Web Application Firewall Engineer

Job Title: Web Application Firewall (WAF) Engineer

• Location: Hybrid – 601 S. Tryon Street, Charlotte, NC 28202

• Tax Term (W2, C2C): W2

• Job Type (Permanent/Contract): Contract

• Duration: Long Term
  
  Important Notes:

• Hybrid work is preferred; remote candidates may be considered.

• Local candidates only.

• Client interview must be conducted in person.

• Candidates must mention their work preference (Hybrid/Remote) on their resume.

• Subcontracting is not permitted.

Description

The Web Application Firewall (WAF) Engineer will join the Information Protection & Risk Management (IPRM) organization at our financial client, working with the Cyber Security Technology team to deploy, maintain, monitor, and troubleshoot enterprise security controls. The ideal candidate must have hands-on experience with F5 BIG-IP products and migrating applications from legacy BIG-IP environments to F5 platforms. Experience with Akamai WAF technologies and application-layer security is also required.

Role and Responsibilities

• Operate, monitor, and troubleshoot enterprise web application firewalls, including F5 and Akamai.

• Migrate applications from legacy BIG-IP environments to F5 platforms.

• Provide expert-level troubleshooting and technical support for supported security technologies.

• Perform architecture and engineering activities for existing technologies and new security projects.

• Conduct regular system health checks and user activity audits.

• Develop and maintain technical documentation covering security application design, configuration, operations, and management.

• Support security infrastructure and related projects, with potential responsibilities involving Network Access Control (NAC), firewalls, and other network security technologies.

• Analyze application logs and collaborate with development teams to promote secure coding practices.

• Perform packet captures, execute CLI commands, and troubleshoot network protocols.

• Participate in on-call support and maintain a flexible work schedule for incident resolution.

Required Skills

• Hands-on experience with F5 BIG-IP products and legacy BIG-IP application migration.

• Minimum 5 years of experience deploying and maintaining enterprise WAF solutions.

• Experience with F5 ASM/AWAF, Akamai Kona, and Salt API Protection.

• Strong understanding of application-layer security and TCP/IP Layer 7 fundamentals.

• Expertise in troubleshooting network and application security issues.

• Experience analyzing packet captures, CLI outputs, network protocols, and application logs.

• Knowledge of security configurations, system monitoring, and health checks.

• Strong communication, documentation, and stakeholder management skills.

Qualifications

• Bachelor's degree in Information Systems or a related field.

• Minimum 5 years of relevant enterprise WAF deployment and maintenance experience.

• Ability to work effectively with technical teams, developers, and business stakeholders.

• Strong customer service skills and the ability to manage expectations and build long-term relationships.

• Willingness to work a flexible schedule and participate in on-call incident resolution.

• Python or PowerShell scripting experience for task automation is a plus.