ICT Infrastructure Engineer (Cyber)

Job Summary (Work Location : MAS (Contract)

The engineer is responsible for managing and maintaining the Authority's cybersecurity infrastructure, including endpoint protection, privileged access management, database application monitoring, file integrity monitoring, data loss prevention systems, and security monitoring tools. This role ensures the security posture of critical systems through proactive monitoring, incident response, system maintenance, and implementation of security enhancements across the organisation's technology stack

Key Responsibilities

Manage and maintain primary security systems including CyberArk PAM, Imperva DAM, Tripwire FIM and Trellix Endpoint DLP solutions.

Execute security infrastructure projects including CIS hardening implementations, system migrations, and platform consolidations.

Monitor and respond to security vulnerabilities and zero-day threats, implementing appropriate mitigation measures and patches.

Support system upgrades and migrations across multiple platforms whilst ensuring minimal disruption to business operations

Collaborate with cross-functional teams including EDP/USC for endpoint security tool deployments and updates.

Maintain security compliance through regular system hardening, configuration management, and policy enforcement.

Participate in disaster recovery planning and contribute to architectural planning for managed security tools in cloud environments.

Provide technical documentation, standard operating procedures, and knowledge transfer to support team operations

Respond to security incidents and provide after-hours support as required for critical security systems.

Requirements

Bachelor's degree in Cybersecurity, Information Technology, Computer Science, or related field.

Minimum 3-5 years of hands-on experience in cybersecurity operations and security tool management.

Proven experience with CyberArk PAM, Imperva DAM, Tripwire FIM and Trellix DLP is preferred.

Knowledge of vulnerability management tools and processes (Tenable, Nessus)

Understanding of enterprise security frameworks and compliance requirements.

Experience with system administration on Windows and Linux platforms.

Familiarity with security incident response procedures and methodologies.

Strong analytical and problem-solving skills with attention to detail.

Ability to work independently and manage multiple concurrent projects.

Excellent communication skills for stakeholder engagement and technical documentation.

Preferred Qualifications

Master's degree in Cybersecurity or related advanced qualification.

Professional certifications such as CyberArk Certified Delivery Engineer (CDE), CISSP, or equivalent security certifications.

Experience with automation tools and scripting (Ansible, Python, PowerShell).

Knowledge of cloud security platforms and hybrid infrastructure environments.

Familiarity with SIEM tools and security monitoring platforms.

Experience with Singapore Government security standards and compliance frameworks (IM8, CSA guidelines).

Understanding of financial sector security requirements and regulations.

Project management experience and ability to lead technical initiatives.

What will you be working on

Security Infrastructure Modernisation: Supporting ongoing platform migrations, system upgrades, and integration projects to maintain current security technology stack.

GDC Security Tool Setup/Migration: Contributing to the architectural planning and implementation of managed security tools in the Government Data Centre environment.

Supporting SOC on security incidents investigation, analysis and recommending remediation measures.

Collaborate with cross-functional teams to ensure security considerations are integrated into all aspects of IT operations and projects.

Manage and optimise CyberArk Privileged Access Management (PAM) solutions to enhance security controls.

Utilise Tenable vulnerability management tools to identify, assess, and mitigate security risks across the organisation.

Drive new initiatives to improve operational efficiency through system integration, automation and enhancement of SOPs for CyberArk management.

Support the Tripwire upgrade project in collaboration with vendor support teams.

Spearhead the new datacentre CyberArk setup project, including architecture design and implementation.