Network Security Engineer - F5

Job Summary

F5 Infrastructure

• Provide L3 support for F5 BIG-IP LTM virtual servers, pools, health monitors, SSL offload, persistence, and iRules.
• Administer and tune F5 ASM or Advanced WAF policies, attack signatures, bot defense, and false positives.
• Manage SSL/TLS certificates, cipher standards, hardening, and PKI integration.
• Troubleshoot latency, performance, availability, capacity, upgrades, and high-availability design.

IPS and IDS

• Provide L3 support for Cisco Firepower or FTD through FMC, including policy and signature management.
• Optimize IPS/IDS policies, reduce false positives, and manage inline and detection modes.
• Perform packet-level analysis and correlate IPS/IDS events with the SIEM.
• Maintain signature currency and coordinate tuning with SOC and threat-intelligence teams.

Next-Generation Firewalls

• Support Palo Alto PAN-OS or Panorama and Check Point Gaia, SmartConsole, or MDS across production and disaster recovery.
• Manage policies, rule bases, NAT, App-ID or URL filtering, threat prevention, and site-to-site or remote-access VPNs.
• Perform hardening, high-availability configuration, patching, version management, and rule recertification.
• Lead complex firewall change implementation and troubleshooting with minimal business impact.

L3 Operations

• Act as the senior escalation point for P1 and P2 incidents and lead root-cause analysis and problem management.
• Own change requests, contribute to low-level designs, support audits, and maintain configuration backups and evidence.
• Maintain SOPs, runbooks, and topology documentation; mentor junior engineers and coordinate vendor escalations.

Required Expertise

• Deep hands-on expertise with F5 BIG-IP LTM, ASM or Advanced WAF, iRules, and SSL/TLS.
• Strong expertise with Cisco Firepower, FTD, or FMC and with Palo Alto and Check Point firewall platforms.
• Solid knowledge of TCP/IP, routing, switching, NAT, VPN, DNS, load balancing, PKI, and security hardening.
• Experience with SIEM integration, log analysis, and packet capture using Wireshark or tcpdump.
• A bachelor's degree in computer science, engineering, information technology, or a related field is required.
• At least 8 years of network or security engineering experience, including 3 or more years at L3 level, is required.

Preferred Qualifications

• Experience in banking or another large regulated enterprise is strongly preferred.
• F5, Cisco, Palo Alto, Check Point, CISSP, or CISM certifications are preferred.
• Python, Bash, or API scripting and automation experience is desirable.

Work Model

• The role is full-time and onsite at the customer location.
• The position requires daily work from the office.
• After-hours support may be required during critical incidents or planned maintenance, with participation in an on-call rotation if needed.