WAF Operations Engineer

Role Overview:

• Endtoend operational management and security efficacy of cloudbased nextgeneration WAF across multiple environments (public cloud, edge/CDN, and hybrid). The role spans policy design, application onboarding, performance optimization and compliance. Closely work with application owners, IT infra, Security, SOC and the Vendor/OEM teams to defend web, Mobile and API workloads against OWASP Top 10, bot attacks, DDoS and emerging threats.

Role & responsibilities

• Manage WAF, Firewalls, IPS/IDS, DDoS, and Zero Trust infrastructure
• Drive policy optimization, rule hygiene, and bestpractice alignment across all perimeter controls
• Maintain regulatory compliance (RBI, SEBI, CERTIn) across each layer of perimeter defence
• Support audit observations, VAPT closure, RBI inspections, IS audits, and uptime.
• Provide endtoend perimeter governance, ensuring the resource is effectively utilized while reducing reliance on OEM/SI partners
• Strengthen the overall cyberresilience of the organization rather than siloing one skillset

Preferred candidate profile

• Bachelors/Masters in Computer Science, Information Technology or related field.
• 10+ years in application security or network security with minimum 7+ years handson managing WAFs at scale.
• Direct experience with one or more: Indusface/F5/Imperva.
• Strong knowledge of HTTP/S, TLS, CDN/edge architectures, reverse proxies, Load Balancers, DNS, L7 DDoS controls and routing.
• This positioning ensures that the resource delivers maximum operational efficiency, stronger security outcomes, and better ROI, while maintaining the ability to support multilayer perimeter security in line with BFSI regulatory expectations.
• The role must handle multifunctional across the entire perimeter security stack to ensure optimal utilization, efficiency, and business value.