Cyber Security Firewall Engineer (FortiGate, Palo Alto)
Flintex Consulting Pte Ltd · Singapore · SGD 60K–SGD 72K/yr
Staffing and Recruiting · 11-50 employees
About the role
Manage and optimize Fortinet and Palo Alto firewalls, including rule creation, VPN configuration, and firmware upgrades. Monitor security events and administer Tripwire and Imperva platforms to ensure system integrity and database security.
What they look for
Requirements
Requires hands-on expertise in FortiGate and Palo Alto firewalls along with a strong foundation in networking fundamentals. Experience in incident response and change management is required, with certifications like NSE or PCNSE preferred.
Full description
About the Role:
We are seeking a hands-on Cyber Security Firewall Engineer to provide operational support and security platforms. The ideal candidate will be experienced in managing Fortinet FortiGate and Palo Alto Networks firewalls, with foundation in network security, policy management, and incident response.
Key Responsibilities:
Firewall Operations (Fortinet & Palo Alto)
- Manage firewall rules creation, change requests, rule optimization, NAT/VPN configuration and firmware upgrades.
- Monitor traffic, identify anomalies, and remediate security events.
- Maintain HA configurations, routing and logging integrations.
- Support audits and evidence collection for regulatory/compliance requirements.
Tripwire
- Administer policies, baselines, agents, alerts, and remediation workflows.
- Investigate integrity violations; tune rules to reduce false positives.
Imperva (DB Security/DAM)
- Configure security policies, signatures, profiles, and exceptions.
- Monitor application-layer attacks; tune rules to balance protection and usability.
- Support database activity monitoring policies and reporting where applicable.
- Security Monitoring & Incident Response
- Triage alerts conduct root-cause analysis, and coordinate remediation.
Required Qualifications:
Hands-on expertise with:
- Fortinet FortiGate (policies, VPN, routing, HA, SD-WAN, logging).
- Palo Alto Networks firewalls (policies, NAT, App-ID, User-ID, Panorama).
- Tripwire (Hice to Have).
- Imperva (Hice to Have).
- Strong understanding of networking fundamentals (TCP/IP, VLANs, routing, NAT, SSL/TLS, DNS ).
- Experience in incident response, change management, and documentation.
- Ability to work independently with a focus on accuracy, speed, and risk reduction.
Preferred Certifications (Nice to Have)
Fortinet NSE 4–7, Palo Alto PCNSA/PCNSE, Imperva Certified Professional.
Soft Skills
- Clear communication with stakeholders and change advisory boards.
- Structured problem-solving and risk-based decision-making.
- Ownership mindset with strong time management for a contract environment.
Deliverables & KPIs
- Firewall rules changes are accordance to requests.
- Successful completion of firmware upgrades and config backups with rollback plans.
- Updated Tickets, network diagrams, and change records.
- Handover documentation and knowledge transfer at contract end.
Tools & Environment
- FortiGate / FortiManager / FortiAnalyzer
- Palo Alto NGFW / Panorama
- Tripwire Enter
