Web Application Firewall (WAF) Engineer - Akamai & F5 Security

Job Summary

We are seeking an experienced Web Application Firewall (WAF) Engineer to support, maintain, and enhance enterprise web application security infrastructure. The ideal candidate will have hands-on expertise with Akamai Kona, F5 ASM/AWAF, and API protection technologies, along with strong troubleshooting and network security skills. This role is responsible for day-to-day WAF operations, security engineering, incident response, and implementation of security enhancements across enterprise environments.

Required Skills & Qualifications

Required Skills

• 5+ years of hands-on experience deploying, configuring, and supporting enterprise Web Application Firewall (WAF) solutions.

• Strong experience with:

  • Akamai Kona Site Defender

  • F5 ASM/AWAF

  • Salt Security API Protection (or similar API security platforms)

• Solid understanding of Layer 7 (Application Layer) security concepts and TCP/IP networking fundamentals.

• Experience troubleshooting complex application and network security issues using:

  • Packet captures (Wireshark/tcpdump)

  • CLI-based diagnostics

  • Network protocol analysis

• Experience analyzing application logs and collaborating with development teams to improve application security and secure coding practices.

• Strong documentation, communication, and stakeholder management skills.

• Bachelor's degree in Information Systems, Computer Science, Cybersecurity, or a related discipline.

Preferred Experience

• Experience supporting Network Access Control (NAC), enterprise firewalls, or other network security technologies.

• Scripting or automation experience using Python or PowerShell.

• Experience working in enterprise security operations and incident response environments.

Primary Responsibilities

• Manage daily operations, monitoring, and administration of enterprise Web Application Firewall platforms, including Akamai Kona and F5 ASM/AWAF.

• Perform proactive monitoring, troubleshooting, and incident resolution for WAF-related issues.

• Design, implement, and support security architecture enhancements for existing and new security initiatives.

• Conduct regular WAF health checks, policy reviews, and user activity audits.

• Analyze application traffic, logs, and security events to identify threats, misconfigurations, and optimization opportunities.

• Collaborate with application development teams to implement secure coding practices and resolve application security vulnerabilities.

• Create, maintain, and update technical documentation, operational procedures, architecture diagrams, and security standards.

• Participate in security incidents, root cause analysis, and post-incident reviews.

• Support additional network security technologies as needed, including firewalls and Network Access Control solutions.

• Participate in on-call rotation and provide after-hours support for critical security incidents.