Senior Firewall Engineer

Summit Technologies, Inc.

is seeking a highly skilled and experienced

Senior Firewall Engineer

to join our dynamic IT team. The ideal candidate will have over a decade of hands-on experience designing, implementing, and managing CheckPoint firewall solutions. Candidates must have extensive experience with Cisco FirePower remote VPN solutions, Cisco AnyConnect client, and supporting CheckPoint firewalls in AWS.This is a hybrid position located in Suitland, MD. Candidates must be a US citizen eligible for Public Trust.Responsibilities:Architect, design, and implement CheckPoint firewall solutions to meet the security needs of the organization.Configure and manage CheckPoint firewalls, including policy creation, rule management, and system upgrades (hardware and software).Configure, manage, and troubleshoot Cisco FirePower remote VPN solutions and Cisco AnyConnect client deployments.Deploy, configure, and manage CheckPoint firewalls within AWS environments, ensuring secure and efficient cloud operations.Monitor firewall performance and security events, troubleshoot issues, and implement corrective actions.Develop and enforce security policies and procedures to ensure compliance with industry standards and best practices.Lead and participate in security incident response activities, including investigation, mitigation, and reporting.Maintain detailed documentation of firewall configurations, changes, and security incidents.Work closely with other IT teams, including network, systems, and application teams, to ensure seamless integration and operation of security solutions.Provide training and mentorship to junior engineers and other team members on CheckPoint firewall technologies, Cisco FirePower, Cisco AnyConnect, and AWS best practices.Keep abreast of the latest developments in CheckPoint, Cisco, and AWS technologies and network security trends.Provide senior-level, advanced hands-on support for CheckPoint enterprise firewalls, Cisco FirePower VPN appliances, Cisco AnyConnect client, remote (VPN) management solutions (e.g., two-factor authentication), AAA servers, log reporting, firewall audits, and vulnerability management.Utilize network monitoring tools such as SolarWinds, Wireshark, TcpDump, fw monitor, snoop, and similar network packet capturing tools.Required Skills & Qualifications:10 years of experience designing scalable and reliable network infrastructure.Ability to take on technical leadership roles with minimal supervision, leveraging experience with enterprise security solutions, IPv4 and dynamic routing, and integrated firewall technologies such as PKI, OCSP responders, AD, LDAP, YubiKey and SecureID servers.Advanced troubleshooting skills to manage incidents and problems, oversee escalations.A solid understanding of encryption technologies.Be an expert in all aspects of firewall device installations, maintenance, and usage of large-scale local and wide area networks.Manage network performance and maintain a high security posture.Demonstrate excellent communication, documentation, and presentation skills.Show organizational and project planning skills by being a visionary and self-starter, taking charge of current operations from a high level, covering all aspects of security operations including, but not limited to: patch management, vulnerability remediation, network security designs, endpoint security, client-to-site and site-to-site VPNs, IPSEC tunnels, CheckPoint firewall clustering, CheckPoint security management servers, Cisco AnyConnect profiles, Cisco FirePower Clustering, wireless technologies, McAfee Web Proxy, and CheckPoint URL filtering blade, project management, change management, configuration management, and scheduling.A deep understanding of network security principles, excellent problem-solving skills, and the ability to work in a fast-paced environment.Hands on experience using MS Teams, MS Visio, MS Excel, MS PowerPoint and Network monitoring tools (i.e. SolarWinds).Desired Skills & Qualifications:Excellent analytical and problem-solving skills.Strong communication and interpersonal skills.Ability to work independently and as part of a team.Desired Certifications:CheckPoint Certified Security Administrator (CCSA) or CheckPoint Certified Security Expert (CCSE).Cisco Certified Network Professional (CCNP) Security or equivalent.AWS Certified Solutions Architect or AWS Certified Security Specialty.Education:Bachelor’s degreeSecurity Clearance:Ability to obtain & maintain a Public Trust clearance.If you feel you are qualified and want to be considered for this position, please supply the following to: 1dc9g8ph9xerp3tjr4m9g8xate@crelate.net , and please put the job number

‘6768 ’ in the subject line:Updated resume including MM/YYYY for each employer.Best times/dates to interview (plus phone # you can best be contacted at).Availability to start once given formal offers.Summit Technologies Inc. appreciates your interest. We will contact the best matching prospects and will consider you for future opportunities. We will not submit your resume without your prior knowledge and consent. We are an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, gender, sexual orientation, gender identity, national origin, disability or veteran status.