We are working with a global manufacturing organisation undertaking a critical network security transformation programme following a major cyber security incident. They require a Network Security Engineer (Checkpoint) to join them in a permanent capacity. This role will focus on owning and securing the global firewall and network infrastructure, reducing dependency on external contractors while driving long-term security improvements across IT and production (OT) environments. Key Responsibilities: • Manage and maintain the Checkpoint firewall environment, including rules, policies, and configurations • Lead firewall transformation initiatives, replacing legacy systems and improving security posture • Design and implement network segmentation strategies across global sites • Manage secure connectivity including VPN (site-to-site and remote access) solutions • Support and contribute to OT (production) security projects within manufacturing environments • Collaborate with internal teams and external partners across multiple international locations • Implement and optimise security controls including IPS/IDS, anti-virus, and access control mechanisms • Ensure secure and reliable network operations across LAN, WAN, and wireless environments • Contribute to ongoing security improvements and long-term infrastructure strategy Required Skills & Qualifications: • Strong hands-on experience with Checkpoint firewalls (core requirement) • Solid background in network security engineering within complex environments • Experience with network segmentation, VPNs, and secure access management • Knowledge of IPS/IDS, Network Access Control (NAC), and authentication protocols (RADIUS/AAA) • Experience working in global, multi-site infrastructure environments • Understanding of both IT and OT (production) security is highly advantageous • Familiarity with Cisco ASA or similar legacy firewall technologies is a plus • Strong problem-solving skills and ability to take ownership of critical systems • Fluent in German and English Contract Details: • Location: Ellwangen, Germany • Onsite Requirement: 2–3 days per week • Engagement: Permanent • Start Date: ASAP This is a high-impact opportunity for a Network Security Engineer to take ownership of a business-critical environment, playing a key role in rebuilding and securing infrastructure following a cyber incident — with strong visibility and long-term strategic importance.