Check Point Security Engineer

Check Point Security Engineer

Job Number: 26-04490

Use your skills where innovative technology solutions begin. ECLARO is looking for a Check Point Security Engineer for our client in Buffalo, NY.

ECLARO’s client is a leading technology solutions provider, collaborating with customers to manage their needs and achieve success in their business goals. If you’re up to the challenge, then take a chance at this rewarding opportunity!

Position Overview

• Check Point Security Engineer to join our Network Security team and play a key role in a large-scale Check Point firewall rollout across a global enterprise banking environment.
• Hands-on engineer responsible for designing, implementing, migrating, and supporting Check Point security solutions while ensuring the stability and security of mission-critical infrastructure.
• Has 3+ years of dedicated Check Point engineering experience, thrives in a fast-paced financial services environment, is an exceptional problem solver, and possesses the professionalism and communication skills to succeed within a highly collaborative corporate culture.

Responsibilities

• Lead and support enterprise Check Point firewall deployments and migration projects.
• Participate in a large-scale Check Point rollout, including planning, implementation, testing, and post-deployment support.
• Configure and administer: Check Point Quantum Security Gateways, Security Management Servers, SmartConsole, SmartLog, SmartEvent
• Develop, implement, and optimize firewall policies, NAT, VPNs, routing, and network segmentation.
• Perform firewall upgrades, software updates, and ongoing lifecycle management.
• Troubleshoot complex network and security issues across Layer 2–7 environments.
• Conduct rule reviews, policy optimization, and firewall cleanup activities.
• Support High Availability (ClusterXL) environments and disaster recovery planning.
• Work closely with Network, Infrastructure, Security Operations, Cloud, and Application teams.
• Participate in change management, security reviews, and production implementation windows.
• Create and maintain technical documentation, standards, and operational procedures.
• Participate in an on-call rotation supporting critical production systems.

Required Qualifications

• 3+ years of hands-on Check Point firewall engineering experience.
• Experience implementing or supporting enterprise Check Point firewall rollouts or migration projects.
• Strong knowledge of: Check Point Quantum Security Gateway, SmartConsole, Security Management, ClusterXL, VPN technologies, NAT, Access Policies, Threat Prevention
• Strong networking knowledge including: TCP/IP, Routing, VLANs, DNS, DHCP, BGP and OSPF (preferred)
• Experience troubleshooting complex production issues in enterprise environments.
• Ability to analyze problems quickly and provide practical, long-term solutions.
• Strong documentation and communication skills.
• Comfortable working in structured ITIL and change management environments.
• Check Point Certified Security Administrator (CCSA)
• Check Point Certified Security Expert (CCSE) (strongly preferred)

Preferred Qualifications

• Banking, capital markets, or enterprise financial services industry experience strongly preferred.
• Experience supporting large-scale, enterprise-class financial institutions with complex, highly regulated network security environments.
• Experience with Tufin SecureTrack and SecureChange for firewall policy management, rule lifecycle automation, compliance, and change orchestration.
• Experience supporting highly regulated environments subject to PCI DSS, SOX, FFIEC, or similar regulatory frameworks.
• Familiarity with cloud networking in Azure and AWS.
• Experience with: Cisco networking, F5 Load Balancers, Palo Alto Firewalls, SIEM platforms, Multi-factor authentication
• Experience with automation using PowerShell, Python, or REST APIs.
• Technical Environment: Check Point Quantum Security Gateway, SmartConsole, Security Management Server, SmartLog, SmartEvent, ClusterXL, IPSec VPN, Threat Prevention, Anti-Bot, Anti-Virus, IPS, Identity Awareness, Tufin SecureTrack, Tufin SecureChange, TCP/IP, BGP, OSPF, Azure, AWS, Cisco Networking
• Check Point Certified Master Elite (CCSM Elite)
• CISSP
• CompTIA Security+
• Cisco CCNP Security
• GIAC Security Certifications

Salary

$150000.00-$160000.00/year

If interested, you may contact

Jeanine Hastings

jeanine.hastings@eclaro.com

646-755-9303

Jeanine Hastings | LinkedIn

Equal Opportunity Employer

ECLARO values diversity and does not discriminate based on Race, Color, Religion, Sex, Sexual Orientation, National Origin, Age, Genetic Information, Disability, Protected Veteran Status, or any other legally protected group status, in compliance with all applicable laws.