L2 F5 WAF Engineer

Job Summary

We are looking for an experienced L2 F5 WAF & SSL Orchestrator Engineer to provide operational support, administration and troubleshooting for enterprise F5 BIG-IP security infrastructure.The engineer will primarily support F5 BIG-IP ASM/Advanced WAF and SSL Orchestrator (SSLO) environments and will be responsible for maintaining the availability, performance and security of critical banking applications.The role requires strong hands-on experience in F5 BIG-IP technologies, Web Application Firewall policy management, SSL/TLS traffic inspection, troubleshooting and incident management within a 24x7 enterprise environment.

Key Responsibilities

• Provide Level 2 operational support for F5 BIG-IP platforms with primary focus on ASM/WAF and SSL Orchestrator (SSLO).
• Monitor F5 infrastructure for availability, performance, capacity and security events.
• Troubleshoot incidents related to:
• F5 ASM / WAF
• SSL Orchestrator
• LTM
• Virtual Servers
• Pools and Pool Members
• SSL Profiles
• Certificates
• SSL/TLS traffic
• Application access and connectivity
• Analyze and resolve Web Application Firewall-related incidents, blocked requests, false positives and application access issues.
• Create, modify, deploy and tune F5 ASM/WAF security policies.
• Manage WAF policy exceptions, signatures, violations and security events.
• Perform configuration and operational activities on F5 SSL Orchestrator (SSLO).
• Support SSL/TLS traffic decryption, inspection and re-encryption through SSLO.
• Troubleshoot SSL handshake, certificate, cipher and TLS-related issues.
• Configure and support application onboarding on F5 BIG-IP based on approved architecture and design standards.
• Perform approved configuration changes, upgrades, patches and security updates.
• Analyze security incidents and identify their root cause, containment and remediation actions.
• Lead L2 troubleshooting and prepare Root Cause Analysis (RCA) for major incidents.
• Escalate complex technical issues to L3 engineering teams and F5 TAC whenever required.
• Coordinate with application, network, SOC, security, infrastructure and other stakeholder teams during incident investigation and remediation.
• Ensure that WAF and SSLO configurations comply with organizational security policies and applicable banking/regulatory requirements.
• Maintain operational documentation including:
• SOPs
• Runbooks
• Troubleshooting guides
• Knowledge-base articles
• Configuration documentation
• Participate in change, incident and problem-management processes.
• Provide technical and engineering analysis for F5-related security solutions and assist with architectural/design recommendations where required.

Mandatory Technical Skills

Candidate should have strong hands-on experience with:

• F5 BIG-IP ASM / Advanced WAF
• F5 SSL Orchestrator SSLO
• F5 BIG-IP LTM
• Web Application Firewall administration
• WAF policy creation and tuning
• Attack signatures and violations
• WAF false-positive troubleshooting
• SSL/TLS concepts
• SSL certificates and certificate chains
• SSL Profiles
• SSL offloading / termination
• SSL decryption and re-encryption
• Virtual Servers
• Pools and Pool Members
• Health Monitors
• Load balancing
• TCP/IP
• HTTP / HTTPS
• DNS fundamentals
• Network Security
• Incident and Problem Management
• RCA preparation

Preferred Skills

Exposure to one or more of the following will be advantageous:

• F5 iRules
• F5 iApps
• F5 BIG-IQ
• F5 AFM
• F5 APM
• OWASP Top 10
• Web application attacks
• SIEM/SOC integration
• Vulnerability management
• Banking/BFSI security environments
• ITIL processes
• F5 TAC coordination

Experience

Minimum 5 years of relevant experience in Network Security / F5 BIG-IP administration and support.Educational Qualification

• BE / B.Tech / BCA in Computer Science, IT, Electronics or related discipline, or
• Master’s degree in Computer Science / IT or related field.

Certification RequirementsCandidate should possess relevant security/networking and F5 certifications.Required certification combination:

• CEH / CCNA / CCNP Security or equivalent networking/security certification
• F5 OEM Certification such as F5-CA / F5-CTS

Minimum 2 relevant certifications preferred/required as per project criteria.

Experience: 5+ Years

Employment Type: Full-Time