Contract - Senior Cybersecurity Engineer, WAF and Tooling

Contract Senior Cybersecurity Engineer, WAF and Tooling

Rate: Open

Location: Remote

Duration: 12+ months

Qualifications

• 5+ years of related experience in the following:
• Demonstrated success operating Azure WAF (Azure Front Door and/or Application Gateway).
• Track record of building infrastructure-as-code for security controls and running Git-based deployment pipelines.
• Hands-on administration of Azure Front Door WAF and Azure Application Gateway WAF (policy authoring, tuning, exclusions, custom rules).
• Terraform expertise for Azure resources and GitHub deployments.
• Proven ability to use code to configure Azure firewalls/WAFs.
• Scripting skills to automate configuration, validations, and operational tasks (PowerShell, Bash, or Python).
• Strong understanding of web application security (OWASP Top 10, bot protection, API protection, TLS, header-based controls) and secure DevOps practices.

Responsibilities

• Administer and maintain Azure Front Door WAF and Azure Application Gateway WAF policies, rulesets, exclusions, and custom signatures to protect web applications against OWASP Top 10 and emerging threats.
• Coordinate with application teams to design protection profiles per app and/or per path, align rules with business requirements, and ensure safe rollouts.
• Monitor WAF efficacy, coverage, and performance; analyze events and false positives; tune policies to reduce friction while maintaining strong protection.
• Build and maintain Terraform modules for Azure Front Door and Application Gateway WAF resources, ensuring version-controlled deployments.
• Operate CI/CD pipelines for GitHub-based deployments, including branching strategies, environment promotion, and rollback procedures.
• Use Terraform code to define, validate, and deploy WAF configurations.