Firewall Engineer

TEKsystems•Tulsa, OK

1d•$50 - $60•Onsite

About The Position

A leading regional bank in Tulsa is seeking a Check Point Firewall Engineer for a 6–9 month contract-to-hire opportunity supporting a high-visibility data center migration initiative along with ongoing firewall operations. This role is based on-site in Tulsa, OK and is critical to maintaining secure, efficient access across the organization while managing an increasing volume of firewall requests. The engineer will support day-to-day firewall operations within a Check Point environment, including processing and implementing Requests for Firewall Services (RFS) through ServiceNow and executing changes via AlgoSec workflows. This individual will analyze incoming requests to determine existing access, identify potential risk, and ensure alignment with established security policies before implementing updates. In addition to operational responsibilities, the role requires direct interaction with business stakeholders to understand access requirements, improve the quality of requests, and communicate status updates effectively. From a platform perspective, the engineer will work within a modern Check Point environment, including Maestro, supporting policy management, rule optimization, and overall firewall health. The environment is currently running a stable version of code and is planning an upgrade to R82, so exposure to firewall upgrades is a plus. The role will also support firewall-related efforts tied to the data center migration, including policy validation, cutover readiness, and post-migration stabilization to ensure minimal disruption to business operations. The environment is fast-paced and high-volume, with over 600 firewall requests processed annually by a lean team of engineers, making the ability to ramp quickly and operate independently essential. In addition to core responsibilities, the organization is investing in internally developed tools and automation initiatives. Exposure to AI concepts, such as building or supporting agent-based workflows to streamline firewall request handling or policy validation, is considered a strong plus. Experience with Zscaler (ZIA/ZPA) is also beneficial as the organization continues to expand its security architecture. The ideal candidate will have one to three years of hands-on experience with firewall or network security administration, including familiarity with Check Point environments and policy management. A Check Point CCSA certification is preferred but not required. Experience with AlgoSec, ServiceNow, or similar ticketing and automation platforms is highly desirable. Candidates should be comfortable working directly with business stakeholders, managing competing priorities, and operating in a regulated financial services environment where risk and compliance considerations are critical. This is a strong opportunity for a junior-to-mid level firewall engineer to gain exposure to a modern Check Point stack, participate in a major infrastructure initiative, and grow into a long-term role within a stable and growing regional bank.

Requirements

1–3+ years of experience in firewall/network security administration
Hands-on experience with Check Point firewalls
Experience managing firewall rules and policy changes
Experience managing high-volume request environments
Strong communication skills and ability to work with business stakeholders
Must be local to Tulsa, OK and available on-site

Nice To Haves

Check Point CCSA certification
Experience with AlgoSec (policy automation and change management)
Experience with Check Point Maestro (Hyperscale)
Experience with Firewall upgrades (R81 → R82)
Experience with ServiceNow or similar ticketing platforms
Exposure to Zscaler (ZIA/ZPA) or cloud-delivered security models
Experience working in a financial services / regulated environment
Exposure to AI concepts, such as building or supporting agent-based workflows to streamline firewall request handling or policy validation

Responsibilities

Support and manage day-to-day Check Point firewall operations
Process and implement Requests for Firewall Services (RFS) via ServiceNow
Evaluate requests to determine existing access vs. new requirements and risk exposure and policy alignment
Implement firewall rule changes and policies using AlgoSec workflows
Ensure all changes comply with internal security and regulatory standards
Interface directly with business units to understand access needs and intent, translate requirements into secure configurations, improve request quality by guiding stakeholders on best practices, and communicate status, approvals, and completion clearly to requestors
Support Check Point firewall environment (including Maestro)
Maintain policies, optimize rule sets, and ensure performance and uptime
Operate within current versions (R81.20+) and assist with migration to R82
Use AlgoSec to automate and manage firewall policy changes
Support firewall-related tasks tied to data center relocation
Assist with policy migration, validation, and post-cutover stabilization
Ensure minimal disruption to business operations during transition
Contribute to or support internally developed security/tools platforms
Exposure to AI-driven automation or agent-based workflows is a plus (e.g., building or supporting agents to improve request handling, policy validation, or workflow automation)