[ref. m15785222] Systems Engineer - Firewall (Central Infra) - Toa Payoh

Position Overview

The firewall engineer is expected to :

• Work on enterprise firewall management, incident response
• Support the department on policy and governance matters
• To be on standby with on-call availability with varied shifts including nights, weekends and holidays on rotational basis

This is a 2 years direct contract position with Synapxe

• Firewall Management: Configure, deploy, and maintain Fortinet and Palo Alto firewalls, ensuring optimal security posture
• Algosec Administration: Assist in managing firewall policy automation, compliance checks, and risk analysis using Algosec
• Team Leadership (For more senior candidates): Mentor junior engineers, coordinate firewall-related projects, and ensure best practices are followed
• Governance & Compliance: Support the HOD in audits, risk assessments, and security policy enforcement
• Automation & Scripting: Develop and maintain scripts (Python, Ansible, etc.) to automate firewall rule management and reporting
• Incident Response: Troubleshoot firewall-related issues, perform root cause analysis, and implement fixes
• Vulnerability Management: Work with the security team to address firewall-related vulnerabilities and apply patches
• Documentation: Maintain detailed records of firewall rules, changes, and compliance reports

• Possess a Professional certificate/NITEC/Diploma in Computer Engineering/Information Technology or equivalent
• Min 5 years of hands-on experience managing Enterprise Firewalls (NGFW, VPN, IPS/IDS)
• Experience with Algosec for firewall policy management (preferred)
• Strong understanding of networking (TCP/IP, BGP, VPNs, routing/switching)
• Scripting knowledge (Python, Bash, PowerShell, etc) for automation tasks
• Team leadership or mentoring experience is highly desirable
• Familiarity with cloud security (AWS/Azure firewalls) is a plus
• Certifications such as PCNSE (Palo Alto), NSE (Fortinet), or CISSP/CCSP are advantageous
• Strong analytical skills and ability to work in a fast-paced environment