Network Engineer, Firewall, Proxy, Cisco Network Services

This is a fully remote position, open to applicants in Czechia.

📋 Description

• Administer and oversee the Check Point perimeter and internal firewalls.

• Manage security policies for firewalls, access rules, NAT configurations, and interface modifications.

• Execute upgrades, patching, maintenance, and lifecycle management for firewalls.

• Implement and evaluate firewall modifications in line with change management protocols, utilizing Tufin where applicable.

• Configure and diagnose VPN solutions, including Site-to-Site VPNs and remote access.

• Conduct reviews of firewall rules and assist in optimizing security policies.

• Oversee the enterprise proxy infrastructure, including changes in configuration, maintenance, and software updates.

• Provide support for non-proxy application integrations, plugins, and S-Box configurations.

• Troubleshoot connectivity challenges and resolve incidents related to firewalls, proxies, and network services.

• Administer the Cisco LAN/WLAN infrastructure, encompassing switches, VLANs, routing, Wireless LAN Controllers (WLCs), and Access Points.

• Carry out firmware upgrades, patching, performance optimization, and troubleshooting across Cisco network environments.

• Support DDI services, including DNS, DHCP, and IP Address Management (IPAM).

• Manage Network Access Control (NAC) solutions and access policies.

• Assist with MPLS connectivity and enterprise network integrations.

• Implement network changes and aid in incident and problem management.

• Collaborate with internal stakeholders to assess requirements and deploy suitable network solutions.

⛳️ Requirements

• Several years of practical experience with Check Point Firewalls, covering security policies, VPNs, upgrades, and troubleshooting.

• Strong understanding of Proxy technologies and network security principles.

• Hands-on experience with Cisco LAN and WLAN technologies, including switching, routing, VLANs, WLCs, and Access Points.

• Solid grasp of VPN, MPLS, NAC, DNS, DHCP, and IPAM services.

• Background in enterprise network infrastructure and IT service management processes.

• Familiarity with change management and structured troubleshooting of networks.

• Proficient in English, both written and spoken.

• Knowledge of Tufin or similar firewall policy management systems is advantageous.

• Check Point CCSA/CCSE or Cisco CCNA/CCNP certification is preferable.

• Experience in large enterprise settings and ITIL-based operations is a plus.

• Proficiency in the Russian language is beneficial.

• Successful candidates must be able to provide a clear criminal record certificate no older than 3 months.

🏝️ Benefits

• Diverse range of activities, tasks, and projects.

• Paid sick leave.

• Vouchers for special occasions (birthday, wedding, and newborn gifts).

• Contributions to wellness initiatives (multisport card).

• Fishing for Friends program – our referral initiative.

• Opportunities for further development and professional growth.

• Friendly and international work environment.

• Company-sponsored events.