Check Point Firewall - L3

Responsibilities and JD in brief along with additional criteria to be considered (if any):

Job Description (JD) for an L3 Check Point Firewall Resource ,

Job Title:

L3 Network Security Engineer Check Point Firewall Specialist

Location:

Bangalore

Experience:

610+ years in Network Security with strong hands-on expertise in Check Point Firewall technologies .

Certifications (Preferred):

• CCSE (Check Point Certified Security Expert)
• CCSA (Check Point Certified Security Administrator)
• Additional certifications like CISSP, ITIL are a plus.

Key Responsibilities:

• Firewall Administration & Troubleshooting
• Configure, administer, and optimize Check Point Firewalls (R80.x, Gaia OS).
• Manage clusters (ClusterXL) , VSX , SmartConsole , SmartEvent , and SmartLog .
• Handle Multi-Domain Security (MDS) and Customer Management Add-on (CMA) environments.
• Policy & Rulebase Management
• Design and implement firewall policies, NAT, VPN (IPSec/SSL), and access controls.
• Perform rulebase optimization , policy tuning, and compliance checks.
• Advanced Security Features
• Implement IPS, Application Control, URL Filtering, SSL Inspection , and Threat Prevention (SandBlast, Anti-Bot).
• Incident Response & RCA
• Provide Level 3 support for escalated issues.
• Conduct root cause analysis and prepare detailed incident reports.
• Deployment & Upgrades
• Perform firmware/software upgrades , patches, and migrations.
• Integrate Check Point with routing (BGP/OSPF) , load balancers , and cloud security (CloudGuard) .
• Documentation & Knowledge Sharing
• Maintain SOPs, configuration baselines, and change logs.
• Mentor L1/L2 teams and drive automation using Python/Ansible/Terraform .
• Compliance
• Ensure adherence to ISO 27001, PCI-DSS, NIST standards.

Technical Skills Required:

• Check Point Firewall (MDS, CMA, VSX, Maestro)
• VPN Technologies (IPSec, SSL)
• Routing & Switching (TCP/IP, BGP, OSPF, VLAN)
• Cloud Security (AWS/Azure/GCP with Check Point CloudGuard)
• Automation & Scripting (Python, Ansible)
• SIEM Integration and Log Analysis

Soft Skills:

• Strong analytical and troubleshooting skills.
• Ability to work under pressure and handle critical escalations.
• Excellent communication and documentation skills.