Firewall Engineer

Description
Required Qualifications:
- 1-3+ years of experience in firewall/network security administration
- Hands-on experience with Check Point firewalls
Experience managing:
- Firewall rules and policy changes
- High-volume request environments
Strong communication skills and ability to work with business stakeholders
- Must be local to Tulsa, OK and available on-site
Preferred Qualifications:
- Check Point CCSA certification
- Experience with: AlgoSec (policy automation and change management) / Check Point Maestro (Hyperscale) / Firewall upgrades (R81 R82) / ServiceNow or similar ticketing platforms
- Exposure to Zscaler (ZIA/ZPA) or cloud-delivered security models
- Experience working in a financial services / regulated environment
A leading regional bank in Tulsa is seeking a Check Point Firewall Engineer for a 6-9 month contract-to-hire opportunity supporting a high-visibility data center migration initiative known as "Project Exodus," along with ongoing firewall operations. This role is based on-site in Tulsa, OK and is critical to maintaining secure, efficient access across the organization while managing an increasing volume of firewall requests.
The engineer will support day-to-day firewall operations within a Check Point environment, including processing and implementing Requests for Firewall Services (RFS) through ServiceNow and executing changes via AlgoSec workflows. This individual will analyze incoming requests to determine existing access, identify potential risk, and ensure alignment with established security policies before implementing updates. In addition to operational responsibilities, the role requires direct interaction with business stakeholders to understand access requirements, improve the quality of requests, and communicate status updates effectively.
From a platform perspective, the engineer will work within a modern Check Point environment, including Maestro, supporting policy management, rule optimization, and overall firewall health. The environment is currently running a stable version of code and is planning an upgrade to R82, so exposure to firewall upgrades is a plus. The role will also support firewall-related efforts tied to the data center migration, including policy validation, cutover readiness, and post-migration stabilization to ensure minimal disruption to business operations.
The environment is fast-paced and high-volume, with over 600 firewall requests processed annually by a lean team of engineers, making the ability to ramp quickly and operate independently essential. In addition to core responsibilities, the organization is investing in internally developed tools and automation initiatives. Exposure to AI concepts, such as building or supporting agent-based workflows to streamline firewall request handling or policy validation, is considered a strong plus. Experience with Zscaler (ZIA/ZPA) is also beneficial as the organization continues to expand its security architecture.
The ideal candidate will have one to three years of hands-on experience with firewall or network security administration, including familiarity with Check Point environments and policy management. A Check Point CCSA certification is preferred but not required. Experience with AlgoSec, ServiceNow, or similar ticketing and automation platforms is highly desirable. Candidates should be comfortable working directly with business stakeholders, managing competing priorities, and operating in a regulated financial services environment where risk and compliance considerations are critical.
This is a strong opportunity for a junior-to-mid level firewall engineer to gain exposure to a modern Check Point stack, participate in a major infrastructure initiative, and grow into a long-term role within a stable and growing regional bank.
Skills
Firewall, Checkpoint, Zscaler, Algosec
Top Skills Details
Firewall,Checkpoint
Additional Skills & Qualifications
Firewall Operations & Request Management
- Support and manage day-to-day Check Point firewall operations
- Process and implement Requests for Firewall Services (RFS) via ServiceNow
- Evaluate requests to determine existing access vs. new requirements and risk exposure and policy alignment
- Implement firewall rule changes and policies using AlgoSec workflows
- Ensure all changes comply with internal security and regulatory standards
Business Engagement & Workflow Optimization
- Interface directly with business units to:
- Understand access needs and intent
- Translate requirements into secure configurations
- Improve request quality by guiding stakeholders on best practices
- Communicate status, approvals, and completion clearly to requestors
Platform & Environment Management
- Support Check Point firewall environment (including Maestro)
- Maintain policies, optimize rule sets, and ensure performance and uptime
- Operate within current versions (R81.20+) and assist with migration to R82
- Use AlgoSec to automate and manage firewall policy changes
Project Work (Data Center Migration - "Project Exodus")
- Support firewall-related tasks tied to data center relocation
- Assist with policy migration, validation, and post-cutover stabilization
- Ensure minimal disruption to business operations during transition
Innovation & Tooling (Nice-to-Have Exposure)
- Contribute to or support internally developed security/tools platforms
- Exposure to AI-driven automation or agent-based workflows is a plus (e.g., building or supporting agents to improve request handling, policy validation, or workflow automation)
Experience Level
Intermediate Level
Job Type & Location
This is a Contract to Hire position based out of Tulsa, OK.
Pay and Benefits
The pay range for this position is $50.00 - $60.00/hr.
Eligibility requirements apply to some benefits and may depend on your job classification and length of employment. Benefits are subject to change and may be subject to specific elections, plan, or program terms. If eligible, the benefits available for this temporary role may include the following:
Medical, dental & vision
Critical Illness, Accident, and Hospital
401(k) Retirement Plan - Pre-tax and Roth post-tax contributions available
Life Insurance (Voluntary Life & AD&D for the employee and dependents)
Short and long-term disability
Health Spending Account (HSA)
Transportation benefits
Employee Assistance Program
Time Off/Leave (PTO, Vacation or Sick Leave)
Workplace Type
This is a fully onsite position in Tulsa,OK.
Application Deadline
This position is anticipated to close on Jun 5, 2026.

About TEKsystems

We're partners in transformation. We help clients activate ideas and solutions to take advantage of a new world of opportunity. We are a team of 80,000 strong, working with over 6,000 clients, including 80% of the Fortune 500, across North America, Europe and Asia. As an industry leader in Full-Stack Technology Services, Talent Services, and real-world application, we work with progressive leaders to drive change. That's the power of true partnership. TEKsystems is an Allegis Group company.

The company is an equal opportunity employer and will consider all applications without regards to race, sex, age, color, religion, national origin, veteran status, disability, sexual orientation, gender identity, genetic information or any characteristic protected by law.

About TEKsystems and TEKsystems Global Services

We're a leading provider of business and technology services. We accelerate business transformation for our customers. Our expertise in strategy, design, execution and operations unlocks business value through a range of solutions. We're a team of 80,000 strong, working with over 6,000 customers, including 80% of the Fortune 500 across North America, Europe and Asia, who partner with us for our scale, full-stack capabilities and speed. We're strategic thinkers, hands-on collaborators, helping customers capitalize on change and master the momentum of technology. We're building tomorrow by delivering business outcomes and making positive impacts in our global communities. TEKsystems and TEKsystems Global Services are Allegis Group companies. Learn more at TEKsystems.com.

The company is an equal opportunity employer and will consider all applications without regard to race, sex, age, color, religion, national origin, veteran status, disability, sexual orientation, gender identity, genetic information or any characteristic protected by law.

San Francisco Fair Chance Ordinance: Pursuant to the San Francisco Fair Chance Ordinance, for all positions located in the city and county of San Francisco, we will consider for employment qualified applicants with arrest and conviction records.

Massachusetts Lie Detector: It is unlawful in Massachusetts to require or administer a lie detector test as a condition of employment or continued employment. An employer who violates this law shall be subject to criminal penalties and civil liability.

Use of Artificial Intelligence (AI): We may use Artificial Intelligence (AI) to support parts of our hiring process, including sourcing, screening, and evaluating candidates. AI helps assess applications and qualifications, but final decisions are made by our hiring team. By applying, you acknowledge and agree that your application may be reviewed using AI tools.