F5 WAF Engineer

Title: F5 WAF Engineer (2 openings)
Duration: 6+ Months
Location: Remote

We are seeking an experienced F5 WAF Engineer to support the design, implementation, administration, and optimization of enterprise application delivery and web application security solutions. The ideal candidate will have hands-on expertise with F5 BIG-IP technologies, including LTM and ASM/Advanced WAF, and a strong background in application security, load balancing, traffic management, and web application protection. The engineer will work closely with infrastructure, security, and application teams to ensure high availability, scalability, and security of critical business applications.

Key Responsibilities
Design, implement, and support F5 BIG-IP solutions including:
Local Traffic Manager (LTM)
Advanced WAF / Application Security Manager (ASM)
Global Traffic Manager (GTM/DNS)
Access Policy Manager (APM)
Configure and manage web application firewall policies to protect enterprise applications from OWASP Top 10 and emerging threats.
Develop, deploy, and maintain F5 iRules, policies, profiles, and virtual servers.
Perform application onboarding, SSL certificate management, and traffic optimization activities.
Troubleshoot application delivery, load balancing, and security incidents across complex enterprise environments.
Support migration, upgrade, and modernization initiatives involving F5 platforms.
Conduct performance tuning and capacity planning to ensure optimal application availability.
Collaborate with security and development teams to identify and remediate application vulnerabilities.
Support incident response and root cause analysis for application and network security issues.
Create and maintain technical documentation, operational procedures, and architecture diagrams.
Participate in on-call support and maintenance activities as required.

Required Qualifications
5+ years of experience administering and engineering F5 BIG-IP environments.
Strong experience with:
F5 LTM
F5 ASM / Advanced WAF
SSL/TLS administration
Load balancing concepts
High availability configurations
Experience developing and troubleshooting F5 iRules.
Strong understanding of:
HTTP/HTTPS
DNS
TCP/IP
Web application security principles
Experience implementing WAF policies and mitigating web application threats.
Knowledge of OWASP Top 10 vulnerabilities and remediation techniques.
Ability to troubleshoot complex application and network connectivity issues.
Excellent communication and documentation skills.

Preferred Qualifications
Experience with F5 Distributed Cloud WAAP.
F5 Certified Administrator (CA) or F5 Certified Technology Specialist (CTS).
Experience with cloud platforms including Azure, AWS, or Google Cloud.
Familiarity with automation tools such as:
Terraform
Ansible
Python
REST APIs
Experience supporting PCI, SOX, HIPAA, or other regulated environments.
Knowledge of Zero Trust and API security frameworks.

Technical Skills

F5 Technologies
BIG-IP LTM
BIG-IP ASM / Advanced WAF
BIG-IP GTM/DNS
BIG-IP APM
iRules
SSL Offloading
Load Balancing
Traffic Management
Security
Web Application Firewall (WAF)
OWASP Top 10
Application Security
API Security
Threat Mitigation