Network Engineer (Firewall, Proxy & Cisco Network Services, Remote)

Location: Prague, Prague, Czechia

Department: NOEMEA

Workplace: remote

Description

D-ploy is a dynamic IT and Engineering Solutions company operating across the EMEA region, including Switzerland, Germany, Czech Republic, Austria, the UK, and the USA. We are committed to delivering reliable and efficient services to our clients through strong partnerships and a people-focused culture.

We are looking for an experienced Network Engineer to support and manage enterprise network infrastructure, with a strong focus on Check Point Firewalls, Proxy Services, and Cisco LAN/WLAN environments. The role covers day-to-day operations, troubleshooting, security changes, and infrastructure improvements.

Responsibilities:

• Administer and maintain Check Point perimeter and internal firewalls.
• Manage firewall security policies, access rules, NAT configurations, and interface changes.
• Perform firewall upgrades, patching, maintenance, and lifecycle activities.
• Implement and review firewall changes in accordance with change management processes, using Tufin where applicable.
• Configure and troubleshoot VPN solutions, including Site-to-Site VPNs and remote connectivity.
• Conduct firewall rule reviews and support security policy optimization.
• Manage enterprise proxy infrastructure, including configuration changes, maintenance, and software updates.
• Support non-proxy application integrations, plugins, and S-Box configurations.
• Troubleshoot connectivity issues and resolve incidents related to firewall, proxy, and network services.
• Administer Cisco LAN/WLAN infrastructure, including switches, VLANs, routing, Wireless LAN Controllers (WLCs), and Access Points.
• Perform firmware upgrades, patching, performance optimization, and troubleshooting across Cisco network environments.
• Support DDI services, including DNS, DHCP, and IP Address Management (IPAM).
• Administer Network Access Control (NAC) solutions and access policies.
• Support MPLS connectivity and enterprise network integrations.
• Execute network changes and contribute to incident and problem management.
• Collaborate with internal stakeholders to analyze requirements and implement appropriate network solutions.

Requirements

• Several years of hands-on experience with Check Point Firewalls, including security policies, VPNs, upgrades, and troubleshooting.
• Good knowledge of Proxy technologies and network security concepts.
• Practical experience with Cisco LAN and WLAN technologies, including switching, routing, VLANs, WLCs, and Access Points.
• Good understanding of VPN, MPLS, NAC, DNS, DHCP, and IPAM services.
• Experience working with enterprise network infrastructure and IT service management processes.
• Experience with change management and structured network troubleshooting.
• Fluent English, both written and spoken.
• Knowledge of Tufin or similar firewall policy management solutions is an advantage.
• Check Point CCSA/CCSE or Cisco CCNA/CCNP certification is an advantage.
• Experience in large enterprise environments and ITIL-based operations is a plus.
• Russian language skills are a plus.
• If successful, candidates must be able to provide a clear criminal record certificate that is no older than 3 months.

Benefits

• Broad range of activities, tasks, and projects
• Paid sick days
• Vouchers (B-day voucher, wedding, and new born surprise)
• Contributions to wellness programs (multisport card)
• Fishing for Friends program – our referral program
• Further development and professional advancement
• Friendly and international working environment
• Company-sponsored events
  

Is IT in your DNA?