Firewall Deployment Engineer –L3

Duties:

• Firewall change requests - Investigate and document changes needed to accomplish request from business line. This includes any Checkpoint firewall changes as well as router changes. Work with Information security to verify changes are needed and conform to Client standards. Implement change request. Test with clients on the following day and work with client until change is successful. Maintain firewall change logs after every policy change.
• External Client change requests - Investigate and document changes needed to accomplish request from business line. Work with Information security to verify changes are needed and conform to Client standards. Implement change request. Test with clients on the following day and work with client until change is successful.
• DMZ creations in Firewall environment both internal and external -Creating VLANs on ECR's for infrastructure connectivity as well as IDS connectivity. Creating VLANs on ICR's for server connectivity. Trunking VLANs down to server farm switches. Creating and installing Checkpoint objects for initial firewall policy. Modifying routing protocols as needed to accomplish network connectivity both internally and externally.
• Troubleshooting DMZ issues - Troubleshoot connectivity issue as they arise in DMZ Silos. This includes access from Internet and Intranet to Web servers and other DMZ devices.
• Deployment of New installations and cutovers - Interface with Deployment and customers. Assist and make recommendations on network design. Configure and deploy new devices. Troubleshoot connectivity issues and resolve them following Client’s procedures.
• Troubleshooting External client connectivity - Troubleshoot connectivity issue as they arise with external clients.
• Ensuring Network Management devices have access to Client’s infrastructure - Resolve any issues that do not allow network management devices to poll Client infrastructure for any failures. Primarily but not limited to routing and filtering issues.
• Providing level3 support for network operations - Assist Network Operations during production outages as well as knowledge base during their investigations.

Expected Skillset:

• Minimum of 5 years’ experience.
• Background in the financial services industry.
• Checkpoint firewall up to and including R80.
• CCSA certified.
• Secure Platform Gaia.
• Checkpoint Smartconsole.
• Checkpoint/Cisco/Juniper solution provision.
• Checkpoint/Cisco/Juniper troubleshooting.
• Checkpoint management server configuration and support.
• Proxy platform troubleshooting including McAfee.