M01 - Cyber Platform Engineer

FPT Asia Pacific; Singapore; On-site; SGD 90,000 - 130,000; Full time

Job summary

FPT Asia Pacific in Singapore seeks an experienced Security Platform Administrator to operate, maintain, and support enterprise cybersecurity platforms, including Palo Alto firewalls, Carbon Black EDR, Cloudflare DDoS/WAF, and CyberArk PAM. You will perform preventive maintenance, configurations, and incident response activities.

The role requires hands-on firewall/EDR/WAF experience, vulnerability management, change control, and the ability to work onsite at secure premises, with readiness for

Qualifications

• Strong knowledge of enterprise networking including TCP/IP, VLANs, routing, NAT, DNS.
• Hands-on experience with Palo Alto Networks Next-Generation Firewalls or equivalent enterprise firewall platforms.
• Experience managing firewall policies, NAT, routing, security profiles, logs, firmware upgrades, patching, and configuration backup/restoration.
• Hands-on experience with Carbon Black EDR or equivalent Endpoint Detection and Response platforms.
• Experience with Cloudflare or equivalent DDoS mitigation/WAF solutions, including security rules, SSL certificates, IP whitelisting/blacklisting, and log management.
• Experience with CyberArk PAM or equivalent privileged access management solutions.
• Good understanding of vulnerability management, security hardening, patch management, change management, and cybersecurity incident response.
• Understanding of highly secured network environments, including air-gapped networks, restricted connectivity, offline patch/file transfers, and data diodes/unidirectional gateways.
• Familiarity with PKI and TLS/SSL certificate lifecycle management is advantageous.
• Experience supporting cybersecurity platforms within CII, highly secured, segregated, or air-gapped environments is advantageous.
• Able to provide onsite support and undergo the required security clearance.

Responsibilities

• Operate, maintain, and support enterprise cybersecurity platforms including Palo Alto Firewalls, Carbon Black EDR, Cloudflare DDoS/WAF, and CyberArk PAM.
• Perform preventive maintenance, system health checks, patching, firmware upgrades, configuration changes, and troubleshooting for cybersecurity platforms.
• Manage Palo Alto firewall policies, rules, NAT, routing, security profiles, logs, configuration backups, and vulnerability remediation.
• Maintain and troubleshoot Carbon Black EDR, including servers, endpoint sensors, PostgreSQL/Solr components, application services, logs, and endpoint onboarding.
• Administer Cloudflare DDoS/WAF services, including website onboarding/offboarding, security rules, IP whitelisting/blacklisting, SSL certificates, access reviews, and log reviews.
• Administer CyberArk PAM, including privileged account onboarding/offboarding, access reviews, password management, service requests, and audit activities.
• Monitor cybersecurity platforms and investigate system, security, application, and audit logs for anomalies or operational issues.
• Support vulnerability management, security assessments, audits, incident investigations, and remediation activities.
• Manage backup and restoration activities, including configuration backups, restoration testing, and maintenance of backup records.
• Raise and manage change requests in accordance with established change management processes.
• Maintain technical documentation including SOPs, asset inventories, configuration records, troubleshooting guides, security trackers, and maintenance reports.
• Work closely with internal security teams, vendors, OEMs, and other technical stakeholders to resolve platform issues.
• Ensure cybersecurity platforms comply with organisational security policies, the Cybersecurity Act, and Cybersecurity Code of Practice (CCoP).
• Provide onsite support at secure premises when required for scheduled maintenance and ad-hoc troubleshooting.

Skills

Enterprise networking

Palo Alto firewalls

Carbon Black EDR

Cloudflare WAF/DDoS

CyberArk PAM

Vulnerability management

Change management

Security incident response

PKI TLS management

Air-gapped environments

Onsite support

Documentation

Education

CCNA or equivalent networking certification

Palo Alto Networks firewall certification

CyberArk Defender/Sentry PAM certification

Cloudflare WAF/DDoS certification or training

Tools

Palo Alto Networks Firewalls

Carbon Black EDR

Cloudflare DDoS/WAF

CyberArk PAM

TLS/SSL certificate management tools

VPN/DNS utilities

Job description

Responsibilities

• Operate, maintain, and support enterprise cybersecurity platforms including Palo Alto Firewalls, Carbon Black EDR, Cloudflare DDoS/WAF, and CyberArk PAM.
• Perform preventive maintenance, system health checks, patching, firmware upgrades, configuration changes, and troubleshooting for cybersecurity platforms.
• Manage Palo Alto firewall policies, rules, NAT, routing, security profiles, logs, configuration backups, and vulnerability remediation.
• Maintain and troubleshoot Carbon Black EDR, including servers, endpoint sensors, PostgreSQL/Solr components, application services, logs, and endpoint onboarding.
• Administer Cloudflare DDoS/WAF services, including website onboarding/offboarding, security rules, IP whitelisting/blacklisting, SSL certificates, access reviews, and log reviews.
• Administer CyberArk PAM, including privileged account onboarding/offboarding, access reviews, password management, service requests, and audit activities.
• Monitor cybersecurity platforms and investigate system, security, application, and audit logs for anomalies or operational issues.
• Support vulnerability management, security assessments, audits, incident investigations, and remediation activities.
• Manage backup and restoration activities, including configuration backups, restoration testing, and maintenance of backup records.
• Raise and manage change requests in accordance with established change management processes.
• Maintain technical documentation including SOPs, asset inventories, configuration records, troubleshooting guides, security trackers, and maintenance reports.
• Work closely with internal security teams, vendors, OEMs, and other technical stakeholders to resolve platform issues.
• Ensure cybersecurity platforms comply with organisational security policies, the Cybersecurity Act, and Cybersecurity Code of Practice (CCoP).
• Provide onsite support at secure premises when required for scheduled maintenance and ad-hoc troubleshooting.

Requirements

• Strong knowledge of enterprise networking, including TCP/IP, VLANs, routing, NAT, DNS, network segmentation, firewall traffic flow, and network troubleshooting.
• Hands-on experience with Palo Alto Networks Next-Generation Firewalls or equivalent enterprise firewall platforms.
• Experience managing firewall policies, NAT, routing, security profiles, logs, firmware upgrades, patching, and configuration backup/restoration.
• Hands-on experience with Carbon Black EDR or equivalent Endpoint Detection and Response platforms.
• Experience with Cloudflare or equivalent DDoS mitigation/WAF solutions, including security rules, SSL certificates, IP whitelisting/blacklisting, and log management.
• Experience with CyberArk PAM or equivalent privileged access management solutions.
• Good understanding of vulnerability management, security hardening, patch management, change management, and cybersecurity incident response.
• Understanding of highly secured network environments, including air-gapped networks, restricted connectivity, offline patch/file transfers, and data diodes/unidirectional gateways.
• Familiarity with PKI and TLS/SSL certificate lifecycle management is advantageous.
• Experience supporting cybersecurity platforms within CII, highly secured, segregated, or air-gapped environments is advantageous.
• Able to provide onsite support and undergo the required security clearance.

Preferred Certifications

• CCNA or equivalent networking certification.
• Relevant Palo Alto Networks firewall certification.
• CyberArk Defender – PAM; CyberArk Sentry – PAM is advantageous.
• Relevant Cloudflare WAF/DDoS certification or training is advantageous.