M01 - Cyber Platform Engineer

FPT Asia Pacific Pte Ltd; Singapore; On-site; SGD 90,000 - 150,000; Full time

Job summary

FPT Asia Pacific Pte Ltd is seeking an experienced Cybersecurity Platform Administrator to operate, maintain, and support enterprise security platforms including Palo Alto Firewalls, Carbon Black EDR, Cloudflare DDoS/WAF, and CyberArk PAM.

You will perform maintenance, patching, and configuration tasks, manage firewall policies and logs, and coordinate with security teams for incident remediation. onsite support and security clearance eligibility are required.

Qualifications

• Experience with Palo Alto Networks next-gen firewalls and configuration.
• Hands-on with Carbon Black EDR, Cloudflare DDoS/WAF, and CyberArk PAM.
• Ability to operate in highly secured air-gapped environments and perform change management.
• Eligibility for required security clearance and onsite support.

Responsibilities

• Operate, maintain, and support enterprise cybersecurity platforms.
• Perform preventive maintenance, patching, and troubleshooting.
• Manage Palo Alto firewall policies, NAT, routing, logs, and backups.
• Administer Cloudflare DDoS/WAF services and SSL certificates.
• Administer CyberArk PAM and privileged accounts.
• Monitor logs for anomalies and support remediation activities.
• Raise and manage change requests per change management processes.
• Maintain SOPs and technical documentation; coordinate with vendors and stakeholders.
• Provide onsite support for scheduled maintenance and ad-hoc troubleshooting.

Skills

Networking fundamentals

Firewall administration

EDR management

DDoS/WAF

Privileged access management

Vulnerability management

Change management

Log analysis

Onsite support

Education

CCNA or equivalent networking certification

Palo Alto firewall certification

CyberArk Defender – PAM; Sentry – PAM

Cloudflare WAF/DDoS certification

Tools

Palo Alto Networks Next-Generation Firewalls

Carbon Black EDR

Cloudflare DDoS/WAF

CyberArk PAM

Job description

Responsibilities

• Operate, maintain, and support enterprise cybersecurity platforms including Palo Alto Firewalls, Carbon Black EDR, Cloudflare DDoS/WAF, and CyberArk PAM.
• Perform preventive maintenance, system health checks, patching, firmware upgrades, configuration changes, and troubleshooting for cybersecurity platforms.
• Manage Palo Alto firewall policies, rules, NAT, routing, security profiles, logs, configuration backups, and vulnerability remediation.
• Maintain and troubleshoot Carbon Black EDR, including servers, endpoint sensors, PostgreSQL/Solr components, application services, logs, and endpoint onboarding.
• Administer Cloudflare DDoS/WAF services, including website onboarding/offboarding, security rules, IP whitelisting/blacklisting, SSL certificates, access reviews, and log reviews.
• Administer CyberArk PAM, including privileged account onboarding/offboarding, access reviews, password management, service requests, and audit activities.
• Monitor cybersecurity platforms and investigate system, security, application, and audit logs for anomalies or operational issues.
• Support vulnerability management, security assessments, audits, incident investigations, and remediation activities.
• Manage backup and restoration activities, including configuration backups, restoration testing, and maintenance of backup records.
• Raise and manage change requests in accordance with established change management processes.
• Maintain technical documentation including SOPs, asset inventories, configuration records, troubleshooting guides, security trackers, and maintenance reports.
• Work closely with internal security teams, vendors, OEMs, and other technical stakeholders to resolve platform issues.
• Ensure cybersecurity platforms comply with organisational security policies, the Cybersecurity Act, and Cybersecurity Code of Practice (CCoP).
• Provide onsite support at secure premises when required for scheduled maintenance and ad-hoc troubleshooting.

Requirements

• Strong knowledge of enterprise networking, including TCP/IP, VLANs, routing, NAT, DNS, network segmentation, firewall traffic flow, and network troubleshooting.
• Hands-on experience with Palo Alto Networks Next-Generation Firewalls or equivalent enterprise firewall platforms.
• Experience managing firewall policies, NAT, routing, security profiles, logs, firmware upgrades, patching, and configuration backup/restoration.
• Hands-on experience with Carbon Black EDR or equivalent Endpoint Detection and Response platforms.
• Experience with Cloudflare or equivalent DDoS mitigation/WAF solutions, including security rules, SSL certificates, IP whitelisting/blacklisting, and log management.
• Experience with CyberArk PAM or equivalent privileged access management solutions.
• Good understanding of vulnerability management, security hardening, patch management, change management, and cybersecurity incident response.
• Understanding of highly secured network environments, including air-gapped networks, restricted connectivity, offline patch/file transfers, and data diodes/unidirectional gateways.
• Familiarity with PKI and TLS/SSL certificate lifecycle management is advantageous.
• Experience supporting cybersecurity platforms within CII, highly secured, segregated, or air-gapped environments is advantageous.
• Able to provide onsite support and undergo the required security clearance.

Preferred Certifications

• CCNA or equivalent networking certification.
• Relevant Palo Alto Networks firewall certification.
• CyberArk Defender – PAM; CyberArk Sentry – PAM is advantageous.
• Relevant Cloudflare WAF/DDoS certification or training is advantageous.