Network Security Engineer

Role: Network Security

Location: PAN India

Working Mode : 5 Days WFO

The F5 Network Operations Engineer is responsible for advanced troubleshooting, design validation, implementation, and optimization of F5 BIG-IP LTM and DNS/GTM platforms. This role is fully focused on network traffic management and load balancing technologies, ensuring high availability, performance, and scalability of application delivery networks.

Key Responsibilities

1. Advanced Troubleshooting & Incident Management

• Act as the operational escalation point for F5 LTM/GTM network issues.
• Diagnose and resolve complex issues involving:
• Virtual servers, pools, persistence, profiles
• SSL offload / SSL profiles (operational, not security)
• GTM/DNS load balancing, wide-IP resolution, listener issues
• ClientVIPserver traffic flow failures
• Routing/VLAN/self-IP and HA sync/failover
• Perform deep-dive analysis using:
• Packet captures (tcpdump/Wireshark)
• F5 system logs, TMM logs, statistics
• Performance throughput and connection-level visibility

• Lead RCA preparation and problem management for repeating incidents.

2. F5 Configuration, Operations & Optimization

• Design, configure, and optimize:
• VIPs, pools, health monitors
• Traffic profiles (TCP/HTTP/SSL)
• Persistence methods
• iRule/iRuleLX review and optimization (non-security logic)
• DNS/GTM wide-IP and pool configurations
• Lead OS upgrades, hotfix deployment, and high-availability validation.
• Ensure configuration synchronization across clusters and multi-datacenter setups.
• Standardize deployment templates for L1/L2 teams.

3. Implementation & Project Delivery ( Good to have )

• Lead major implementation activities:
• Application onboarding and traffic migration
• Datacenter or cloud connectivity for F5 traffic flows
• VIP provisioning and backend server migrations
• DNS/GTM traffic redirection across active/active or active/standby DCs
• Work with architecture teams on:
• LTM/GTM design reviews
• Traffic flow optimization
• Routing/VLAN design on F5 platforms
• Validate post-cutover performance and provide hyper-care support.

4. Automation & Process Enhancements

• Automate repetitive F5 tasks using:
• iControl REST API
• Python scripts (optional)

• Improve workflows, monitoring templates, and operational processes.
• Drive standardization of configurations across environments.

5. Documentation & Mentorship

• Maintain comprehensive technical documentation:
• High-level & low-level designs
• Traffic flow diagrams
• VIP inventory and routing maps
• SOPs & advanced troubleshooting guides

• Mentor and upskill L1/L2 engineers on F5 operations and troubleshooting.

Required Technical Skills

F5 Expertise

• F5 BIG-IP LTM (expert level)
• F5 BIG-IP DNS/GTM (expert level)
• Strong capability in:
• VIP design & traffic engineering
• SSL termination/offload (without security inspection)
• Health monitors creation & tuning
• Profiles (TCP, HTTP, SSL, OneConnect, persistence)
• HA failover/logical device groups
• Route domains, partitions, VLANs, self-IPs
• Basic to intermediate iRule logic

Networking Knowledge

• TCP/IP, HTTP/HTTPS, DNS, SIP, SMTP (as used in F5 traffic flows)
• Layer 2/Layer 3 connectivity
• Routing basics on F5 (static routing, default routes)
• Load balancing algorithms
• Traffic patterns, throughput, performance tuning

• Ability to interpret deep packet captures and diagnose latency issues.
• Experience with monitoring tools: BIG-IQ, SolarWinds, PRTG, Grafana etc

Soft Skills

• Strong analytical, design, and problem-solving skills.
• Excellent communication with cross-functional teams and application owners.
• Ability to lead calls and guide teams during major incidents.
• Comfortable in demanding production environments.

Education & Certifications

• Bachelors degree.
• Preferred certifications ( Any two ) :
• F5 CTSLTM (201/301)
• F5 GTM/DNS specialist
• CCNA /CCNP / CCIE R&S (advantage)
• ITIL Foundation (optional)

Experience

• 7+ years experience in Network/ Delivery roles.
• 37 years hands-on experience with F5 BIG-IP LTM/GTM in complex environments.