Infrastructure Security Engineer - WAF,F5 & Palo Alto Firewall

About Gruve

Gruve is an innovative software services startup dedicated to transforming enterprises to AI powerhouses. We specialize in cybersecurity, customer experience, cloud infrastructure, and advanced technologies such as Large Language Models (LLMs). Our mission is to assist our customers in their business strategies utilizing their data to make more intelligent decisions. As a well-funded early-stage startup, Gruve offers a dynamic environment with strong customer and partner networks.

Position Summary 

We are looking for a motivated and talented individual interested in working onF5 technologies (Load Balancer, WAF, DDoS),Palo Alto Firewalls,FortiGate Firewalls, andInfoblox DNS. The role involves hands-on security and network operations, monitoring, troubleshooting, incident response, and continuous optimization of enterprise security infrastructure.

Key Responsibilities 

• • Work insecurity and network operations environments.

  • Hands-on experience withF5 WAF, Load Balancer, and DDoS, including policies, maintenance, upgrades, certificate renewal, virtual server creation on F5 LTM, F5 LTM/ASM troubleshooting, WAF security policy management, DDoS mitigation, VIP configuration, backend and frontend IP mapping, session distribution logic, and session persistency logic.

  • Monitor web traffic, analyze security logs, investigate alerts, and take action against unusual activities.

  • Respond quickly to security breaches by collaborating with incident response teams.

  • Integratethreat intelligence feeds to enhance protection against emerging risks.

  • Continuously optimizeWAF performance to minimize latency and ensure seamless user experience.

  • Conduct regularsecurity assessments and audits to identify vulnerabilities.

  • ManageServiceNow workflows to update and patch security services.

  • Maintain organized documentation ofWAF configurations, rules, and procedures.

  • Diagnose and resolve complexnetwork and security issues.

  • Hands-on experience withFortiGate Firewall and FortiManager, including firewall configuration, management, monitoring, and troubleshooting.

  • Strong understanding ofFortiGate firewall features such as firewall policies, IPSec VPNs, IDS/IPS, web filtering, and other security capabilities.

  • TroubleshootIPSec VPNs,GlobalProtect VPN, high CPU utilization issues, application issues atLayer 4 and Layer 7, and NAT issues (source, destination, static, translation, hit-related).

  • Create and managesecurity rules,NAT rules,security profiles,log forwarding profiles,zone security profiles, andapplication overrides on Palo Alto and FortiGate firewalls.

  • Performfirewall backups,firmware upgrades, device monitoring, health monitoring, and alert investigations.

  • FollowITIL-based change management and incident management procedures.

  • Manageinventory of all in-scope devices.

  • Raise, track, and closeTAC cases end-to-end.

  • Providemonthly security augmentation recommendations.

  • Create, maintain, and followSOPs for configuration and process changes.

Basic Qualifications - 

• • Education: BE (Computer Science / IT) or MCA or equivalent university degree.

  • Experience: 5 to 7 years of experience in thesecurity domain.

  • Minimum5+ years of experience working as anL1/L2 Engineer in operations.

  • Hands-on experience with(Palo Alto or FortiGate Firewall) andF5 Load Balancer (LB, WAF, DDoS).

  • Solid understanding ofnetworking concepts and protocols including TCP/IP, routing, and switching.

Preferred Qualifications 

• • Experience withInfoblox DNS.

  • Certifications such asPCNSA, PCNSE, NSE4, or F5 Load Balancer certifications.

Why Gruve

At Gruve, we foster a culture of innovation, collaboration, and continuous learning. We are committed to building a diverse and inclusive workplace where everyone can thrive and contribute their best work. If you’re passionate about technology and eager to make an impact, we’d love to hear from you.

Gruve is an equal opportunity employer. We welcome applicants from all backgrounds and thank all who apply; however, only those selected for an interview will be contacted.