Senior Network & Security Engineer; Check Point Specialist

Onsite - 5 days

Certification Requirement: CCSM (Check Point Certified Security Master) or CCSM Elite

We are seeking a highly skilled Senior Network & Security Engineer with a deep expertise in enterprise network infrastructure and advanced Check Point security solutions. In this role, you will serve as the primary subject matter expert (SME) for our network security posture, driving the architecture, implementation, and continuous optimization of our critical infrastructure.

The ideal candidate brings 10+ years of hands-on networking experience and holds the highest tier of Check Point technical certification (
CCSM or CCSM Elite
), demonstrating an elite ability to troubleshoot, configure, and secure complex global networks.

• Firewall Architecture & Management: Design, deploy, configure, and maintain high-availability Check Point firewall infrastructures across enterprise environments.
• Advanced Troubleshooting: Serve as the highest escalation point for complex network and security incidents, performing deep-packet analysis and performance tuning.
• Security Optimization: Implement advanced Check Point features including Threat Prevention, Application Control, URL Filtering, IPS, and Sand Blast (Threat Emulation).
• Network Infrastructure Engineering: Manage core routing and switching technologies (OSPF, BGP, VLANs, VXLAN) to ensure seamless and secure connectivity.
• Compliance & Best Practices: Conduct regular firewall audit reviews, optimize policy rule bases, and ensure adherence to stringent global security compliance standards.
• Mentorship &
  
  Collaboration:
  
  Provide technical leadership and mentorship to junior network engineers, while collaborating with cross-functional IT and infrastructure teams.

• Experience: Minimum of 10 years of direct, hands-on experience in enterprise network engineering and security administration.
• Certifications: Active Check Point Certified Security Master (CCSM) or Check Point Certified Security Master Elite (CCSM Elite) is strictly required. Additional certifications (e.g., CCIE, CCNP, CISSP) are highly valued.
• Check Point Expertise: Proficient with Check Point Architecture, Gaia OS, Management Server provider-1 (MDM), VSX, ClusterXL, and Maestro Orchestration.
• Network Protocol Proficiency: Deep understanding of TCP/IP, dynamic routing protocols (BGP, OSPF), VPN technologies (IPsec, SSL), and network virtualization.
• Languages: Professional working proficiency in English is required.
• Location: Must be willing to work out of our office in Bioggio, Switzerland
  , and possess (or be eligible for) a valid Swiss work permit.