Network Security Architect

Overview:
Our client is in need for a Network Security Architect, where you''ll play a pivotal role in designing, implementing, and securing robust network solutions. This position offers an exciting opportunity to lead advanced security architectures, influence our cybersecurity posture, and collaborate with cross-functional teams to protect our critical infrastructure.

Key Responsibilities:

• Application Delivery & Traffic Management:
  Design and oversee sophisticated traffic control solutions leveraging F5 Big-IP Local Traffic Manager (LTM). Responsibilities include developing and maintaining complex iRules, crafting custom health monitors, and configuring advanced persistence profiles to ensure optimal application availability and performance.

• Web Application Security:
  Deploy, tune, and manage F5 Big-IP Application Security Manager (ASM) policies to defend web applications against OWASP Top 10 vulnerabilities, zero-day threats, and other emerging security risks. Continuously monitor and improve WAF configurations to adapt to evolving threat landscapes.

• Secure Access & Authentication:
  Engineer secure remote and internal access solutions using F5 Big-IP Access Policy Manager (APM). Integrate multi-factor (MFA) and two-factor authentication (2FA) services to enforce robust user authentication and access controls.

• Global Domain Name & DNS Services:
  Configure and manage F5 Big-IP DNS (GTM) for intelligent, geo-aware DNS resolution and global server load balancing (GSLB) across multiple data centers, ensuring high availability and responsiveness.

• Infrastructure Integration & Optimization:
  Act as the primary liaison for integrating F5 solutions with perimeter security devices (Palo Alto, Cisco Firepower), DDI platforms (Infoblox), and enterprise monitoring tools. Facilitate seamless infrastructure workflows and automation.

• SSL/TLS & Certificate Management:
  Oversee SSL/TLS traffic lifecycle management, including secure certificate implementation, inspection policies, and offloading SSL processing to optimize backend server performance.

• Troubleshooting & Performance Tuning:
  Lead complex troubleshooting efforts with tools like Wireshark, TCPDump, Riverbed, and SolarWinds to diagnose application and network issues, ensuring high performance and availability.

• Security Architecture & Compliance:
  Collaborate with security and network teams to design, implement, and enforce Zero Trust models and least privilege principles. Support PKI infrastructure and certificate-based authentication processes.

Qualifications:

• Bachelor''s degree in Computer Science, Cybersecurity, or related field, with 8+ years of experience, or equivalent professional experience (12+ years).
• Active Secret clearance.
• At minimum, Security+ certification aligned with DoD 8140 IAT Level II standards.

Required Skills and Experience:

• Extensive hands-on expertise with the F5 Big-IP platform, including LTM, ASM, APM, and DNS modules.
• Proficiency in developing and scripting iRules to customize traffic flow and enforce complex business logic.
• Deep understanding of core protocols such as HTTP/S, DNS, SSL/TLS, TCP/IP, and experience performing detailed packet analyses.
• Proven capability to integrate F5 solutions with external authentication systems (RADIUS, SAML, LDAP) supporting 2FA/MFA.
• Strong background working with security infrastructure including Palo Alto NGFW, Cisco Firepower, and Infoblox DDI.

Preferred Skills & Certifications:

• F5 Certified Administrator (F5-CA) or F5 Certified Technology Specialist (F5-CTS).
• Experience automating F5 configurations using AS3, Declarative Onboarding, and iControl REST API.
• Familiarity with F5 BIG-IQ for centralized management and analytics.
• Hands-on experience with secure remote access solutions like Palo Alto GlobalProtect.
• Knowledge of adjacent technologies such as SD-WAN (VERSA), FortiGate, Riverbed WAN Optimization, and network automation tools like NetBrain.

Publishing Pay Range: $50.00 - $60.00 Hourly