F5 / Network Engineer - Load Balancing - Remote

World Wide Technology (WWT) is a global technology solutions provider that combines strategy, engineering and deep partner relationships to deliver complex infrastructure, network and security programmes for some of the world’s leading organisations.

WWT is looking for a highly skilled F5 Network Engineer to join a network build and deployment programme for a leading global financial services client. You will bring hands-on F5 BIG-IP load balancing experience together with strong routing and switching and/or firewall skills, and you will take work from design through to live traffic.

• Build and deploy F5 BIG-IP load balancing platforms (LTM) as part of the network, configuring VIPs, pools, health monitors, persistence, SNAT and traffic distribution for new and migrated services.
• Migrate legacy load balancers (F5 or other vendors) onto new F5 platforms, including cutover planning, testing and rollback.
• Design and build the network integration around the load balancers: VLANs, self IPs, trunking and LACP, route domains, HA pairs and failover, BGP/OSPF route health injection, and traffic flows through firewalls (including asymmetric routing, SNAT and DSR design).
• Build and deploy enterprise routing and switching infrastructure, configuring BGP and OSPF from design through to live traffic.
• Implement firewall policy and rule sets for load balanced services, and support firewall deployments and migrations where the build requires it.
• Produce the implementation artefacts that go with the build: HLDs and LLDs, configuration standards, test plans, method statements and backout plans.
• Own delivery of your workstream end to end: planning, raising and presenting changes, coordinating with other teams and vendors, executing the implementation and validating the result.
• Work implementation windows, including out of hours and weekends where the change requires it.
• Troubleshoot during build and cutover using packet captures and flow analysis, resolving load balancing, routing, switching and firewall issues before handover to operations.

WHAT YOU'LL NEED

• Demonstrable project implementation and migration experience. You have delivered builds and cutovers, not just supported them.
• Strong hands-on F5 BIG-IP build experience (LTM): virtual servers, pools, monitors, profiles, SNAT, persistence, HA/failover and TMOS administration. Working knowledge of iRules for traffic steering is expected.
• Solid understanding of how load balancers sit in the network: L2/L3 design, VLANs and trunking, routing, NAT, and L4 to L7 traffic flow. This is a network-focused role, not an application security (WAF/ASM) role.
• Strong hands-on routing and switching, with BGP and OSPF at CCNP level or above, and/or hands-on enterprise firewall deployment, policy and migration experience (Palo Alto, Check Point, Cisco or similar).
• Comfortable physically deploying kit and coordinating engineers and third parties, working to strict change control in a large enterprise environment and guiding project managers on sequencing.
• Clear communicator who writes usable documentation and works well across infrastructure, security and project teams.

NICE TO HAVE

• BIG-IP DNS (GTM) and global server load balancing experience.
• Automation exposure for repeatable builds (AS3, Ansible or Python).

CERTIFICATIONS

• F5 certification desirable (F5-CA / F5-CTS LTM, or 101/201/301a equivalent).
• CCNP or CCIE (Enterprise / Routing & Switching) desirable.
• Firewall vendor certifications desirable (Palo Alto PCNSE, Check Point CCSA/CCSE or similar).