Firewall Network Engineer (Check Point & Fortinet)

Quick Facts

• Project: long-term B2B collaboration

• Work mode: fully remote

• Availability: 5 days per week

Description

You will administer and maintain production firewall infrastructure based on Check Point and Fortinet. The role includes configuring and troubleshooting both platforms, managing VPN connections (IPsec and SSL-VPN), and owning the firewall rule lifecycle (creation, optimization, review, cleanup). You will also support 2nd/3rd level incident resolution, perform monitoring and log analysis, manage vulnerabilities/CVEs, and participate in DR/BC testing.

Responsibilities

• Administer, maintain, configure, and diagnose Check Point and Fortinet firewalls in production

• Manage Site-to-Site VPN connections using IPsec and SSL-VPN

• Create, optimize, review, and organize firewall rules

• Analyze security policies and optimize configurations to reduce complexity and risk

• Support technical incidents as 2nd/3rd level and participate in Major Incident resolution

• Plan and execute changes, updates, and maintenance work (including outside standard hours)

• Coordinate with Network, Security, and other infrastructure teams

• Monitor with CheckMK and analyze security logs/events in Splunk

• Manage vulnerabilities: CVE analysis, patch assessment, and remediation coordination

• Monitor performance and availability (bandwidth, ports, CPU, memory)

• Maintain technical documentation, operational standards, procedures, and configuration data in CMDB

• Support internal/external audits and security compliance activities

• Identify opportunities for optimization and automation of operational processes

• Participate in Disaster Recovery and Business Continuity testing

Requirements

• Several years of experience in firewall administration/maintenance

• Practical, hands-on knowledge of both Check Point and Fortinet (both required)

• Check Point Gaia (R80/R81) and MDS/MLM knowledge

• FortiOS, FortiGate, and FortiManager knowledge

• Strong VPN knowledge: IPsec, IKEv1/v2, certificate-based authentication, and VPN routing

• Check Point CCSE (or higher) and Fortinet NSE 4 (or higher) certificates (or equivalents)

• Experience supporting production environments and handling 2nd/3rd level incidents

• ITIL knowledge: Incident, Problem, Change, Release, Configuration Management

• Infrastructure security knowledge, including vulnerability management and security incident handling

• Ability to create/update technical documentation and operational procedures

• Independent troubleshooting and rapid response capability

• Ability to work with international teams and stakeholders

• Fluent English for communication and technical documentation

• Availability for maintenance and changes outside standard hours (nights/weekends)

• Willingness to complete Background Check security verification

• German is a plus

Benefits

• Work with advanced network security solutions from Check Point and Fortinet

• Technical growth in Network Security and Firewall Administration

• Collaboration with international expert teams

• Long-term project with potential extension

• 100% remote work

• Attractive financial conditions

• Multisport Plus and private medical care