Check Point Firewall

Wipro; Bengaluru; Vor Ort; INR 1.800.000 - 3.000.000; Vollzeit

Zusammenfassung

Wipro in Bengaluru, India, is seeking a senior security architect to design and govern Check Point firewall and enterprise load-balancer architectures, ensuring high availability and disaster recovery. You will lead complex deployments, migrations and policy transformations while upholding security standards across segmentation and governance frameworks.

The role requires expertise in Check Point policy, Gaia, VPN, VSX, MDS/Maestro and LTM, DNS/GSLB, SSL offload, and automation integration.

Qualifikationen

• Must have expert Check Point policy, Gaia and related VPN/ClusterXL knowledge.
• Experience with enterprise ADC architectures including LTM, DNS/GSLB and SSL offload.
• Strong automation/API integration and governance capabilities.
• Evidence-based approach to security architecture and zero-trust principles.

Aufgaben

• Design and govern scalable Check Point firewall and enterprise load-balancer architectures, including high availability and disaster recovery.
• Lead complex implementations, migrations, upgrades, consolidations and policy-transformation initiatives.
• Own critical P1 troubleshooting across policy, routing, NAT, VPN, ClusterXL, VSX, MDS/Maestro where deployed, VIPs, persistence, SSL and traffic management.
• Define security and engineering standards for segmentation, rule lifecycle, object governance, application delivery and exception handling.
• Review and approve high-risk changes, implementation plans, rollback strategies and validation evidence.

Kenntnisse

Check Point policy

Gaia

ClusterXL

VPN

VSX

MDS/Maestro

LTM

DNS/GSLB

SSL offload

Traffic steering

iRules

Automation/API integration

Security architecture

Zero Trust

Scripting

Workflow AI tool

Tools

Check Point

Gaia OS

ClusterXL

VSX

MDS/Maestro

Jobbeschreibung

Design and govern scalable Check Point firewall and enterprise load-balancer architectures, including high availability and disaster recovery.

Lead complex implementations, migrations, upgrades, consolidations and policy-transformation initiatives.

Own critical P1 troubleshooting across policy, routing, NAT, VPN, ClusterXL, VSX, MDS/Maestro where deployed, VIPs, persistence, SSL and traffic management.

Define security and engineering standards for segmentation, rule lifecycle, object governance, application delivery and exception handling.

Review and approve high-risk changes, implementation plans, rollback strategies and validation evidence.

Drive rule and configuration optimization, performance tuning, capacity planning and lifecycle risk management.

Design LTM and, where applicable, DNS/GSLB services, SSL offload/bridging, traffic steering and application-delivery patterns.

Integrate platforms with SIEM, monitoring, IAM, DLP, threat-intelligence and automation solutions as required.

Lead RCA reviews, recurring-problem elimination, vendor escalations and technical risk inputs.

Mentor L1/L2 teams and maintain engineering standards, SOPs and knowledge assets.

Support architecture boards, audits and compliance assessments with defensible technical evidence.

Provided valuable support in driving automation initiatives within the project.

Contributed significantly to the development of standardized Documents, processes and frameworks to support practice growth and operational excellence.

Job description:

Job Description

Key Responsibilities

Design and govern scalable Check Point firewall and enterprise load-balancer architectures, including high availability and disaster recovery.

Lead complex implementations, migrations, upgrades, consolidations and policy-transformation initiatives.

Own critical P1 troubleshooting across policy, routing, NAT, VPN, ClusterXL, VSX, MDS/Maestro where deployed, VIPs, persistence, SSL and traffic management.

Define security and engineering standards for segmentation, rule lifecycle, object governance, application delivery and exception handling.

Review and approve high-risk changes, implementation plans, rollback strategies and validation evidence.

Drive rule and configuration optimization, performance tuning, capacity planning and lifecycle risk management.

Design LTM and, where applicable, DNS/GSLB services, SSL offload/bridging, traffic steering and application-delivery patterns.

Integrate platforms with SIEM, monitoring, IAM, DLP, threat-intelligence and automation solutions as required.

Lead RCA reviews, recurring-problem elimination, vendor escalations and technical risk inputs.

Mentor L1/L2 teams and maintain engineering standards, SOPs and knowledge assets.

Support architecture boards, audits and compliance assessments with defensible technical evidence.

Provided valuable support in driving automation initiatives within the project.

Contributed significantly to the development of standardized Documents, processes and frameworks to support practice growth and operational excellence.

Profile description:

Required Technical Skills

Expert Check Point policy, Gaia, ClusterXL, VPN, VSX and MDS knowledge as applicable

Enterprise ADC architecture covering LTM, DNS/GSLB, SSL, persistence, traffic steering and traffic policies/iRules

Advanced packet-flow, performance and failure-domain analysis

Security architecture, Zero Trust, segmentation and control-framework alignment

Automation/API integration and technical governance

Aware of any Workflow AI tool + Any Programing language + Scripting

Preferred Certifications

Check Point CCSE and CCSM/CCSM Elite or current equivalent

Advanced F5 / Citrix ADC / Radware certification

CISSP / CCSP or equivalent architecture certification

Mandatory Skills: Checkpoint Firewalls and VPN .