Firewall Network Engineer

Be | Shaping the Future Poland; Polska; Remote; PLN 90,000 - 130,000; Full time

Job summary

Be | Shaping the Future Poland, part of the Engineering Group, is a technology and business consulting company. You will join our Firewall Operations team and operate a firewall product based on Check Point and Fortinet in a regulated banking environment, working under the technical direction of the Lead Firewall Engineer.

The role covers the full lifecycle from entry into service to decommissioning, including incident resolution, VPN management, rule lifecycle, and DR tests within a dynamic,

Qualifications

• Experience in firewall operations with Check Point Gaia, R80/R81, MDS/MLM and Fortinet FortiOS/FortiGate/FortiManager.
• Deep understanding of site-to-site VPN (IPsec IKEv1/v2, cert-based authentication, VPN routing).
• Check Point CCSE and Fortinet NSE 4+ certifications or equivalent.
• Solid ITIL knowledge (Incident, Problem, Change, Configuration) in a regulated environment.
• Ability to work independently within defined processes.
• Strong communication in an international, near-shore setup.

Responsibilities

• Configure, operate and troubleshoot Check Point and Fortinet firewall environments.
• Set up, monitor and decommission site-to-site VPN connections (IPsec, SSL VPN).
• Manage the rule lifecycle and optimise rulebases to reduce complexity and attack surface.
• Resolve 2nd/3rd-level incidents and support root cause analysis.
• Plan and execute changes and maintenance in night and weekend windows; present planned changes at the CAB.
• Take part in the 24/7 on-call rotation and support the Lead Firewall Engineer during Major Incidents.
• Tune CheckMK monitoring, track availability and capacity trends; investigate Splunk alerts.
• Run vulnerability management and support audits and ISMS compliance.
• Keep the CMDB up to date and support licensing and asset lifecycle tracking.
• Develop and maintain runbooks, standards and the knowledge base; contribute to DR tests and continual improvement.

Skills

Firewall operations

Check Point Gaia/R80/R81

Fortinet FortiOS

ITIL knowledge

Independent working

Communication skills

Education

CCSE

NSE 4

Tools

Check Point

Fortinet

CCSE

NSE 4

Splunk

CheckMK

Job description

Be | Shaping the Future Poland, part of the Engineering Group, is a technology and business consulting company founded in 2013. We help organisations in financial services and other industries turn complex requirements into reliable, end-to-end solutions, drawing on expertise in software engineering, cloud and infrastructure, data, and quality assurance.

Location: Remote

Availability for 24/7 on-call, including nights, weekends and public holidays, and for work outside regular hours when needed

You will join our Firewall Operations team and operate a firewall product based on Check Point and Fortinet in a regulated banking environment. Working under the technical direction of the Lead Firewall Engineer, you will cover the full lifecycle, from Entry into Service to decommissioning, following documented standards and working closely with 1st and 3rd-level support and other service teams.

Responsibilities

• Configure, operate and troubleshoot Check Point and Fortinet firewall environments.
• Set up, monitor and decommission site-to-site VPN connections (IPsec, SSL VPN).
• Manage the rule lifecycle (creation, optimisation, recertification, cleanup) and optimise rulebases to reduce complexity and attack surface.
• Resolve 2nd/3rd-level incidents, support root cause analysis, and fulfil service requests according to standards.
• Plan and execute changes and maintenance in night and weekend windows; present planned changes at the CAB.
• Take part in the 24/7 on-call rotation and support the Lead Firewall Engineer during Major Incidents.
• Tune CheckMK monitoring, track availability and capacity trends, and investigate Splunk log alerts.
• Run vulnerability management (CVE tracking, patching) and support audits and ISMS compliance.
• Keep the CMDB up to date and support licensing and asset lifecycle tracking.
• Develop and maintain runbooks, standards and the knowledge base, and contribute to DR tests and continual improvement.

Requirements

• Proven experience in firewall operations with Check Point (Gaia, R80/R81, MDS/MLM) and Fortinet (FortiOS, FortiGate, FortiManager).
• Deep understanding of site-to-site VPN (IPsec IKEv1/v2, certificate-based authentication, routing over VPN).
• Check Point Certified Security Expert (CCSE) or higher and Fortinet NSE 4 or higher (or equivalent).
• Solid ITIL knowledge (Incident, Problem, Change, Configuration Management) in a regulated environment.
• Ability to work independently within defined processes
• Strong team and communication skills in an international, near-shore setup.

Nice to have

• Experience with other firewall products, ITIL certification, German, Ansible/Python, CheckMK.
• Competitive B2B rate, aligned with your experience and the project
• Long-term projects for leading international organisations
• Continuous growth through internal DevTalks, online and onsite
• A collaborative, international team within the Engineering Group
• Optional Medicover, Multisport and Mindgram packages at preferential rates
• Free access to the gym at our Q22 office
• Referral program: a bonus for every successful recommendation