Cybersecurity Platform Engineer

Operate and maintain Palo Alto firewalls, including firewall rules/policies, patching, firmware upgrades, health checks, log reviews, configuration changes and troubleshooting.

Maintain Carbon Black EDR, including RHEL-hosted servers, endpoint sensors, application services, logs, patching, endpoint onboarding and troubleshooting.

Administer Cloudflare DDoS/WAF, including website onboarding/offboarding, WAF/security rules, IP whitelist/blacklist changes, SSL certificates, access/log reviews and vendor coordination.

Administer CyberArk PAM, including privileged account onboarding/offboarding, access reviews, password management, service/change requests and audit logs.

Perform vulnerability remediation, patch management, security reviews and preventive maintenance.

Support cybersecurity incidents, investigations, assessments and audits.

Maintain and test platform backup and restoration processes.

Raise and manage change requests for system/configuration changes.

Maintain SOPs, asset inventories, configuration records, security trackers and maintenance reports.

Ensure compliance with organisational cybersecurity policies, CSA Cybersecurity Act requirements and CCoP.

Required Skills

Strong enterprise networking fundamentals: TCP/IP, VLAN, routing, NAT, DNS, network segmentation and troubleshooting.

Hands-on experience with:

Palo Alto NGFW or equivalent

Carbon Black EDR or equivalent

Cloudflare DDoS/WAF or equivalent

CyberArk PAM or equivalent

Experience with firewall policies, patching, log analysis, endpoint/security platform administration and troubleshooting.

Understanding of secure/segregated or air-gapped environments, including controlled offline patch/file transfers.

Preferred Skills

Vulnerability management, security hardening, incident response and change management experience.

PKI / TLS / SSL certificate management.

Experience supporting highly secured or CII environments.

Certifications such as CCNA, Palo Alto, CyberArk Defender/Sentry or Cloudflare-related certification.

#J-18808-Ljbffr