This list contains only the countries for which job offers have been published in the selected language (e.g., in the French version, only job offers written in French are displayed, and in the English version, only those in English).
The L3 WAF and SSL Orchestration Engineer will be a senior technical expert responsible for the design, implementation, and advanced support of Web Application Firewall (WAF) and SSL Orchestration (SSLO) solutions. The ideal candidate will have extensive experience in a large-scale banking or financial services environment, with a deep understanding of network security, regulatory compliance, and application delivery. This role requires expertise in protecting mission-critical web applications from advanced threats and ensuring the secure and seamless inspection of encrypted traffic.
Job Responsibility:
Serve as the L3 escalation point for critical incidents related to F5 WAF, SSLO, and other BIG-IP modules.
Configure, tune, and maintain F5 Advanced WAF (formerly ASM) policies to protect against OWASP Top 10 vulnerabilities and other application-layer threats.
Implement and manage F5 BIG-IP SSL Orchestrator (SSLO) for traffic decryption and steering to security devices.
Manage configurations for F5 BIG-IP platforms, including virtual servers, profiles, and iRules, and perform upgrades and patching.
Coordinate with F5 support (TAC) and other OEMs for technical assistance, Return Merchandise Authorization (RMA), and reconfiguration.
Perform root cause analysis (RCA) on complex security incidents and recommend preventive measures.
Troubleshoot and resolve complex application traffic anomalies, security violations, and connectivity issues.
Investigate and resolve WAF incidents by analyzing packet captures using tools like Wireshark.
Maintain network and security architecture diagram and review and update the based-on changes. Further, proper maintenance for LLD and HLD for each solution and regular update of the same.
Provide the suggestions for any enhancements/changes that can enhance the security posture and/or add business value to the delivery framework.
Develop and document standard operating procedures and runbooks for incident response related to WAF & SSLO events.
Shall analyze incidents independently & identify root cause and act for containment and remediation.
Provides engineering analysis and architectural design of technical solutions
Sound analytical and troubleshooting skills
Good Team Management and co-ordination skills
Requirements:
Education*: BE/B-Tech/BCA or master’s degree in CS/IT