CDN Engineer

Litmus7 Systems Consulting Ltd; India; On-site; INR 1,800,000 - 3,400,000; Full time

Job summary

Litmus7 Systems Consulting Ltd is seeking a senior security engineer with deep expertise in enterprise CDN platforms, especially Akamai, and familiarity with Cloudflare.

You will write, deploy and tune WAF rules, configure bot mitigation, and shape DDoS defenses across multi‑cloud environments, working with vendors and promptly responding to incidents.

Qualifications

• WAF tuning and threat mitigation demonstrated.
• Experience with enterprise CDN platforms is required.

Responsibilities

• 5 to 10+ years of deep, demonstrable expertise with enterprise CDN platforms such as Akamai and nice to have Cloudflare.
• Writing, deploying, and tuning custom WAF rules and managed rule groups.
• Configuring and managing bot mitigation policies, bot scoring thresholds, and challenge/block actions.
• Designing and executing DDoS mitigation strategies for both volumetric and application-layer attacks.
• Develop and maintain rate limiting, IP reputation management, and client fingerprinting policies to defend against credential stuffing, scraping, account takeover, and API abuse.
• Partner with CDN and security vendors on escalated threat investigations, platform capabilities, and contract/SLA management.
• Conduct vulnerability assessments, respond to security incidents promptly and thoroughly.
• Manage privileged access and enforce least-privilege principles, implement identity security measures for multi-cloud environments.

Skills

WAF tuning

Threat mitigation

Tools

Akamai

Cloudflare

Job description

Responsibilities

• 5 to 10+ years ofdeep, demonstrable expertise with enterprise CDN platforms such as Akamai and nice to have Cloudflare.
• Writing, deploying, and tuning custom WAF rules and managed rule groups.
• Configuring and managing bot mitigation policies, bot scoring thresholds, and challenge/block actions.
• Designing and executing DDoS mitigation strategies for both volumetric and application-layer attacks.
• Develop and maintain rate limiting, IP reputation management, and client fingerprinting policies to defend against credential stuffing, scraping, account takeover, and API abuse.
• Partner with CDN and security vendors on escalated threat investigations, platform capabilities, and contract/SLA management.
• Conduct vulnerability assessments, respond to security incidents promptly and thoroughly.
• Manage privileged access and enforce least-privilege principles, implement identity security measures for multi-cloud environments.