Firewall Network Engineer

Be | Shaping the Future Poland, part of the Engineering Group, is a technology and business consulting company founded in 2013. We help organisations in financial services and other industries turn complex requirements into reliable, end-to-end solutions, drawing on expertise in software engineering, cloud and infrastructure, data, and quality assurance.

Location: Remote

Availability for 24/7 on-call, including nights, weekends and public holidays, and for work outside regular hours when needed

You will join our Firewall Operations team and operate a firewall product based on Check Point and Fortinet in a regulated banking environment. Working under the technical direction of the Lead Firewall Engineer, you will cover the full lifecycle, from Entry into Service to decommissioning, following documented standards and working closely with 1st and 3rd-level support and other service teams.

Responsibilities

• Configure, operate and troubleshoot Check Point and Fortinet firewall environments.
• Set up, monitor and decommission site-to-site VPN connections (IPsec, SSL VPN).
• Manage the rule lifecycle (creation, optimisation, recertification, cleanup) and optimise rulebases to reduce complexity and attack surface.
• Resolve 2nd/3rd-level incidents, support root cause analysis, and fulfil service requests according to standards.
• Plan and execute changes and maintenance in night and weekend windows; present planned changes at the CAB.
• Take part in the 24/7 on-call rotation and support the Lead Firewall Engineer during Major Incidents.
• Tune CheckMK monitoring, track availability and capacity trends, and investigate Splunk log alerts.
• Run vulnerability management (CVE tracking, patching) and support audits and ISMS compliance.
• Keep the CMDB up to date and support licensing and asset lifecycle tracking.
• Develop and maintain runbooks, standards and the knowledge base, and contribute to DR tests and continual improvement.

Requirements

• Proven experience in firewall operations with Check Point (Gaia, R80/R81, MDS/MLM) and Fortinet (FortiOS, FortiGate, FortiManager).
• Deep understanding of site-to-site VPN (IPsec IKEv1/v2, certificate-based authentication, routing over VPN).
• Check Point Certified Security Expert (CCSE) or higher and Fortinet NSE 4 or higher (or equivalent).
• Solid ITIL knowledge (Incident, Problem, Change, Configuration Management) in a regulated environment.
• Ability to work independently within defined processes
• Strong team and communication skills in an international, near-shore setup.
• Fluent English.

Nice to have

• Experience with other firewall products, ITIL certification, German, Ansible/Python, CheckMK.

Why join us

• Competitive B2B rate, aligned with your experience and the project
• Long-term projects for leading international organisations
• Continuous growth through internal DevTalks, online and onsite
• A collaborative, international team within the Engineering Group
• Optional Medicover, Multisport and Mindgram packages at preferential rates
• Free access to the gym at our Q22 office
• Referral program: a bonus for every successful recommendation