Firewall Engineer

Role Summary

The Firewall Architect will lead the design, implementation, and optimization of next-generation firewall infrastructures. The primary focus is defining architecture for secure location separation and user-based access control while ensuring alignment with enterprise security frameworks. This role serves as a strategic lead for migrations and the final escalation point for complex technical troubleshooting.

Key Responsibilities

- Design and define the overall firewall architecture, specifically focusing on segmentation policies and user-based firewalling.

- Develop and implement comprehensive concepts for Check Point Identity Awareness and access control.

- Drive large-scale firewall migration projects by coordinating technical implementation and change management.

- Optimize and document firewall rule bases while ensuring policy lifecycle governance using Tufin SecureTrack and SecureChange.

- Oversee performance monitoring, log analysis, and reporting structures to enhance operational visibility.

- Support internal and external security audits from a structural and architectural perspective.

- Provide expert-level troubleshooting for Identity Awareness infrastructure and complex connectivity issues.

Required Skills

- Proven expertise in Check Point Firewall architecture and Identity Awareness.

- Extensive hands-on experience with Cisco network infrastructures and user-based firewalling concepts.

- Deep knowledge of TCP/IP, including routing, protocols, ports, connection mechanisms, and packet sequencing.

- Proficiency in dump analysis and protocol analysis for high-level architectural troubleshooting.

- Advanced understanding of Microsoft Active Directory integration within firewall environments.

- Experience with enterprise-grade Linux (RHEL) and Windows Server environments.

Good-to-have Skills

- Experience with log management and reporting frameworks such as Elasticsearch or ELK.

- Familiarity with automation and policy governance tools like Tufin.

Qualifications

- Relevant certifications in Check Point (CCSE/CCSM) or Cisco (CCNP/CCIE Security) are preferred.

- Bachelors or Masters degree in Computer Science, Information Security, or a related field.

Additional Information

- Project Duration: 612 months.

- Work Setup: 100% Remote.

- Start Date: Immediate.

#FirewallArchitect #CheckPoint #NetworkSecurity #Cisco #CyberSecurity #RemoteJobs #NoidaJobs #InfraArchitecture #IdentityAwareness