Web Application Firewall (Waf) Consultant

Tata Consultancy Services; Cincinnati (OH); On-site; USD 110,000 - 130,000; Full time

Benefits offered by this job

Discretionary incentive

Medical coverage

Parental leaves

Insurance options

Commuter benefits

Vacation & holidays

Legal & financial assistance

Job summary

Tata Consultancy Services Limited in Cincinnati, OH is seeking a Senior Engineer with deep experience in enterprise Web Application Firewall environments, preferably Cloudflare WAF, to operate and optimize the WAF platform. You will onboard/offboard URLs and applications, apply standard configurations, and create per-application rules.

You will monitor WAF health, investigate incidents, coordinate DNS updates and change requests, and collaborate across teams including DNS, network, and security.

Qualifications

• Hands-on experience operating, managing, and administering enterprise Web Application Firewall solutions, preferably Cloudflare WAF.
• Experience onboarding and offboarding URLs, domains, and applications; discovery, validation, cutover and rollback coordination.
• Strong knowledge of WAF policies, managed rules, custom traffic rules, signatures, allowlists, blocklists, rate limiting, bot protection, CDN controls, and DDoS mitigation.
• DNS updates for WAF deployment and coordinating certificate, origin, proxy, load-balancing, and application dependencies.
• Write and tune per-application WAF traffic rules while minimizing false positives; avoid business disruption.
• Apply WAF rules, patches, and updates per compliance and change-management requirements.
• Coordinate firewall rule changes during onboarding/offboarding through approved change processes.
• Monitor WAF health, investigate incidents, analyze logs, and troubleshoot issues.
• Coordinate maintenance windows, communications, deployment validation, and rollback readiness.
• Knowledge of web protocols, TLS, DNS, certificates, reverse proxies, APIs, and cloud ingress.
• Nice-to-have AWS/Azure ingress services, load balancers, Terraform, Splunk/SIEM integration, ServiceNow, SRE practices.

Responsibilities

• Operate, manage, and administer the in-scope WAF platform and respond to incidents and service requests.
• Onboard and offboard URLs, domains, and applications including validation, testing, cutover, and documentation.
• Apply standard WAF configurations and maintain configuration consistency across applications.
• Create and apply application-specific WAF traffic rules including allowlists, blocklists, signatures, and rate limits.
• Apply patches and software updates in line with compliance and maintenance schedules.
• Coordinate DNS updates and firewall rule changes to support onboarding and connectivity.
• Monitor WAF health, alerts, traffic behavior, and security events; adjust configurations as needed.
• Investigate incidents and problems using logs and inputs from application teams.
• Provide troubleshooting support for issues related to WAF policies, false positives, and connectivity.
• Support CDN, bot protection, and DDoS mitigation as applicable.
• Schedule maintenance windows and validate outcomes with rollback readiness.
• Maintain inventories, SOPs, and audit-support documents.
• Collaborate with application, DNS, network, cloud, SOC, and vendor teams for delivery and escalation.

Skills

WAF administration

Cloudflare WAF

DNS coordination

Web protocols HTTP/HTTPS

OWASP Top 10 knowledge

Change management

Incident response

Cloud infrastructure (AWS/Azure)

