Track Lead - CheckPoint PPC (Software), Cloud Security

Job Summary

We are seeking an experienced Senior Network and Security Engineer to manage, support, and troubleshoot enterprise network and security infrastructure across data centers, remote sites, cloud platforms, and Equinix environments. The ideal candidate will have strong hands-on expertise in Check Point firewalls, F5 load balancers, BGP routing, enterprise switching, Cisco SD-WAN, Azure networking, certificate management, and Equinix Network Edge. The role requires advanced troubleshooting skills, including packet-level traffic analysis and effective coordination across infrastructure, cloud, application, and security teams.

Key Responsibilities

Check Point Firewall Management Administer and support Check Point R82 firewalls using SmartConsole. Manage centralized data center firewalls and remote-site firewall environments. Implement firewall policy moves, additions, and changes. Perform policy validation, deployment, and post-change verification. Troubleshoot firewall rules, NAT, routing, VPN, and traffic-flow issues. Analyze TCP dumps and firewall logs for low-level network troubleshooting. Support routing configurations, particularly BGP, within firewall environments. Participate in firewall upgrades, maintenance, compliance reviews, and rule-base optimization. Routing and WAN Configure and troubleshoot BGP, static routing, route redistribution, and route selection. Diagnose complex routing, latency, packet-loss, and connectivity issues. Support traditional enterprise routers and WAN connectivity. Apply CCNP-level or higher knowledge of enterprise routing protocols and architecture. Support Cisco SD-WAN, including overlays, underlays, routing, policies, and site connectivity. Coordinate with service providers and internal teams during WAN incidents and network changes. Enterprise Switching Configure, manage, and troubleshoot enterprise LAN and data center switching. Apply advanced switching knowledge, including: VLANs and trunking Spanning Tree Link aggregation Port channels Layer 2 and Layer 3 switching High-availability configurations Troubleshoot interface errors, loops, MAC address learning, packet drops, and performance issues. Maintain network availability and configuration standards across the switching environment. Certificate Management Support certificate installation, renewal, validation, and troubleshooting. Demonstrate a strong understanding of: PKI concepts Public and private keys Asymmetric encryption Certificate chains Intermediate and root certificates TLS/SSL handshakes Troubleshoot certificate expiration, trust-chain, hostname, cipher, and handshake-related issues. Certificate generation experience is beneficial but is not a primary requirement. Cloud Networking Support private WAN connectivity into public cloud environments. Demonstrate strong knowledge of: Azure ExpressRoute Oracle Cloud FastConnect Cloud routing and private connectivity Hybrid network architecture Understand the deployment, configuration, and troubleshooting of Azure Firewall. Support Azure cloud-native firewall capabilities, routing, policies, and traffic inspection. Understand Azure Virtual WAN, including virtual hubs, routing concepts, branch connectivity, and hybrid network integration. Troubleshoot connectivity between on-premises, data center, Equinix, Azure, and other cloud environments. Equinix Networking Support and troubleshoot networking within Equinix-hosted environments. Understand Equinix networking architecture and its integration with VMware NSX-based constructs. Provide effective observability for Equinix infrastructure to support incident investigation and root-cause analysis. Work with the Equinix Network Edge portal and associated virtual network constructs. Troubleshoot connectivity between Equinix, enterprise WAN, cloud platforms, firewalls, and application environments. Collaborate with Equinix support and internal technical teams to resolve infrastructure and service issues. Operations and Troubleshooting Perform packet-level analysis using TCP dump, packet captures, and traffic-analysis tools. Lead troubleshooting for complex network, firewall, load-balancer, and cloud-connectivity incidents. Participate in incident, problem, change, and service-request management processes. Create and maintain network diagrams, standard operating procedures, troubleshooting guides, and configuration documents. Conduct root-cause analysis and recommend preventive actions. Support planned changes, maintenance activities, upgrades, and disaster-recovery exercises. Participate in an on-call or rotational support model, as required.

Skill Requirements

Strong hands-on experience with Check Point R82 firewalls and SmartConsole. Experience managing centralized data center and remote-site firewall environments. Hands-on experience with firewall policy management, NAT, routing, and traffic analysis. Strong expertise in BGP and static routing. CCNP-level or higher knowledge of enterprise routing and switching. Experience with F5 BIG-IP LTM, GTM/DNS, APM, and iRules. Strong knowledge of TCP/IP, DNS, HTTP/HTTPS, TLS/SSL, and application traffic flows. Experience performing packet captures and low-level traffic analysis. Working knowledge of Cisco SD-WAN technologies and network overlays. Strong understanding of certificates, PKI, and asymmetric encryption. Experience with Azure ExpressRoute, Azure Firewall, and Azure Virtual WAN. Understanding of Oracle Cloud FastConnect or similar private cloud-connectivity services. Experience with Equinix networking and Network Edge virtual constructs. Strong incident-management, problem-solving, and technical-documentation skills.

Other Requirements

Strong hands-on experience with Check Point R82 firewalls and SmartConsole. Experience managing centralized data center and remote-site firewall environments. Hands-on experience with firewall policy management, NAT, routing, and traffic analysis. Strong expertise in BGP and static routing. CCNP-level or higher knowledge of enterprise routing and switching. Experience with F5 BIG-IP LTM, GTM/DNS, APM, and iRules. Strong knowledge of TCP/IP, DNS, HTTP/HTTPS, TLS/SSL, and application traffic flows. Experience performing packet captures and low-level traffic analysis. Working knowledge of Cisco SD-WAN technologies and network overlays. Strong understanding of certificates, PKI, and asymmetric encryption. Experience with Azure ExpressRoute, Azure Firewall, and Azure Virtual WAN. Understanding of Oracle Cloud FastConnect or similar private cloud-connectivity services. Experience with Equinix networking and Network Edge virtual constructs. Strong incident-management, problem-solving, and technical-documentation skills.