WAAP Platform Engineer

Key Accountabilities

• Own the quality, consistency, and technical integrity of engineering outputs for the WAAP capability.
• Produce and maintain engineering standards, reference designs, patterns, configuration baselines, decision records, and implementation guidance.
• Ensure requirements and architecture decisions are translated into deliverable, testable, and operationally sustainable solutions.
• Define acceptance criteria and evidence for platform controls, including functional, security, resilience, performance, and efficacy outcomes.
• Promote automation and repeatability through infrastructure-as-code, policy-as-code, APIs, and CI/CD integration where appropriate.
• Assess non-standard designs and exceptions, documenting technical rationale, risks, compensating controls, ownership, and remediation or exit plans.
• Coordinate technical discovery and evaluation of new WAAP capabilities, product features, and vendor solutions.
• Use operational telemetry, incidents, tuning outcomes, engineering feedback, and threat intelligence to identify and prioritize platform improvements.
• Facilitate design reviews and technical forums, communicating decisions and trade-offs clearly to technical and non-technical stakeholders.
• Support the WAAP roadmap by identifying dependencies, technical debt, lifecycle risks, and opportunities to simplify or consolidate the platform estate.

Ideal Candidate Profile

• Demonstrable experience engineering enterprise WAAP, WAF, API security, bot management, DDoS protection, or related application-edge security platforms.
• Experience providing technical leadership across complex, multi-platform environments and translating strategy and architecture into implementable engineering outcomes.
• Strong understanding of web and API protocols, modern application architectures, common attack techniques, and layered mitigation strategies.
• Practical experience defining platform standards, reusable patterns, configuration baselines, guardrails, and technical documentation.
• Experience with several major WAAP or WAF technologies, such as AWS, Google Cloud, Azure, Akamai, F5, Cloudflare, and an understanding of their deployment and operating models.
• Knowledge of cloud, network, application delivery, identity, observability, resilience, and DevSecOps principles relevant to WAAP services.
• Experience with automation, APIs, infrastructure-as-code, policy-as-code, source control, and CI/CD pipelines.
• Ability to design and execute proofs of concept, control validation, and efficacy testing, and to turn results into clear engineering recommendations.
• Sound risk judgement with experience assessing exceptions, documenting technical decisions, and working within security, compliance, and governance frameworks.
• Strong analytical and problem-solving skills, with the ability to balance security outcomes, business needs, operability, cost, and delivery constraints.
• Excellent written and verbal communication skills, including the ability to influence architecture, capability, engineering, operations, and business stakeholders.
• A collaborative, outcome-focused approach and a commitment to continuous learning, service improvement, and engineering excellence.