Network Security Engineer (Checkpoint)

We are working with a global manufacturing organisation undertaking a critical network security transformation programme following a major cyber security incident.

They require a Network Security Engineer (Checkpoint) to join them in a permanent capacity.

This role will focus on owning and securing the global firewall and network infrastructure, reducing dependency on external contractors while driving long-term security improvements across IT and production (OT) environments.

Key Responsibilities

• Manage and maintain the Checkpoint firewall environment, including rules, policies, and configurations
• Lead firewall transformation initiatives, replacing legacy systems and improving security posture
• Design and implement network segmentation strategies across global sites
• Manage secure connectivity including VPN (site-to-site and remote access) solutions
• Support and contribute to OT (production) security projects within manufacturing environments
• Collaborate with internal teams and external partners across multiple international locations
• Implement and optimise security controls including IPS/IDS, anti-virus, and access control mechanisms
• Ensure secure and reliable network operations across LAN, WAN, and wireless environments
• Contribute to ongoing security improvements and long-term infrastructure strategy

Required Skills & Qualifications

• Strong hands-on experience with Checkpoint firewalls (core requirement)
• Solid background in network security engineering within complex environments
• Experience with network segmentation, VPNs, and secure access management
• Knowledge of IPS/IDS, Network Access Control (NAC), and authentication protocols (RADIUS/AAA)
• Experience working in global, multi-site infrastructure environments
• Understanding of both IT and OT (production) security is highly advantageous
• Familiarity with Cisco ASA or similar legacy firewall technologies is a plus
• Strong problem-solving skills and ability to take ownership of critical systems
• Fluent in German and English

Contract Details

• Location: Ellwangen, Germany
• Onsite Requirement: 2–3 days per week
• Engagement: Permanent
• Start Date: ASAP

This is a high-impact opportunity for a Network Security Engineer to take ownership of a business-critical environment, playing a key role in rebuilding and securing infrastructure following a cyber incident — with strong visibility and long-term strategic importance.