Network Tech Lead Website Protection (DNS / CDN / WAF)

We are seeking an experienced operational engineer with deep expertise in Domain Name Management (DNS), Web Application Firewall (WAF) & Content Delivery Network (CDN)  technologies (focus on Cloudflare) and infrastructure as code (python and ansible), to lead the worldwide operations.

MAIN RESPONSABILITIES

Global Operations :    

• Responsible for technical delivery of his expertise
• Escalation point for L3 which is in charge
• L1.5, L2 , L3 skills validation responsibility
• Following the define rules & procedure backup of the Tower lead during holidays / Days Off
• Could be on duty for specific transformation during no business hours

Lifecycle and Compliance:

• Oversee the deployment, configuration, and integration of  2000+ domains names.
• Collaborate with IT, Mtiers, and application teams to define enhancement action plan for the service line.
• Guide and support technical teams during implementation and optimization phases.
• Level 3 support (escalation) for India Tech Hub Run team for his perimeter.
• Define and enforce standards and procedures.
• Ensure solutions support audit, compliance and reporting requirements.
• Conduct risk assessments and recommend mitigation strategies

Key Activities and Task

• Oversee Infrastructure Operations: Manage deployment, maintenance, and monitoring of his domain expertise
• Mentor Team: Guide and develop infrastructure engineers, promoting knowledge sharing and technical growth.
• Ensure Security & Compliance: Implement and enforce security policies and ensure regulatory adherence for infrastructure.
• Resolve Complex Issues: Act as an escalation point for major infrastructure problems and lead troubleshooting efforts
• Continuous improvement : Provide feedback of RUN activities (process, documentation,.)

PROFILE REQUIREMENTS 

Technical Competencies

• Expertise on Cloudflare (WAF, TLS/SSL, CDN) - including workers, pageshield, rate limiting, Turnstile, Antibot, Api Shield. 
• Operational Web Security Expertise : be able to analyze attacks & define remediation / mitigation actions & to implement them through available tool set.
• Monitoring : Ability to draw, automate and make dashboarding / monitoring evolutions
• Compliance: Ability to lead compliance campaign & transversal reviews of various components (dns, zone file, all kind of rules (waf, antibot, ),)
• Email Security: DMARC / DKIM / SPF implementation specificities of various emailing tools (SFSC, SFMC, Sendgrid, Mailchimp and such), how to handle dmarc reports (update, monitor, analyze, action plan)
• Experience on Infrastructure as code (Python, Ansible) 
• 10+ years of experience in managing DNS / CDN / WAF Cloudflare solution for large companies with large application portfolio.
• General shift business hours : from 10:30 AM to 7:30 PM IST