Conexus · Costa Mesa, CA

Salary
$200,000
Posted
Jun 29, 2026
Location
Costa Mesa, CA
Last confirmed open
Jul 21, 2026

What this job asks for AI summary

A senior-level firewall and network security engineering role focused on designing, deploying, and maintaining enterprise firewall infrastructure across on-premises and cloud environments. The position centers on Check Point technologies — including R80+, VSX, Maestro, and CloudGuard — alongside VPN and cloud security controls, with additional responsibility for Tier 3 incident escalation and mentoring junior engineers. Suits an experienced network security engineer holding a current CCSE certification.

Senior level · 6+ years · National

Must have (10)
Check Point R80+Check Point VSXCheck Point MaestroCheck Point CCSEAWSPython, Shell Scripting, Ansible or TerraformOSPFVLANsTCP/IPVPN
Nice to have (4)
VMware NSX-TAzure or GCPAlgoSec or FiremonCheck Point CloudGuard

“or” means any one of them counts — you don't need all of them.

Posted 2 times — it's one opening, so apply once.

We read this from the posting text with AI. Skim the description below before ruling yourself out.

How this req sits in the market our data

What gives you an edge
OSPF3%

Rare in this occupation — lead with these, and say what you built with them.

What won't set you apart
Python51%TCP/IP40%

Most people in this occupation already list these. Still required — just not what gets you shortlisted.

What the occupation pays Median $132,021 (middle half $99,961–$167,095).

Estimated from BLS employment for this occupation and area, per-skill prevalence across our listing corpus, and published wage benchmarks — as of Jul 28, 2026. It is a model, not a headcount.

Why we read it this way (4)

The scripting requirement lists Python, Bash, Ansible, and Terraform as alternatives — the JD uses 'or', indicating any one satisfies the gate. All four are captured under a single skill entry with alternatives.

Check Point CloudGuard and VMware NSX-T appear in the Responsibilities section as part of the managed environment description, not in the Required Qualifications block. CloudGuard is listed as preferred context; NSX-T Distributed Firewall is explicitly called out under Preferred Qualifications.

Bachelor's degree is listed only under Preferred Qualifications, so the degree requirement is set to None.

The alt SOC (15-1244 Network and Computer Systems Administrators) is a plausible runner-up given the heavy infrastructure/firewall operations emphasis, but the security-engineering and policy-design framing tips the primary classification to 15-1212 Information Security Analysts.

Read the full posting

The employer publishes the full description on their own site — read it there ↗. Or sign in to read it here — it's free, and it also lets you track this application.

Apply

Apply on employer site ↗