Firewall Deployment Engineer -L2

Duties:

• Support and Investigate, document and implement changes needed to accomplish security policy modification requests from business lines. This includes Security class device changes as well as any potential L2/L3 router changes. Work with Information Security to verify changes are needed and conform to Client/Security standards, Develop and/or update the Project Execution Plan.
• Support DMZ creations in Firewall environment both internal and external Advise on any special local regulation / procedures and incorporate them into the Project Execution Plan.
• To include: Creating VLANs for infrastructure connectivity as well as IDS connectivity. Creating VLANs for server connectivity. Trunking VLANs down to server farm switches. Creating and installing Checkpoint objects for initial firewall policy. Modifying routing protocols as needed to accomplish network connectivity both internally and externally including NAT
• Troubleshooting DMZ issues
• Assist and lead troubleshooting connectivity issue as they arise in DMZ Silos. This includes access from Internet and Intranet to Web servers and other DMZ devices.
• Troubleshooting External client connectivity - Support and action troubleshoot connectivity issues as they arise with external clients
• Ensuring Network Management devices have access to Client infrastructure
• Help to resolve any issues that do not allow network management devices to poll Client infrastructure for any failures. Primarily but not limited to routing and filtering issues
• Providing level3 support for network operations advanced services
• Assist Network Operations during production outages as well as knowledge base during their investigations

Expected Skillset:

• Minimum of 2-4 years’ experience
• Background in the financial services industry
• Checkpoint firewall up to and including R80
• CCSA certified
• Secure Platform Gaia
• Checkpoint Smartconsole
• Checkpoint/Cisco/Juniper solution provision
• Checkpoint/Cisco/Juniper troubleshooting
• Checkpoint management server configuration and support
• Proxy platform troubleshooting including McAfee.