Network Security Engineer — Check Point / Fortinet

Neos Talent; New York (NY); Hybrid; USD 110,000 - 170,000; Full time

Benefits offered by this job

Healthcare

Flexible working

Wider benefits package

Job summary

Neos Talent is seeking a hands-on Network Security Engineer in the NYC area to support production firewall, VPN, DNS, and proxy infrastructure. The role emphasizes BAU responsibilities with L3–L4 escalation and ownership of changes in a large financial services environment.

The ideal candidate has recent, practical experience with Check Point, Fortinet/FortiGate, F5 LTM/GTM, Infoblox DNS, and proxy technologies, plus a strong production-support background and a structured approach to incident

Qualifications

• Recent hands‑on experience with Check Point and Fortinet/FortiGate.
• Strong firewall policy, NAT, VPNs, rule reviews and troubleshooting.
• Operational experience with F5 LTM/GTM load balancing.
• Experience supporting DNS/DHCP, ideally Infoblox.
• Exposure to enterprise proxy environments (Blue Coat/McAfee).
• Production support background: incidents, controlled changes, documentation, RCA.
• Comfortable TCP/IP, routing, firewalls, proxies, DNS and app connectivity.
• Able to work in a structured, controlled enterprise environment.

Responsibilities

• Hands-on BAU / L3-L4 network security engineering in production environments.
• Manage incidents, changes, and RCA documentation for critical systems.
• Collaborate on firewall policy changes, VPNs, NAT reviews, and troubleshooting.
• Support DNS/DHCP services and proxy infrastructure in enterprise networks.

Skills

Check Point

Fortinet

VPNs

NAT

Firewall policy changes

F5 LTM/GTM

DNS/DHCP

Infoblox

Proxy environments

Incident management

Tools

Check Point

Fortinet/FortiGate

F5 LTM/GTM

Infoblox

Blue Coat

McAfee

Job description

Network Security Engineer — Check Point / Fortinet

We are supporting a live requirement for a hands-on Security Engineer to join a major financial services environment in the NYC area.

This role is focused on production network security engineering, not general network support or high-level architecture. The ideal profile will have recent, practical experience supporting firewall, proxy, DNS and load-balancing infrastructure in a large enterprise environment.

Role overview:

• Location: NYC / Jersey City area
• Working pattern: Hybrid — typically 3 days per week in office
• Benefits: Healthcare, wider benefits package and flexible working
• Role type: Hands-on BAU / L3-L4 network security engineering

Core experience required:

• Recent hands‑on experience with Check Point and/or Fortinet / FortiGate
• Strong understanding of firewall policy changes, NAT, VPNs, rule reviews and troubleshooting
• Operational experience with F5 LTM / GTM load balancing
• Experience supporting DNS / DHCP, ideally with Infoblox
• Exposure to enterprise proxy environments, ideally Blue Coat and/or McAfee
• Strong production support background, including incidents, controlled changes, documentation and RCA
• Comfortable troubleshooting across TCP/IP, routing, firewalls, proxies, DNS and application connectivity
• Able to work in a structured, highly controlled enterprise environment

Financial services or banking experience would be helpful, but the main priority is recent hands‑on depth across the core technologies.

This is best suited to someone who enjoys being close to the infrastructure, solving production issues, supporting critical systems and taking ownership of technical changes.

#NetworkSecurity #FirewallEngineer #Checkpoint #Fortinet #FortiGate #F5 #Infoblox #BlueCoat #CyberSecurityJobs #JerseyCityJobs #NYCJobs #FinancialServices