Firewall Engineer

Role Overview

We are looking for an experienced Firewall Engineer to design, implement, and optimise our firewall infrastructure. This role involves defining and analysing firewall rulesets to support location separation, implementing user-based firewalling with Check Point Identity Awareness, and ensuring alignment with our security frameworks and standards. You will coordinate firewall changes, support migrations, and act as a technical escalation point for complex troubleshooting.

What You Will Do

• Define and manage firewall policies, including location-based segmentation and user-based access control.
• Analyse and implement user-based firewalling using Check Point Identity Awareness.
• Operate firewall policy management infrastructure and optimise rule bases with proper documentation.
• Coordinate firewall changes and routing to support migrations, ensuring governance with tools such as Tufin SecureTrack and SecureChange.
• Troubleshoot firewall connectivity and provide expert support for Identity Awareness infrastructure.
• Monitor firewall performance, perform log analysis, and generate reporting on firewall operations.
• Support internal and external audits from an architectural and operational perspective.

What You Bring

• Proven expertise in Check Point Firewall functionality and Identity Awareness.
• Hands-on experience with user-based firewalling concepts and Cisco network environments.
• Strong background in cybersecurity and secure infrastructure design.
• Deep knowledge of TCP/IP, including routing, protocols, ports, connection mechanisms, packet sequencing, and dump analysis.
• Expertise in firewall troubleshooting through log and protocol analysis.
• Understanding of Microsoft Active Directory, including reading AD structures, hierarchies (OU, groups, objects).
• Experience with firewall log management, enrichment, analysis, and reporting frameworks (e.g., Elasticsearch, ELK).
• Solid experience with enterprise-grade Linux (RHEL) and Windows Server environments.

Excited? So are we! Send us your CV and let's start this journey.