Network security engineer

🔥 Network & Security Engineer – Firewall Specialist (Palo Alto, Check Point)

📍 Location: Remote (Italy)

💼 Contract: Freelance

🕒 Availability: Full‑time, Mon–Fri (40h/week)

🌐 Language Requirements: Italian C1, English B2


👤 Must be based in Italy – No sponsorship available


🚀 About the Role

We’re looking for a highly skilled Network & Security Engineer with deep expertise in Palo Alto and Check Point firewalls to support enterprise‑level customers in managing and evolving their security infrastructures. You’ll work in complex, distributed environments, handling both operational and design activities — all 100% remotely.


🎯 Key Responsibilities

* Enterprise Firewall Management (Palo Alto, Check Point)
* Implementation & optimization of:
* Security policies
* NAT rules (SNAT/DNAT)
* Security equipment lifecycle management (firmware, updates, tuning)
* VPN configuration, maintenance & troubleshooting:
* IPsec Site‑to‑Site
* SSL VPN (remote access)
* Secure access management:
* SAML authentication integration
* Federated Access
* Digital certificate lifecycle: installation, renewal, troubleshooting
* Monitoring & analysis:
* Security log analysis
* Network metrics interpretation
* Incident & problem management support
* Collaboration with internal teams & customers to ensure service continuity and security


🛠️ Technical Skills Required

* Palo Alto Networks: Security Policies, NAT, App‑ID, User‑ID, GlobalProtect
* Check Point: SmartConsole, policy management, VPN, NAT
* Strong knowledge of:
* TCP/IP, routing, switching, VLAN
* IPsec & SSL VPN
* Authentication protocols (SAML, LDAP, RADIUS)
* PKI & certificate management
* Log analysis & advanced troubleshooting
* Monitoring/logging tools


🤝 Soft Skills

* Strong problem‑solving & analytical mindset
* High operational autonomy in complex environments
* Clear communication in Italian & English
* Teamwork, prioritization & time management


⭐ Nice to Have

* Certifications:
* Palo Alto PCNSE
* Check Point CCSA/CCSE
* Experience in multi‑tenant or service provider environments
* Knowledge of SIEM/SOC tools


📌 Additional Details

* Seniority: 3+ years
* Remote: Yes
* Freelancer: Yes
* Travel: Not required
* Sensitive Data: No