SME - CheckPoint PPC (Software), Cloud Security

Job Summary

Job Summary

We are seeking a highly skilled Senior Cybersecurity / Network Security Engineer with deep hands-on expertise across Cisco enterprise security solutions, micosegmentation platforms, and endpoint protection stacks. This role focuses on perimeter defense, Zero Trust architecture enforcement, endpoint security, vendor access management, and Tier-3 technical troubleshooting in a complex enterprise environment. The ideal candidate will combine strong operational troubleshooting with technical execution, supporting security operations, platform lifecycle upgrades, and continuous security posture improvement.

 

Key Responsibilities

Network & Perimeter Security

• Configure, manage, and optimize Cisco Firepower Threat Defense (FTD) managed centrally via Firepower Management Center (FMC) (policies, NAT, VPN, IPS/IDS, HA).
• Execute firewall rule reviews, policy cleanups, end-to-end migrations, and routine platform upgrades.
• Maintain and troubleshoot boundary defenses and network perimeter controls across enterprise environments.

Identity, Access & Micosegmentation

• Administer Cisco ISE for Network Access Control (NAC) to enforce robust identity and policy-based access.
• Deploy and maintain granular micosegmentation policies using Guardicore to enforce Zero Trust principles and prevent lateral movement across workloads.
• Manage Imprivata (SecureLink) Vendor Privileged Access Management (PAM) to control and audit third-party access.

Endpoint & Web Security

• Administer and manage policies for Cisco Secure Endpoints and Microsoft Defender for Endpoint (EDR).
• Manage Cisco Umbrella for DNS-layer security, web filtering, Secure Internet Gateway (SIG) policies, and domain threat investigations.

• Investigate endpoint alerts, perform threat hunting, and execute swift remediation.

Required Technical Skills

Network & Perimeter: Cisco FTD, Firewall Migrations & Upgrades, VPN, IPS/IDS, High Availability.

Identity & Micosegmentation: Cisco ISE (NAC), Guardicore Micosegmentation, Imprivata (SecureLink) Vendor PAM.

Endpoint & Web Security: Microsoft Defender for Endpoint, Cisco Umbrella (DNS & Web Security).

Preferred Qualifications & Certifications

Certifications: CCNP Security, CCNA Security, Microsoft SC-200, SC-300

Key Responsibilities

Network & Perimeter Security

• Configure, manage, and optimize Cisco Firepower Threat Defense (FTD) managed centrally via Firepower Management Center (FMC) (policies, NAT, VPN, IPS/IDS, HA).
• Execute firewall rule reviews, policy cleanups, end-to-end migrations, and routine platform upgrades.
• Maintain and troubleshoot boundary defenses and network perimeter controls across enterprise environments.

Identity, Access & Micosegmentation

• Administer Cisco ISE for Network Access Control (NAC) to enforce robust identity and policy-based access.
• Deploy and maintain granular micosegmentation policies using Guardicore to enforce Zero Trust principles and prevent lateral movement across workloads.
• Manage Imprivata (SecureLink) Vendor Privileged Access Management (PAM) to control and audit third-party access.

Endpoint & Web Security

• Administer and manage policies for Cisco Secure Endpoints and Microsoft Defender for Endpoint (EDR).
• Manage Cisco Umbrella for DNS-layer security, web filtering, Secure Internet Gateway (SIG) policies, and domain threat investigations.

• Investigate endpoint alerts, perform threat hunting, and execute swift remediation.

Skill Requirements

Required Technical Skills

Network & Perimeter: Cisco FTD, Firewall Migrations & Upgrades, VPN, IPS/IDS, High Availability.

Identity & Micosegmentation: Cisco ISE (NAC), Guardicore Micosegmentation, Imprivata (SecureLink) Vendor PAM.

Endpoint & Web Security: Microsoft Defender for Endpoint, Cisco Umbrella (DNS & Web Security).

Other Requirements

Preferred Qualifications & Certifications

Certifications: CCNP Security, CCNA Security, Microsoft SC-200, SC-300