Responsibilities
- Operate, maintain, and support enterprise cybersecurity platforms including Palo Alto Firewalls, Carbon Black EDR, Cloudflare DDoS/WAF, and CyberArk PAM.
- Perform preventive maintenance, system health checks, patching, firmware upgrades, configuration changes, and troubleshooting for cybersecurity platforms.
- Manage Palo Alto firewall policies, rules, NAT, routing, security profiles, logs, configuration backups, and vulnerability remediation.
- Maintain and troubleshoot Carbon Black EDR, including servers, endpoint sensors, PostgreSQL/Solr components, application services, logs, and endpoint onboarding.
- Administer Cloudflare DDoS/WAF services, including website onboarding/offboarding, security rules, IP whitelisting/blacklisting, SSL certificates, access reviews, and log reviews.
- Administer CyberArk PAM, including privileged account onboarding/offboarding, access reviews, password management, service requests, and audit activities.
- Monitor cybersecurity platforms and investigate system, security, application, and audit logs for anomalies or operational issues.
- Support vulnerability management, security assessments, audits, incident investigations, and remediation activities.
- Manage backup and restoration activities, including configuration backups, restoration testing, and maintenance of backup records.
- Raise and manage change requests in accordance with established change management processes.
- Maintain technical documentation including SOPs, asset inventories, configuration records, troubleshooting guides, security trackers, and maintenance reports.
- Work closely with internal security teams, vendors, OEMs, and other technical stakeholders to resolve platform issues.
- Ensure cybersecurity platforms comply with organisational security policies, the Cybersecurity Act, and Cybersecurity Code of Practice (CCoP).
- Provide onsite support at secure premises when required for scheduled maintenance and ad-hoc troubleshooting.
Requirements
- Strong knowledge of enterprise networking, including TCP/IP, VLANs, routing, NAT, DNS, network segmentation, firewall traffic flow, and network troubleshooting.
- Hands-on experience with Palo Alto Networks Next-Generation Firewalls or equivalent enterprise firewall platforms.
- Experience managing firewall policies, NAT, routing, security profiles, logs, firmware upgrades, patching, and configuration backup/restoration.
- Hands-on experience with Carbon Black EDR or equivalent Endpoint Detection and Response platforms.
- Experience with Cloudflare or equivalent DDoS mitigation/WAF solutions, including security rules, SSL certificates, IP whitelisting/blacklisting, and log management.
- Experience with CyberArk PAM or equivalent privileged access management solutions.
- Good understanding of vulnerability management, security hardening, patch management, change management, and cybersecurity incident response.
- Understanding of highly secured network environments, including air-gapped networks, restricted connectivity, offline patch/file transfers, and data diodes/unidirectional gateways.
- Familiarity with PKI and TLS/SSL certificate lifecycle management is advantageous.
- Experience supporting cybersecurity platforms within CII, highly secured, segregated, or air-gapped environments is advantageous.
- Able to provide onsite support and undergo the required security clearance.
Preferred Certifications
- CCNA or equivalent networking certification.
- Relevant Palo Alto Networks firewall certification.
- CyberArk Defender – PAM; CyberArk Sentry – PAM is advantageous.
- Relevant Cloudflare WAF/DDoS certification or training is advantageous.