Terraform

SIEM (Splunk) integration

ServiceNow

Tools

Terraform

Splunk

ServiceNow

Job description

Must Have Technical/Functional Skills

• Hands-on experience operating, managing, and administering enterprise Web Application Firewall solutions, preferably Cloudflare WAF, in regulated or large global environments.
• Experience onboarding and offboarding URLs, domains, and applications, including application discovery, prerequisite validation, standard configuration, cutover, testing, and rollback coordination.
• Strong knowledge of WAF policies, managed rules, custom traffic rules, signatures, allowlists, blocklists, rate limiting, bot protection, CDN controls, and DDoS mitigation.
• Experience applying DNS updates required for WAF deployment and coordinating certificate, origin, proxy, load-balancing, and application dependencies.
• Ability to write and tune per-application WAF traffic rules while minimizing false positives and avoiding business disruption.
• Experience applying WAF rules, signatures, software patches, and software updates in line with compliance and change-management requirements.
• Experience implementing required firewall rule changes during application onboarding and offboarding through approved change-request processes.
• Operational experience monitoring WAF issues, investigating incidents and support tickets, analyzing traffic and security logs, and troubleshooting application-access or performance problems.
• Experience coordinating scheduled WAF maintenance windows, stakeholder communications, deployment validation, incident escalation, and post-change verification.
• Working knowledge of web protocols, HTTP/HTTPS, TLS, DNS, certificates, reverse proxies, APIs, OWASP Top 10, web attacks, cloud ingress, and application delivery architectures.
• Good to have: AWS and Azure ingress services, application load balancers, infrastructure as code/Terraform, Splunk or SIEM integration, ServiceNow, SRE practices, and Cloudflare certification.

Roles & Responsibilities

• Operate, manage, and administer the in-scope WAF platform and respond to WAF incidents, service requests, and support tickets.
• Onboard and offboard URLs, domains, and applications based on approved requests, including prerequisite validation, standard configuration, DNS coordination, testing, cutover, and documentation.
• Apply approved default and standard WAF configurations to onboarded applications and maintain configuration consistency.
• Create, review, test, and apply application-specific WAF traffic rules, including allowlists, blocklists, signatures, rate limits, and other approved protections.
• Apply WAF rules, signatures, patches, and software updates based on customer compliance requirements and approved maintenance schedules.
• Coordinate DNS updates and firewall rule change requests needed to support WAF onboarding, offboarding, and application connectivity.
• Monitor WAF health, alerts, traffic behavior, security events, and operational issues; update configurations as needed through approved controls.
• Investigate incidents and application problems associated with WAF implementation using platform logs, request details, traffic analysis, and application-team inputs.
• Provide troubleshooting and operational support to application teams affected by WAF policies, false positives, connectivity issues, performance concerns, or deployment changes.
• Support Cloudflare WAF capabilities related to CDN, bot protection, and DDoS mitigation where included in the approved service scope.
• Schedule maintenance windows, communicate planned activities and service impacts, execute approved changes, validate outcomes, and maintain rollback readiness.
• Maintain application inventories, configuration records, SOPs, knowledge articles, change evidence, incident records, operational reports, and audit-support documentation.
• Coordinate with application, DNS, network, cloud, SOC, service-management, and vendor teams for delivery, escalation, and service restoration.
• Follow applicable ITAR/export-control, RBAC, least-privilege, change-management, compliance, and evidence-retention requirements.

Generic Managerial Skills, If any

Strong communication, stakeholder coordination, technical documentation, incident ownership, disciplined change execution, and ability to work independently with application, DNS, network, cloud, SOC, SRE, and vendor teams.

Salary Range

Salary Range: $110,000 - $130,000 per year

TCS Employee Benefits Summary:

• Discretionary Annual Incentive.
• Comprehensive Medical Coverage: Medical & Health, Dental & Vision, Disability Planning & Insurance, Pet Insurance Plans.
• Family Support: Maternal & Parental Leaves.
• Insurance Options: Auto & Home Insurance, Identity Theft Protection.
• Convenience & Professional Growth: Commuter Benefits & Certification & Training Reimbursement.
• Time Off: Vacation, Time Off, Sick Leave & Holidays.
• Legal & Financial Assistance: Legal Assistance, 401K Plan, Performance Bonus, College Fund, Student Loan Refinancing.

Location

Cincinnati, OH

Function

TECHNOLOGY

Role

Senior Engineer

ID

434516

Skills

Network-Firewall

Salary Range

$110,000 - $130,000

Desired Candidate Profile

Qualifications

BACHELOR OF COMPUTER SCIENCE