Senior Check Point Firewall Engineer R80+ VSX

Auto Club of Southern California is hiring a Senior Firewall Engineer to own and operate enterprise and cloud network security platforms across on‑prem and cloud environments. This role is for a hands‑on Check Point specialist who can lead Tier 3 incident response, design secure hybrid architectures, and mentor junior engineers in a 24/7/365 environment. You will be working on‑site in Costa Mesa, CA.

for the first 90 days, then in the office 3 out of 5 days per week.

• Lead operation and support of enterprise firewall and network security platforms in a 24/7/365 environment.
• Design, implement, and enforce firewall policies and security standards across on‑prem and cloud environments.
• Own and support Check Point (R80+), VSX, Cloud Guard, VMware NSX‑T / Distributed Firewall, and related platforms.
• Secure cloud environments across AWS, Azure, and GCP; implement cloud‑native and hybrid controls.
• Architect, implement, and maintain site‑to‑site and remote access VPN solutions.
• Act as Tier 3 escalation for complex incidents, changes, and outages; lead post‑incident reviews.
• Partner with infrastructure, cloud, and security teams to design secure solutions and integrations.
• Support audits and compliance initiatives; maintain security documentation and runbooks.
• Mentor junior engineers and drive continuous improvement and best practices.
• Participate in on‑call rotation and provide off‑hours support as needed.

• 6+ years of enterprise network or security engineering experience.
• Strong hands‑on Check Point experience in production (R80+); VSX experience required.
• Hands‑on experience with Check Point Maestro (deployment, Security Group management, orchestration, scaling, and troubleshooting).
• Deep Layer 2 / Layer 3 networking and TCP/IP troubleshooting skills.
• Proven experience designing and supporting VPN solutions.
• Cloud security experience with AWS, Azure, and/or GCP.
• Experience supporting change management and incident response.
• Solid understanding of core security concepts: authentication, authorization, access control.
• Ability to operate independently and lead during critical incidents.
• Strong communication, documentation, and cross‑team collaboration skills.

• Experience with firewall policy management tools such as Algo Sec or Fire Mon.
• Automation or scripting experience (Bash, Python, Ansible, Terraform).
• Familiarity with Governance, Risk, and Compliance (GRC) practices.
• Experience in high‑availability or large‑scale enterprise environments.

• Check Point CCSE
• Cisco CCNP
• AWS Certified Solutions Architect – Associate

• Advanced Check Point certifications (CCCS, CCMS, CCAS, CCVS, CCSM, CCME)
• VMware VCP / VCAP
• AWS Solutions Architect – Professional
• Azure Solutions Architect
• Google Professional Cloud Architect
• Cisco CCIE
• CISSP or CEH

• Health coverage for medical, dental, vision
• 401(K) saving plans with company match AND Pension
• Tuition assistance
• Floating holidays and PTO for community volunteer programs
• Paid parental leave
• Wellness programs
• Employee discounts (membership, insurance, travel, entertainment, services and more!)

AAA is an Equal Opportunity Employer. Our organization participates in E‑Verify.