Check Point Firewall

Job Description

Key Responsibilities

Design and govern scalable Check Point firewall and enterprise load-balancer architectures, including high availability and disaster recovery.

Lead complex implementations, migrations, upgrades, consolidations and policy-transformation initiatives.

Own critical P1 troubleshooting across policy, routing, NAT, VPN, ClusterXL, VSX, MDS/Maestro where deployed, VIPs, persistence, SSL and traffic management.

Define security and engineering standards for segmentation, rule lifecycle, object governance, application delivery and exception handling.

Review and approve high-risk changes, implementation plans, rollback strategies and validation evidence.

Drive rule and configuration optimization, performance tuning, capacity planning and lifecycle risk management.

Design LTM and, where applicable, DNS/GSLB services, SSL offload/bridging, traffic steering and application-delivery patterns.

Integrate platforms with SIEM, monitoring, IAM, DLP, threat-intelligence and automation solutions as required.

Lead RCA reviews, recurring-problem elimination, vendor escalations and technical risk inputs.

Mentor L1/L2 teams and maintain engineering standards, SOPs and knowledge assets.

Support architecture boards, audits and compliance assessments with defensible technical evidence.

Provided valuable support in driving automation initiatives within the project.

Contributed significantly to the development of standardized Documents, processes and frameworks to support practice growth and operational excellence.

͏

Required Technical Skills

Expert Check Point policy, Gaia, ClusterXL, VPN, VSX and MDS knowledge as applicable

Enterprise ADC architecture covering LTM, DNS/GSLB, SSL, persistence, traffic steering and traffic policies/iRules

Advanced packet-flow, performance and failure-domain analysis

Security architecture, Zero Trust, segmentation and control-framework alignment

Automation/API integration and technical governance

Aware of any Workflow AI tool + Any Programing language + Scripting 

Preferred Certifications

Check Point CCSE and CCSM/CCSM Elite or current equivalent

Advanced F5 / Citrix ADC / Radware certification

CISSP / CCSP or equivalent architecture certification