L2 F5 WAF Engineer

Kreate Technologies; Khordha, Mumbai, Nagpur District; On-site; INR 1,200,000 - 1,800,000; Full time

Job summary

Kreate Technologies is seeking an experienced L2 F5 WAF & SSL Orchestrator Engineer to provide operational support, administration and troubleshooting for enterprise F5 BIG-IP security infrastructure. The role focuses on ASM/WAF and SSLO, ensuring availability, performance and security of critical banking applications.

You will manage WAF policies, SSL/TLS inspection, incidents and RCA reports, with hands-on work across F5 BIG-IP platforms in a 24x7 enterprise environment.

Qualifications

• Minimum 5 years of relevant experience in Network Security / F5 BIG-IP administration and support.
• Bachelor’s or Master’s degree in Computer Science / IT or related field.

Responsibilities

• Provide Level 2 operational support for F5 BIG-IP platforms focusing on ASM/WAF and SSLO.
• Monitor infrastructure for availability, performance, capacity and security events.
• Troubleshoot incidents related to F5 ASM/WAF, SSLO, LTM and associated components.
• Analyze and resolve Web Application Firewall related incidents and false positives.
• Create, modify and tune F5 ASM/WAF security policies and exemptions.
• Manage SSLO configuration, SSL/TLS decryption, inspection and re-encryption.
• Coordinate with cross-functional teams during incident investigation and remediation.

Skills

F5 BIG-IP ASM

F5 SSL Orchestrator

F5 BIG-IP LTM

WAF administration

TLS concepts

SSL offloading

TCP/IP

HTTP/HTTPS

Education

BE / B.Tech / BCA in Computer Science or related

Master’s in CS / IT or related

Tools

F5 BIG-IP iRules

F5 BIG-IQ

OWASP Top 10

Job description

Job Summary

We are looking for an experienced L2 F5 WAF & SSL Orchestrator Engineerto provide operational support, administration and troubleshooting for enterprise F5 BIG-IP security infrastructure.The engineer will primarily support F5 BIG-IP ASM/Advanced WAF and SSL Orchestrator (SSLO)environments and will be responsible for maintaining the availability, performance and security of critical banking applications.The role requires strong hands-on experience in F5 BIG-IP technologies, Web Application Firewall policy management, SSL/TLS traffic inspection, troubleshooting and incident management within a 24x7 enterprise environment.

Key Responsibilities

• Provide Level 2 operational supportfor F5 BIG-IP platforms with primary focus on ASM/WAF and SSL Orchestrator (SSLO).
• Monitor F5 infrastructure for availability, performance, capacity and security events.
• Troubleshoot incidents related to:
• F5 ASM / WAF
• SSL Orchestrator
• LTM
• Virtual Servers
• Pools and Pool Members
• SSL Profiles
• Certificates
• SSL/TLS traffic
• Application access and connectivity
• Analyze and resolve Web Application Firewall-related incidents, blocked requests, false positives and application access issues.
• Create, modify, deploy and tune F5 ASM/WAF security policies.
• Manage WAF policy exceptions, signatures, violations and security events.
• Perform configuration and operational activities on F5 SSL Orchestrator (SSLO).
• Support SSL/TLS traffic decryption, inspection and re-encryption through SSLO.
• Troubleshoot SSL handshake, certificate, cipher and TLS-related issues.
• Configure and support application onboarding on F5 BIG-IP based on approved architecture and design standards.
• Perform approved configuration changes, upgrades, patches and security updates.
• Analyze security incidents and identify their root cause, containment and remediation actions.
• Lead L2 troubleshooting and prepare Root Cause Analysis (RCA)for major incidents.
• Escalate complex technical issues to L3 engineering teams and F5 TACwhenever required.
• Coordinate with application, network, SOC, security, infrastructure and other stakeholder teams during incident investigation and remediation.
• Ensure that WAF and SSLO configurations comply with organizational security policies and applicable banking/regulatory requirements.
• Maintain operational documentation including:
• SOPs
• Runbooks
• Troubleshooting guides
• Knowledge-base articles
• Configuration documentation
• Participate in change, incident and problem-management processes.
• Provide technical and engineering analysis for F5-related security solutions and assist with architectural/design recommendations where required.

Mandatory Technical Skills

Candidate should have strong hands-on experience with:

• F5 BIG-IP ASM / Advanced WAF
• F5 SSL Orchestrator SSLO
• F5 BIG-IP LTM
• Web Application Firewall administration
• WAF policy creation and tuning
• Attack signatures and violations
• WAF false-positive troubleshooting
• SSL/TLS concepts
• SSL certificates and certificate chains
• SSL Profiles
• SSL offloading / termination
• SSL decryption and re-encryption
• Virtual Servers
• Pools and Pool Members
• Health Monitors
• Load balancing
• TCP/IP
• HTTP / HTTPS
• DNS fundamentals
• Network Security
• Incident and Problem Management
• RCA preparation

Preferred Skills

Exposure to one or more of the following will be advantageous:

• F5 iRules
• F5 iApps
• F5 BIG-IQ
• F5 AFM
• F5 APM
• OWASP Top 10
• Web application attacks
• SIEM/SOC integration
• Vulnerability management
• Banking/BFSI security environments
• ITIL processes
• F5 TAC coordination

Experience

Minimum 5 years of relevant experience in Network Security / F5 BIG-IP administration and support.

Educational Qualification

• BE / B.Tech / BCA in Computer Science, IT, Electronics or related discipline, or
• Master’s degree in Computer Science / IT or related field.

Certification Requirements

Certification RequirementsCandidate should possess relevant security/networking and F5 certifications.Required certification combination:

• CEH / CCNA / CCNP Security or equivalent networking/security certification
• F5 OEM Certification such as F5-CA / F5-CTS

Minimum 2 relevant certifications preferred/required as per project criteria.

Experience: 5+ Years

Employment Type: Full-Time