Senior Web Application Firewall Engineer (Cloudflare)

Tata Consultancy Services Limited; Cincinnati (OH); Presencial; USD 110 000 - 130 000; Tempo integral

Vantagens oferecidas por esta oferta de emprego

Discretionary incentive

Medical coverage

Parental leaves

Insurance options

Commuter benefits

Vacation & holidays

Legal & financial assistance

Resumo da oferta

Tata Consultancy Services Limited in Cincinnati, OH is seeking a Senior Engineer with deep experience in enterprise Web Application Firewall environments, preferably Cloudflare WAF, to operate and optimize the WAF platform. You will onboard/offboard URLs and applications, apply standard configurations, and create per-application rules.

You will monitor WAF health, investigate incidents, coordinate DNS updates and change requests, and collaborate across teams including DNS, network, and security.

Qualificações

• Hands-on experience operating, managing, and administering enterprise Web Application Firewall solutions, preferably Cloudflare WAF.
• Experience onboarding and offboarding URLs, domains, and applications; discovery, validation, cutover and rollback coordination.
• Strong knowledge of WAF policies, managed rules, custom traffic rules, signatures, allowlists, blocklists, rate limiting, bot protection, CDN controls, and DDoS mitigation.
• DNS updates for WAF deployment and coordinating certificate, origin, proxy, load-balancing, and application dependencies.
• Write and tune per-application WAF traffic rules while minimizing false positives; avoid business disruption.
• Apply WAF rules, patches, and updates per compliance and change-management requirements.
• Coordinate firewall rule changes during onboarding/offboarding through approved change processes.
• Monitor WAF health, investigate incidents, analyze logs, and troubleshoot issues.
• Coordinate maintenance windows, communications, deployment validation, and rollback readiness.
• Knowledge of web protocols, TLS, DNS, certificates, reverse proxies, APIs, and cloud ingress.
• Nice-to-have AWS/Azure ingress services, load balancers, Terraform, Splunk/SIEM integration, ServiceNow, SRE practices.

Responsabilidades

• Operate, manage, and administer the in-scope WAF platform and respond to incidents and service requests.
• Onboard and offboard URLs, domains, and applications including validation, testing, cutover, and documentation.
• Apply standard WAF configurations and maintain configuration consistency across applications.
• Create and apply application-specific WAF traffic rules including allowlists, blocklists, signatures, and rate limits.
• Apply patches and software updates in line with compliance and maintenance schedules.
• Coordinate DNS updates and firewall rule changes to support onboarding and connectivity.
• Monitor WAF health, alerts, traffic behavior, and security events; adjust configurations as needed.
• Investigate incidents and problems using logs and inputs from application teams.
• Provide troubleshooting support for issues related to WAF policies, false positives, and connectivity.
• Support CDN, bot protection, and DDoS mitigation as applicable.
• Schedule maintenance windows and validate outcomes with rollback readiness.
• Maintain inventories, SOPs, and audit-support documents.
• Collaborate with application, DNS, network, cloud, SOC, and vendor teams for delivery and escalation.

Conhecimentos

WAF administration

Cloudflare WAF

DNS coordination

Web protocols HTTP/HTTPS

OWASP Top 10 knowledge

Change management

Incident response

Cloud infrastructure (AWS/Azure)

Terraform

SIEM (Splunk) integration

ServiceNow

Ferramentas

Terraform

Splunk

ServiceNow

Descrição da oferta de emprego

Tata Consultancy Services Limited in Cincinnati, OH is seeking a Senior Engineer with deep experience in enterprise Web Application Firewall environments, preferably Cloudflare WAF, to operate and optimize the WAF platform. You will onboard/offboard URLs and applications, apply standard configurations, and create per-application rules.

You will monitor WAF health, investigate incidents, coordinate DNS updates and change requests, and collaborate across teams including DNS, network, and security.