L2 F5 WAF Engineer

Job Summary

We are looking for an experienced L2 F5 WAF & SSL Orchestrator Engineer to provide operational support, administration and troubleshooting for enterprise F5 BIG-IP security infrastructure.The engineer will primarily support F5 BIG-IP ASM/Advanced WAF and SSL Orchestrator (SSLO) environments and will be responsible for maintaining the availability, performance and security of critical banking applications.The role requires strong hands-on experience in F5 BIG-IP technologies, Web Application Firewall policy management, SSL/TLS traffic inspection, troubleshooting and incident management within a 24x7 enterprise environment.

Key Responsibilities

• Provide Level 2 operational support for F5 BIG-IP platforms with primary focus on ASM/WAF and SSL Orchestrator (SSLO).

• Monitor F5 infrastructure for availability, performance, capacity and security events.

• Troubleshoot incidents related to:

• F5 ASM / WAF

• SSL Orchestrator

• LTM

• Virtual Servers

• Pools and Pool Members

• SSL Profiles

• Certificates

• SSL/TLS traffic

• Application access and connectivity

• Analyze and resolve Web Application Firewall-related incidents, blocked requests, false positives and application access issues.

• Create, modify, deploy and tune F5 ASM/WAF security policies.

• Manage WAF policy exceptions, signatures, violations and security events.

• Perform configuration and operational activities on F5 SSL Orchestrator (SSLO).

• Support SSL/TLS traffic decryption, inspection and re-encryption through SSLO.

• Troubleshoot SSL handshake, certificate, cipher and TLS-related issues.

• Configure and support application onboarding on F5 BIG-IP based on approved architecture and design standards.

• Perform approved configuration changes, upgrades, patches and security updates.

• Analyze security incidents and identify their root cause, containment and remediation actions.

• Lead L2 troubleshooting and prepare Root Cause Analysis (RCA) for major incidents.

• Escalate complex technical issues to L3 engineering teams and F5 TAC whenever required.

• Coordinate with application, network, SOC, security, infrastructure and other stakeholder teams during incident investigation and remediation.

• Ensure that WAF and SSLO configurations comply with organizational security policies and applicable banking/regulatory requirements.

• Maintain operational documentation including:

• SOPs

• Runbooks

• Troubleshooting guides

• Knowledge-base articles

• Configuration documentation

• Participate in change, incident and problem-management processes.

• Provide technical and engineering analysis for F5-related security solutions and assist with architectural/design recommendations where required.

Mandatory Technical Skills

Candidate should have strong hands-on experience with:

• F5 BIG-IP ASM / Advanced WAF
• F5 SSL Orchestrator SSLO
• F5 BIG-IP LTM
• Web Application Firewall administration
• WAF policy creation and tuning
• Attack signatures and violations
• WAF false-positive troubleshooting
• SSL/TLS concepts
• SSL certificates and certificate chains
• SSL Profiles
• SSL offloading / termination
• SSL decryption and re-encryption
• Virtual Servers
• Pools and Pool Members
• Health Monitors
• Load balancing
• TCP/IP
• HTTP / HTTPS
• DNS fundamentals
• Network Security
• Incident and Problem Management
• RCA preparation

Preferred Skills

Exposure to one or more of the following will be advantageous:

• F5 iRules
• F5 iApps
• F5 BIG-IQ
• F5 AFM
• F5 APM
• OWASP Top 10
• Web application attacks
• SIEM/SOC integration
• Vulnerability management
• Banking/BFSI security environments
• ITIL processes
• F5 TAC coordination

Experience

Minimum 5 years of relevant experience in Network Security / F5 BIG-IP administration and support.Educational Qualification

• BE / B.Tech / BCA in Computer Science, IT, Electronics or related discipline, or
• Master’s degree in Computer Science / IT or related field.

Certification RequirementsCandidate should possess relevant security/networking and F5 certifications.Required certification combination:

• CEH / CCNA / CCNP Security or equivalent networking/security certification
• F5 OEM Certification such as F5-CA / F5-CTS

Minimum 2 relevant certifications preferred/required as per project criteria.

Experience: 5+ Years

Employment Type: Full-Time