Cybersecurity Platform Engineer

Optimum Solutions Pte Ltd; Singapore; On-site; SGD 80,000 - 120,000; Full time

Job summary

Optimum Solutions Pte Ltd is seeking an experienced cybersecurity professional to operate and maintain Palo Alto firewalls, Carbon Black EDR, and Cloudflare DDoS/WAF in a secure Singapore environment.

You will manage CyberArk PAM, handle vulnerability remediation, incidents, audits, backups, and change requests while ensuring compliance with internal policies and regulatory requirements.

Qualifications

• Must have strong enterprise networking fundamentals (TCP/IP, VLAN, routing, NAT, DNS, segmentation).
• Hands-on experience with Palo Alto NGFW, Carbon Black EDR, Cloudflare DDoS/WAF, CyberArk PAM.
• Experience with firewall policies, patching, log analysis, and security platform administration.

Responsibilities

• Operate and maintain Palo Alto firewalls, including rules/policies, patching, firmware upgrades, health checks, log reviews, changes and troubleshooting.
• Maintain Carbon Black EDR across RHEL-hosted servers, endpoint sensors, logs, patching, onboarding and troubleshooting.
• Administer Cloudflare DDoS/WAF, including onboarding, rules, SSL certs, and access reviews.
• Administer CyberArk PAM, including onboarding/offboarding, access reviews, password management and audit logs.
• Perform vulnerability remediation, patch management, security reviews and preventive maintenance.
• Support cybersecurity incidents, investigations, assessments, and audits.
• Maintain and test platform backup and restoration processes.
• Raise and manage change requests for system/config changes.
• Maintain SOPs, asset inventories, configuration records, security trackers and maintenance reports.
• Ensure compliance with organisational cybersecurity policies and regulatory requirements.

Skills

Networking fundamentals

Firewall policies

EDR administration

WAF/Cloudflare

PAM administration

Vulnerability remediation

Incident response

Change management

Tools

Palo Alto NGFW

Carbon Black EDR

Cloudflare DDoS/WAF

CyberArk PAM

Job description

• Operate and maintain Palo Alto firewalls, including firewall rules/policies, patching, firmware upgrades, health checks, log reviews, configuration changes and troubleshooting.
• Maintain Carbon Black EDR, including RHEL-hosted servers, endpoint sensors, application services, logs, patching, endpoint onboarding and troubleshooting.
• Administer Cloudflare DDoS/WAF, including website onboarding/offboarding, WAF/security rules, IP whitelist/blacklist changes, SSL certificates, access/log reviews and vendor coordination.
• Administer CyberArk PAM, including privileged account onboarding/offboarding, access reviews, password management, service/change requests and audit logs.
• Perform vulnerability remediation, patch management, security reviews and preventive maintenance.
• Support cybersecurity incidents, investigations, assessments and audits.
• Maintain and test platform backup and restoration processes.
• Raise and manage change requests for system/configuration changes.
• Maintain SOPs, asset inventories, configuration records, security trackers and maintenance reports.
• Ensure compliance with organisational cybersecurity policies, CSA Cybersecurity Act requirements and CCoP.

Required Skills

• Strong enterprise networking fundamentals: TCP/IP, VLAN, routing, NAT, DNS, network segmentation and troubleshooting.
• Hands-on experience with:
• Palo Alto NGFW or equivalent
• Carbon Black EDR or equivalent
• Cloudflare DDoS/WAF or equivalent
• CyberArk PAM or equivalent
• Experience with firewall policies, patching, log analysis, endpoint/security platform administration and troubleshooting.
• Understanding of secure/segregated or air-gapped environments, including controlled offline patch/file transfers.

Preferred Skills

• Vulnerability management, security hardening, incident response and change management experience.
• PKI / TLS / SSL certificate management.
• Experience supporting highly secured or CII environments.
• Certifications such as CCNA, Palo Alto, CyberArk Defender/Sentry or Cloudflare-related certification.