Firewall Network Engineer

Quick Facts

• Role: Firewall Network Engineer

• Work mode: Remote

• Availability: 24/7 on-call, including nights, weekends, and public holidays

Description

You will join the Firewall Operations team and operate a firewall product based on Check Point and Fortinet in a regulated banking environment. Under the Lead Firewall Engineer’s technical direction, you will handle the full firewall lifecycle—from Entry into Service to decommissioning—while following documented standards and coordinating with 1st/3rd-level support and other service teams.

Responsibilities

• Configure, operate, and troubleshoot Check Point and Fortinet firewall environments.

• Set up, monitor, and decommission site-to-site VPN connections (IPsec, SSL VPN).

• Manage the rule lifecycle (creation, optimisation, recertification, cleanup) and optimise rulebases to reduce complexity and attack surface.

• Resolve 2nd/3rd-level incidents, support root cause analysis, and fulfill service requests according to standards.

• Plan and execute changes and maintenance in night and weekend windows; present planned changes at the CAB.

• Participate in the 24/7 on-call rotation and support the Lead Firewall Engineer during Major Incidents.

• Tune CheckMK monitoring, track availability and capacity trends, and investigate Splunk log alerts.

• Run vulnerability management (CVE tracking, patching) and support audits and ISMS compliance.

• Keep the CMDB up to date and support licensing and asset lifecycle tracking.

• Develop and maintain runbooks, standards, and the knowledge base; contribute to DR tests and continual improvement.

Requirements

• Proven experience in firewall operations with Check Point (Gaia, R80/R81, MDS/MLM) and Fortinet (FortiOS, FortiGate, FortiManager).

• Deep understanding of site-to-site VPN (IPsec IKEv1/v2, certificate-based authentication, routing over VPN).

• Check Point Certified Security Expert (CCSE) or higher.

• Fortinet NSE 4 or higher (or equivalent).

• Solid ITIL knowledge (Incident, Problem, Change, Configuration Management) in a regulated environment.

• Ability to work independently within defined processes.

• Strong communication and teamwork skills in an international, near-shore setup.

• Fluent English.

Benefits

• Competitive B2B rate, aligned with your experience and the project.

• Long-term projects for leading international organizations.

• Continuous growth through internal DevTalks and online/onsite training.

• Collaborative, international team.

• Optional Medicover, Multisport, and Mindgram packages at preferential rates.

• Free access to the gym at the Q22 office.

• Referral program bonus for successful recommendations.