L2 F5 WAF Engineer

Kreate Energy; Khordha; On-site; INR 1,200,000 - 1,800,000; Full time

Job summary

Kreate Energy is seeking an experienced WAF and SSL Orchestration L2 Engineer to join our security team. You will provide operational support, administration, and maintenance of F5 BIG-IP WAF ASM and SSLO, protecting critical banking applications and data.

The role requires hands-on troubleshooting, incident analysis, RCA, and collaboration with infrastructure and security teams in a 24x7 enterprise environment. Rotational shifts may be required.

Qualifications

• 5+ years of relevant Network Security/F5 experience.
• Hands-on administration with F5 ASM/WAF.
• Experience with F5 SSL Orchestrator (SSLO).
• Working knowledge of F5 LTM.
• Strong troubleshooting for production incidents.
• Experience in enterprise 24x7 environments.

Responsibilities

• Provide Level 2 operational support for F5 BIG-IP WAF ASM and SSLO modules.
• Monitor F5 platforms for performance, availability, and security events, and respond to alerts.
• Analyze and resolve security incidents related to web apps and SSL/TLS traffic.
• Escalate complex issues to L3 engineering and TAC as required.
• Manage and deploy WAF and security policies, tune policies and handle exceptions.
• Configure SSLO for decrypting, inspecting, and re-encrypting SSL/TLS traffic.
• Develop SOPs, runbooks, and knowledge base for incident resolution.
• Lead root cause analysis and ensure configurations comply with security policies.

Skills

F5 ASM/WAF

F5 SSL Orchestrator

F5 LTM

Network Security

Troubleshooting

Tools

F5 BIG-IP

SSL/TLS Inspection

Job description

Job summary

The WAF & SSLO L2 Engineer will be a key member of our network security team, responsible for the operational support, administration, and maintenance of the bank's Web Application Firewall and SSL Orchestration platforms. This role focuses on protecting critical banking applications and sensitive data from modern web threats while ensuring compliance with stringent financial regulations. The ideal candidate will have strong L2 troubleshooting experience and a solid understanding of network security principles within a dynamic banking and financial services environment.

Key Responsibilities

• Provide Level 2 operational support for F5 BIG-IP systems, specifically for WAF (ASM) and SSL Orchestrator (SSLO) modules.
• Monitor F5 platforms for performance, availability, and security events, responding to alerts and service-desk tickets in line with established SLAs.
• Analyze and resolve security incidents related to web applications and SSL/TLS traffic, performing first-pass diagnostics and fixing routine issues.
• Escalate complex or high-severity issues to the L3 engineering team and F5 Technical Assistance Center (TAC) as required.
• Manage and deploy Web Application Firewall (WAF) policies and security policies, including managing exceptions and performing policy tuning.
• Perform configuration changes and updates on F5 SSL Orchestrator for decrypting, inspecting, and re-encrypting SSL/TLS traffic.
• Implement standard configurations for new applications and services as per design guidelines and bank policies.
• Develop and maintain Standard Operating Procedures (SOPs), runbooks, and a knowledge base for incident resolution.
• Lead the troubleshooting efforts for security incidents, providing accurate root cause analysis (RCA).
• Ensure that F5 WAF and SSLO configurations are compliant with the bank's security policies and regulatory requirements.
• Shall analyze incidents & identify root causes and act for containment and remediation.Role & responsibilities

Preferred Candidate Profile

The ideal candidate should have:

• 5+ years of relevant Network Security/F5 experience
• Strong hands-on administration experience with F5 ASM/WAF
• Practical implementation/support experience with F5 SSL Orchestrator (SSLO)
• Working knowledge of F5 LTM
• Strong troubleshooting capabilities for production incidents
• Experience working in enterprise 24x7 environments
• Good understanding of SSL/TLS and web application security
• Ability to coordinate effectively with multiple infrastructure and security teams
• Experience preparing RCA and technical documentation
• Willingness to work in rotational shift