Network & Security Engineer – Firewall Specialist (Palo Alto, Check Point)
Location: Remote (Italy)
Contract: Freelance
Availability: Full‐time, Mon–Fri (40h/week)
Language Requirements: Italian C1, English B2
Must be based in Italy – No sponsorship available
About the Role
We're looking for a highly skilled Network & Security Engineer with deep expertise in Palo Alto and Check Point firewalls to support enterprise‐level customers in managing and evolving their security infrastructures. You'll work in complex, distributed environments, handling both operational and design activities — all 100% remotely .
Key Responsibilities
Enterprise Firewall Management (Palo Alto, Check Point)
Implementation & optimization of:
Security policies
NAT rules (SNAT/DNAT)
Security equipment lifecycle management (firmware, updates, tuning)
VPN configuration , maintenance & troubleshooting:
IPsec Site‐to‐Site
SSL VPN (remote access)
Secure access management:
SAML authentication integration
Federated Access
Digital certificate lifecycle: installation, renewal, troubleshooting
Monitoring & analysis:
Security log analysis
Network metrics interpretation
Incident & problem management support
Collaboration with internal teams & customers to ensure service continuity and security
️ Technical Skills Required
Palo Alto Networks: Security Policies, NAT, App‐ID, User‐ID, GlobalProtect
Check Point: SmartConsole, policy management, VPN, NAT
Strong knowledge of:
TCP/IP, routing, switching, VLAN
IPsec & SSL VPN
Authentication protocols (SAML, LDAP, RADIUS)
PKI & certificate management
Log analysis & advanced troubleshooting
Monitoring/logging tools
Soft Skills
Strong problem‐solving & analytical mindset
High operational autonomy in complex environments
Clear communication in Italian & English
Teamwork, prioritization & time management
Nice to Have
Certifications:
Palo Alto PCNSE
Check Point CCSA/CCSE
Experience in multi‐tenant or service provider environments
Knowledge of SIEM/SOC tools
Additional Details
Seniority: 3+ years
Remote: Yes
Freelancer: Yes
Travel: Not required
Sensitive Data: No