Checkpoint Security Engineer

Eclaro’s is searching for a Check Point Security Engineer to join our client’s Network Security team in Buffalo NY and play a key role in a large-scale Check Point firewall rollout across a global enterprise environment. This individual will be a hands-on engineer responsible for designing, implementing, migrating, and supporting Check Point security solutions while ensuring the stability and security of mission-critical infrastructure., * Lead and support enterprise Check Point firewall deployments and migration projects.

• Participate in a large-scale Check Point rollout, including planning, implementation, testing, and post-deployment support.

• Configure and administer:

• Check Point Quantum Security Gateways
• Security Management Servers
• SmartConsole
• SmartLog
• SmartEvent

Develop, implement, and optimize firewall policies, NAT, VPNs, routing, and network segmentation.

Perform firewall upgrades, software updates, and ongoing lifecycle management.

Troubleshoot complex network and security issues across Layer 2-7 environments.

Conduct rule reviews, policy optimization, and firewall cleanup activities.

Support High Availability (ClusterXL) environments and disaster recovery planning.

Work closely with Network, Infrastructure, Security Operations, Cloud, and Application teams.

Participate in change management, security reviews, and production implementation windows.

Create and maintain technical documentation, standards, and operational procedures.

Participate in an on-call rotation supporting critical production systems.

The ideal candidate will have dedicated Check Point engineering experience, thrives in a fast-paced financial services environment, is an exceptional problem solver, and possesses the professionalism and communication skills to succeed within a highly collaborative corporate culture., * Hands-on Check Point firewall engineering experience.

• Experience implementing or supporting enterprise Check Point firewall rollouts or migration projects.

• Strong knowledge of:

• Check Point Quantum Security Gateway
• SmartConsole
• Security Management
• ClusterXL
• VPN technologies
• NAT
• Access Policies
• Threat Prevention

Strong networking knowledge including:

• TCP/IP
• Routing
• VLANs
• DNS
• DHCP
• BGP and OSPF (preferred)

Experience troubleshooting complex production issues in enterprise environments.

Ability to analyze problems quickly and provide practical, long-term solutions.

Strong documentation and communication skills.

Comfortable working in structured ITIL and change management environments.

Preferred Qualifications

• Banking, capital markets, or enterprise financial services industry experience strongly preferred.
• Experience supporting large-scale, enterprise-class financial institutions with complex, highly regulated network security environments.
• Experience with Tufin SecureTrack and SecureChange for firewall policy management, rule lifecycle automation, compliance, and change orchestration.
• Experience supporting highly regulated environments subject to PCI DSS, SOX, FFIEC, or similar regulatory frameworks.
• Familiarity with cloud networking in Azure and AWS.

• Experience with:

• Cisco networking
• F5 Load Balancers
• Palo Alto Firewalls
• SIEM platforms
• Multi-factor authentication

Experience with automation using PowerShell, Python, or REST APIs.

Technical Environment

• Check Point Quantum Security Gateway
• SmartConsole
• Security Management Server
• SmartLog
• SmartEvent
• ClusterXL
• IPSec VPN
• Threat Prevention
• Anti-Bot
• Anti-Virus
• IPS
• Identity Awareness
• Tufin SecureTrack
• Tufin SecureChange
• TCP/IP
• BGP
• OSPF
• Azure
• AWS
• Cisco Networking

Required Certifications

One or more of the following:

• Check Point Certified Security Administrator (CCSA)
• Check Point Certified Security Expert (CCSE) (strongly preferred)

Preferred Certifications

• Check Point Certified Master Elite (CCSM Elite)
• CISSP
• CompTIA Security+
• Cisco CCNP Security
• GIAC Security Certifications