job Type: Full-time

Pay: From Php25,000.00 per month

Benefits:

• Opportunities for promotion
• Paid training
• Pay raise
• Promotion to permanent employee

Application Question(s):

• What is your expected salary?

Education:

• Bachelor's (Required)

Experience:

• Checkpoint Firewall Administration: 1 year (Required)

License/Certification:

• Check Point Certified Security Administrator (CCSA) (Required)
• Check Point Certified Security Expert (CCSE) (Preferred)

Location:

• Cebu City 6000 P07 (Required)

Work Location: In person