Senior Firewall Engineer (Lisboa, PT) presso Capgemini - Get The Future You Want

DESCRIPTION

At Capgemini Engineering, the world leader in engineering services, we bring together a global team of engineers, scientists, and architects to help the world’s most innovative companies unleash their potential. From autonomous cars to life-saving robots, our digital and software technology experts think outside the box as they provide unique R&D and engineering services across all industries. Join us for a career full of opportunities. Where you can make a difference. Where no two days are the same.

YOUR ROLE

• Implement rules, objects, NAT, VPN S2S, and dynamic routing on Checkpoint and FortiGate.
• Triage requests, clarify requirements, and ensure technical coherence before execution.
• Perform pre-execution checks to identify risks, impact, and potential issues like shadowed rules or duplicate objects.
• Execute changes during maintenance windows, including late-night hours, with rollback plans and communication updates.
• Quickly resolve post-change incidents, provide diagnostics, and write concise post-mortem reports.
• Document changes, update inventory, and provide simple MOPs for future reference.
• Triage incidents, define priorities, and communicate with stakeholders in both Portuguese and English.

YOUR PROFILE

• Strong hands-on experience with physical and virtual appliances, including VSX and VDOMs.
• Knowledge of policies, NAT, VPN S2S, BGP, OSPF over IPsec, and FortiGuard.
• Experience managing production networks in Core, Distribution, and Data Centers using GUI and CLI.
• Skills in analyzing traffic, managing connection tables, HA, performance tuning, and MTU/MSS adjustments.
• Validate requests to avoid issues impacting network performance or services before executing changes.
• Ability to communicate effectively in Portuguese and technical English.
• Availability for maintenance tasks, including night-time shifts when needed.

Nice to have:

• Experience with Tufin or similar tools for policy review and compliance.
• Check Point CCSE or CCSM, Fortinet NSE4 or higher (NSE5/NSE7 preferred).
• Experience with NetFlow, IPFIX, and network/firewall log analysis.
• Experience in policy cleanup, reducing log noise, and implementing protections against floods and DoS attacks.
• Basic Python skills for generating reports and validating configurations.

WHAT YOU’LL LOVE ABOUT WORKING HERE

• Join a multicultural and inclusive team environment.
• Enjoy a supportive atmosphere promoting work-life balance.
• Engage in exciting national and international projects.
• Hybrid work.
• Your career growth is central to our mission. Our array of career growth programs and diverse professionals are crafted to support you in exploring a world of opportunities.
• Training and certifications programs.
• Health and life insurance.
• Referral program with bonuses for talent recommendations.
• Great office locations.

ABOUT CAPGEMINI

Choosing Capgemini means choosing a company where you will be empowered to shape your career in the way you’d like, where you’ll be supported and inspired by a collaborative community of colleagues around the world, and where you’ll be able to reimagine what’s possible. Join us and help the world’s leading organizations unlock the value of technology and build a more sustainable, more inclusive world.

Apply now!