Infrastructure Engineer Specialist - WAF & DevSecOps Automation

Optimization & Tuning: Proactively analyze WAF logs to identify and remediate complex bot traffic and sophisticated attack patterns, ensuring high availability and optimal performance.

DevSecOps Automation Frameworks

Security Automation Architecture: Design and deploy automated frameworks that integrate security controls directly into infrastructure provisioning. Use tools like Terraform or Ansible to enforce security baselines as part of the standard deployment lifecycle.

Security Observability: Configure SIEM forwarding and alerts for WAF and Network logs. You are responsible for detecting anomalies (like data exfiltration attempts or unusual traffic spikes), ensuring actionable intelligence is derived from system logs.

Pipeline Security Integration: Orchestrate the integration of automated security gates (SAST/SCA/Container Scanning) into CI/CD pipelines. Ensure that "Security as Code" is not just a concept, but an automated reality for all infrastructure deployments.

Policy as Code (PaC): Develop and manage automated policy engines (e.g., OPA, Sentinel) to programmatically reject non-compliant infrastructure changes before they reach production

Required Qualifications

Experience: 10+ years in Infrastructure Engineering or DevSecOps, with a significant track record in high-traffic environments.

Primary Tech Stack: Extensive experience in WAF configuration management (e.g., F5, Signal Sciences, CloudFront WAF) and Nginx/Kubernetes Ingress Controllers.

Automation Expertise: Strong proficiency in building DevSecOps automation frameworks. Expert-level skill in Infrastructure as Code (Terraform, Ansible) and scripting (Python or Go).

Security Mindset: Deep understanding of automated threat mitigation, policy-as-code principles, and cloud-native security orchestration.

Hybrid Expertise: Proven ability to manage and automate security policies across complex hybrid or multi-cloud infrastructures (AWS, GCP, Azure).

Preferred Qualifications

Proficiency in developing custom WAF rules (iRules, ModSecurity).

Experience with GitOps workflows for infrastructure security.

Certifications: Certifications such as CKS (Certified Kubernetes Security Specialist) or advanced security automation credentials.