Network Security engineer-F5 and Firewall

Role & responsibilities

We are looking for an experienced Network Security Engineer with strong hands-on expertise in F5 BIG-IP LTM, F5 GTM/DNS, and Enterprise Firewalls.

The ideal candidate should have experience working on large enterprise/data center projects involving HLD/LLD, solution design, implementation, deployment, migration, testing, production cutover, and troubleshooting across both F5 Load Balancers and Firewalls.

This is a project engineering and implementation role. Candidates with only monitoring, ticket management, or BAU/operations support experience will not be considered.

Key Responsibilities

• Design, implement, deploy, migrate and troubleshoot F5 LTM and GTM/DNS solutions in large enterprise environments.
• Prepare and review High-Level Design (HLD) and Low-Level Design (LLD) documents.
• Translate business/application requirements into technical network and security solutions.
• Perform end-to-end implementation of F5 LTM, including:
• Virtual Servers / VIPs
• Pools and Pool Members
• Health Monitors
• Profiles
• Persistence
• SNAT
• SSL Offloading
• iRules
• HA and Failover
• Perform implementation and configuration of F5 GTM/DNS, including:
• Wide IP
• GSLB
• DNS Load Balancing
• Data Center traffic distribution
• GTM synchronization
• DR and business continuity solutions
• Perform application/VIP migration and F5 platform migration activities.
• Design, configure and deploy FortiGate or Cisco ASA Firewalls.
• Configure and troubleshoot:
• Firewall policies
• NAT
• ACLs
• VPN
• HA/Failover
• Routing
• Security policies
• Participate in firewall migration, replacement and deployment projects.
• Perform end-to-end traffic-flow troubleshooting across Routing/Switching Firewall F5 Application.
• Coordinate with application, network, security, infrastructure and other technical teams during project implementation.
• Prepare implementation plans, MOPs, test plans, rollback plans and technical documentation.
• Participate in production cutovers, planned maintenance and post-implementation/hypercare activities.
• Provide technical support during project deployment and resolve implementation-related issues.

Mandatory Technical Skills

F5 Load Balancing Mandatory

• F5 BIG-IP LTM
• F5 GTM/DNS
• Virtual Servers / VIPs
• Pools / Pool Members
• Health Monitors
• Persistence
• SNAT
• SSL Offloading
• iRules
• Profiles
• HA / Failover
• GSLB
• Wide IP
• DNS Load Balancing

Firewall Mandatory

Hands-on experience with at least one:

• FortiGate / Fortinet
• Cisco ASA

Experience should include:

• Firewall policy configuration
• NAT
• VPN
• HA/Failover
• Routing
• ACLs
• Firewall migration
• Firewall implementation and deployment

Network & Design

• Strong Routing & Switching fundamentals
• BGP
• OSPF
• TCP/IP
• VLANs
• Network traffic-flow troubleshooting
• HLD / LLD
• Network and Security Architecture
• Data Center networking

Project Experience – Mandatory

Candidates should have hands-on experience with the complete project lifecycle:

Requirement Analysis HLD LLD Design Implementation Testing Migration Production Cutover Deployment Hypercare

Candidates should have worked on large enterprise / data center projects where they were involved in both:

F5 LTM + GTM/DNS AND Firewall implementation/migration.

Candidate Profile

• 6–9 years of overall experience in Network Security / Network Engineering.
• Strong hands-on experience with both F5 LTM and F5 GTM/DNS.
• Hands-on experience with FortiGate or Cisco ASA.
• Proven experience in HLD/LLD, implementation, deployment and migration.
• Experience working in large enterprise/data center environments.
• Strong troubleshooting and analytical skills.
• Good communication and coordination skills.
• Ability to independently own technical implementation activities.

Important Note

F5 LTM + F5 GTM/DNS + Firewall experience are mandatory.

Candidates with only:

• F5 LTM experience,
• F5 administration/monitoring,
• Firewall support,
• BAU operations,
• Ticket-based troubleshooting,

without hands-on design, implementation, migration and deployment experience will not be considered.

Mandatory Skills

Must have all of the following:

• F5 LTM Mandatory
• F5 GTM/DNS Mandatory
• HLD/LLD – Mandatory
• F5 Implementation & Deployment – Mandatory
• F5 Migration experience – Mandatory
• FortiGate OR Cisco ASA – Mandatory
• BGP / OSPF
• Routing & Switching fundamentals
• Large Enterprise / Data Center project experience

Candidate Profile

Looking for candidates who have worked on the complete project lifecycle:

Requirement Analysis HL

Requirement Analysis HLD LLD Implementation Testing Migration Production Cutover Deployment Hypercare

Candidates with only F5 administration, monitoring, incident management or BAU support experience are not suitable.