Senior Cloud Web Security (WAF & Proxy) | Only Immediate joiner

Job Title: SME Cloud Web Security (WAF & Proxy)

Location : Mumbai / Bangalore

Note: We Need Immediately Joiner Only

Role Overview: As a Cloud Web Security SME, you will lead the design, implementation, and advanced orchestration of both inbound and outbound security traffic. You will be the primary authority for ensuring mission-critical applications are protected via F5 Advanced WAF and Cloud native WAF (AWS,GCP and Azure) and that user internet egress is secured and optimized through Zscaler Cloud Proxy.

Key Responsibilities:

F5 BIG-IP Engineering:

• Design and manage F5 ASM/Advanced WAF policies, including manual tuning, false-positive handling, and bot mitigation.
• Architect and troubleshoot SSL offloading / decryption and inspection of encrypted traffic.
• Maintain LTM (Local Traffic Manager) objects, including virtual servers, pools, and advanced iRules for traffic manipulation.

Zscaler Proxy Administration:

• Act as the SME for Zscaler Internet Access (ZIA)
• Oversee policy design for URL filtering, Data Loss Prevention (DLP), and cloud-based sandboxing.

Multi-Cloud & Hybrid Orchestration:

• Deploy and manage F5 BIG-IP Virtual Edition (VE) as well as CE edition across AWS, Azure, and GCP.
• Implement Auto-scaling for BIG-IP VE to handle dynamic traffic loads in public cloud environments.
• Leverage F5 Cloud Solution Templates and Automation Toolchains (Terraform/Ansible) for consistent policy deployment.

Added Advantage Skills: NG-Firewall Management: Strong skill set in Layer 7 - Next-Generation Firewall (NGFW) Management and troubleshooting.

Required Technical Skills:

• Cloud Web Application Security: F5 ASM, Advanced WAF, OWASP Top 10, DDoS mitigation (AWS (Shiled Advanced), GCP(Cloud Armor) and Azure (Standard DDOS Protection))
• Traffic Orchestration: LTM, GTM (DNS), SSL/TLS offloading.
• Cloud Proxy: Zscaler ZIA, App Connectors, Cloud Connector, Cloud Gateway
• Cloud Native Services: Cloud Native Application Load Balancer, DDOS Protection, DNS Management
• Cloud Networking: BIG-IP Virtual Edition (VE), Auto-scaling groups, VNET/VPC peering
• Troubleshooting: Advanced packet analysis (TCPDump, Wireshark), F5 iQL/TMSH and QKView analysis

Qualifications & Experience:

• Experience: 10+ years in Network Security with at least 4 years as SME for F5 and Zscaler and Cloud Security
• Education: BE/B-Tech/BCA or Masters in CS/IT.
• Certifications: F5: F5-CTS (ASM) or F5-CSE (Security Solutions), Zscaler: Zscaler Certified Cloud Professional (ZCCP-IA/PA),and AWS/GCP/Azure Cloud Security Certifications