Cyber Security Firewall Engineer (FortiGate, Palo Alto)

FLINTEX CONSULTING PTE. LTD.; Singapore; On-site; SGD 60,000 - 90,000; Full time

Job summary

A cybersecurity consulting firm in Singapore is looking for a hands-on Cyber Security Firewall Engineer. You will manage firewall operations for Fortinet and Palo Alto firewalls, ensure network security, and respond to incidents. The ideal candidate has extensive experience in firewall management, strong networking fundamentals, and the ability to work independently. Preferred certifications include Fortinet NSE and Palo Alto certifications. Join a dynamic environment and support crucial operations in cybersecurity.

Qualifications

• Hands-on expertise with Fortinet and Palo Alto firewalls.
• Strong understanding of networking fundamentals.
• Ability to work independently with focus on accuracy and speed.

Responsibilities

• Manage firewall rules, change requests, optimization, and configurations.
• Monitor traffic and remediate security events.
• Support audits and regulatory compliance.

Skills

Fortinet FortiGate

Palo Alto Networks firewalls

Networking fundamentals (TCP/IP, VLANs, routing, NAT, SSL/TLS, DNS)

Incident response

Change management

Documentation

Structured problem-solving

Clear communication

Education

Preferred Certifications: Fortinet NSE 4–7, Palo Alto PCNSA/PCNSE, Imperva Certified Professional

Tools

FortiManager

FortiAnalyzer

Palo Alto Panorama

Tripwire

Job description

About the Role

We are seeking a hands-on Cyber Security Firewall Engineer to provide operational support and security platforms. The ideal candidate will be experienced in managing Fortinet FortiGate and Palo Alto Networks firewalls, with foundation in network security, policy management, and incident response.

Key Responsibilities

• Firewall Operations (Fortinet & Palo Alto)
  Manage firewall rules creation, change requests, rule optimization, NAT/VPN configuration and firmware upgrades.
• Monitor traffic, identify anomalies, and remediate security events.
• Maintain HA configurations, routing and logging integrations.
• Support audits and evidence collection for regulatory/compliance requirements.
• Tripwire
  Administer policies, baselines, agents, alerts, and remediation workflows.
• Investigate integrity violations; tune rules to reduce false positives.
• Imperva (DB Security/DAM)
  Configure security policies, signatures, profiles, and exceptions.
• Monitor application-layer attacks; tune rules to balance protection and usability.
• Support database activity monitoring policies and reporting where applicable.
• Security Monitoring & Incident Response
  Triage alerts conduct root-cause analysis, and coordinate remediation.

Required Qualifications

• Hands-on expertise with:
  • Fortinet FortiGate (policies, VPN, routing, HA, SD-WAN, logging).
  • Palo Alto Networks firewalls (policies, NAT, App-ID, User-ID, Panorama).
  • Tripwire (Hice to Have).
  • Imperva (Hice to Have).
  • Strong understanding of networking fundamentals (TCP/IP, VLANs, routing, NAT, SSL/TLS, DNS).
  • Experience in incident response, change management, and documentation.
  • Ability to work independently with a focus on accuracy, speed, and risk reduction.

Preferred Certifications (Nice to Have)

• Fortinet NSE 4–7, Palo Alto PCNSA/PCNSE, Imperva Certified Professional.

Soft Skills

• Clear communication with stakeholders and change advisory boards.
• Structured problem-solving and risk-based decision-making.
• Ownership mindset with strong time management for a contract environment.

Deliverables & KPIs

• Firewall rules changes are accordance to requests.
• Successful completion of firmware upgrades and config backups with rollback plans.
• Updated Tickets, network diagrams, and change records.
• Handover documentation and knowledge transfer at contract end.

Tools & Environment

• FortiGate / FortiManager / FortiAnalyzer
• Palo Alto NGFW / Panorama
• Tripwire Enter