WAF Operations Engineer: Cloudflare/Imperva & IaC Expert

EY; Houston (TX); Hybrid; USD 105,000 - 192,000; Full time

Benefits offered by this job

Medical and dental coverage

Pension and 401(k) plans

Paid time off

Hybrid work model

Job summary

EY is hiring a WAF Operations Solution Engineer to configure and maintain web application firewalls for client apps, monitor traffic, and respond to incidents. You will work with Cloudflare and Imperva, applying Terraform-based IaC to automate deployments and policies. The role emphasizes security incident handling and cross-team collaboration.

You will enable ongoing security improvements, support audits, and mentor junior engineers in a fast-paced, hybrid client-facing environment.

Qualifications

• Bachelor’s degree in computer science, information technology, cybersecurity, or related field preferred.
• 3–5 years of experience in web application security operations with focus on WAF.
• Hands-on experience with WAFs such as Cloudflare and Imperva required.
• Proficiency with Terraform for infrastructure automation preferred.
• Strong understanding of web app protocols, security principles, ITIL processes and ticketing.

Responsibilities

• Configure, manage, and optimize WAF solutions to protect web applications.
• Provide ongoing operational coverage of web application firewalls and tuning.
• Monitor traffic and security events; identify threats and vulnerabilities.
• Analyze security incidents with root-cause analysis and remediation.
• Collaborate with incident response teams to investigate and respond to incidents.
• Develop and maintain WAF policies, rules, and documentation.
• Support security audits and assessments and ensure policy compliance.
• Stay current with threats and technologies to improve security posture.
• Leverage WAFs including Cloudflare and Imperva; use Terraform for IaC automation.
• Mentor junior engineers and guide on incident response processes.

Skills

WAF management

Cloudflare

Imperva

Terraform

ITIL

Education

Bachelor's degree in CS/IT/Cybersecurity

Tools

Cloudflare

Imperva

Job description

EY is hiring a WAF Operations Solution Engineer to configure and maintain web application firewalls for client apps, monitor traffic, and respond to incidents. You will work with Cloudflare and Imperva, applying Terraform-based IaC to automate deployments and policies. The role emphasizes security incident handling and cross-team collaboration.

You will enable ongoing security improvements, support audits, and mentor junior engineers in a fast-paced, hybrid client-facing environment.