Firewall Engineer

Nearshore Portugal; Portugal; Hybrid; EUR 60,000 - 90,000; Full time

Job summary

Nearshore Portugal is seeking an experienced Firewall Engineer to design, implement, and optimise our firewall infrastructure across locations. You will define and manage rulesets, support migrations, and act as a technical escalation point for complex issues.

The ideal candidate brings deep Check Point Identity Awareness expertise, strong TCP/IP knowledge, and hands-on experience with RHEL and Windows Server environments to ensure secure, scalable networks and governance aligned with security

Qualifications

• Proven expertise in Check Point Firewall functionality and Identity Awareness.
• Hands-on experience with user-based firewalling concepts and Cisco network environments.
• Strong background in cybersecurity and secure infrastructure design.
• Deep knowledge of TCP/IP, including routing, protocols, ports, connection mechanisms, packet sequencing, and dump analysis.
• Expertise in firewall troubleshooting through log and protocol analysis.
• Understanding of Microsoft Active Directory, including reading AD structures, hierarchies.
• Experience with firewall log management, enrichment, analysis, and reporting frameworks (e.g., Elasticsearch, ELK).
• Solid experience with enterprise-grade Linux (RHEL) and Windows Server environments.

Responsibilities

• Define and manage firewall policies, including location-based segmentation and user-based access control.
• Analyse and implement user-based firewalling using Check Point Identity Awareness.
• Operate firewall policy management infrastructure and optimise rule bases with proper documentation.
• Coordinate firewall changes and routing to support migrations, ensuring governance with tools such as Tufin SecureTrack and SecureChange.
• Troubleshoot firewall connectivity and provide expert support for Identity Awareness infrastructure.
• Monitor firewall performance, perform log analysis, and generate reporting on firewall operations.
• Support internal and external audits from an architectural and operational perspective.

Skills

Check Point Firewall

Identity Awareness

User-based FW

RHEL Linux

Windows Server

TCP/IP networking

Log analysis

AD structures

Education

Bachelor's degree in CS/IT

Tools

Elasticsearch/ELK

Tufin SecureTrack

SecureChange

Cisco routing

Job description

We are looking for an experienced Firewall Engineer to design, implement, and optimise our firewall infrastructure. This role involves defining and analysing firewall rulesets to support location separation, implementing user-based firewalling with Check Point Identity Awareness, and ensuring alignment with our security frameworks and standards. You will coordinate firewall changes, support migrations, and act as a technical escalation point for complex troubleshooting.

What You Will Do

Define and manage firewall policies, including location-based segmentation and user-based access control.

Analyse and implement user-based firewalling using Check Point Identity Awareness.

Operate firewall policy management infrastructure and optimise rule bases with proper documentation.

Coordinate firewall changes and routing to support migrations, ensuring governance with tools such as Tufin SecureTrack and SecureChange.

Troubleshoot firewall connectivity and provide expert support for Identity Awareness infrastructure.

Monitor firewall performance, perform log analysis, and generate reporting on firewall operations.

Support internal and external audits from an architectural and operational perspective.

What You Bring

Proven expertise in Check Point Firewall functionality and Identity Awareness.

Hands-on experience with user-based firewalling concepts and Cisco network environments.

Strong background in cybersecurity and secure infrastructure design.

Deep knowledge of TCP/IP, including routing, protocols, ports, connection mechanisms, packet sequencing, and dump analysis.

Expertise in firewall troubleshooting through log and protocol analysis.

Understanding of Microsoft Active Directory, including reading AD structures, hierarchies (OU, groups, objects).

Experience with firewall log management, enrichment, analysis, and reporting frameworks (e.g., Elasticsearch, ELK).

Solid experience with enterprise-grade Linux (RHEL) and Windows Server environments.