Position Summary

We are looking for a motivated and talented individual interested in working on F5 technologies (Load Balancer, WAF, DDoS), Palo Alto Firewalls, FortiGate Firewalls, and Infoblox DNS. The role involves hands-on security and network operations, monitoring, troubleshooting, incident response, and continuous optimization of enterprise security infrastructure.

Key Responsibilities

- - Work in security and network operations environments.

- Hands-on experience with F5 WAF, Load Balancer, and DDoS, including policies, maintenance, upgrades, certificate renewal, virtual server creation on F5 LTM, F5 LTM/ASM troubleshooting, WAF security policy management, DDoS mitigation, VIP configuration, backend and frontend IP mapping, session distribution logic, and session persistency logic.

- Monitor web traffic, analyze security logs, investigate alerts, and take action against unusual activities.

- Respond quickly to security breaches by collaborating with incident response teams.

- Integrate threat intelligence feeds to enhance protection against emerging risks.

- Continuously optimize WAF performance to minimize latency and ensure seamless user experience.

- Conduct regular security assessments and audits to identify vulnerabilities.

- Manage ServiceNow workflows to update and patch security services.

- Maintain organized documentation of WAF configurations, rules, and procedures.

- Diagnose and resolve complex network and security issues.

- Hands-on experience with FortiGate Firewall and FortiManager, including firewall configuration, management, monitoring,



and troubleshooting.

- Solid understanding of FortiGate firewall features such as firewall policies, IPSec VPNs, IDS/IPS, web filtering, and other security capabilities.

- Troubleshoot IPSec VPNs, GlobalProtect VPN, high CPU utilization issues, application issues at Layer 4 and Layer 7, and NAT issues (source, destination, static, translation, hit-related).

- Create and manage security rules, NAT rules, security profiles, log forwarding profiles, zone security profiles, and application overrides on Palo Alto and FortiGate firewalls.

- Perform firewall backups, firmware upgrades, device monitoring, health monitoring, and alert investigations.

- Follow ITIL-based change management and incident management procedures.

- Manage inventory of all in-scope devices.

- Raise, track, and close TAC cases end-to-end.

- Provide monthly security augmentation recommendations.

- Create, maintain, and follow SOPs for configuration and process changes.

Basic Qualifications -

- - Education: BE (Computer Science / IT) or MCA or equivalent university degree.

- Experience: 5 to 7 years of experience in the security domain.

- Minimum 5+ years of experience working as an L1/L2 Engineer in operations.

- Hands-on experience with (Palo Alto or FortiGate Firewall) and F5 Load Balancer (LB, WAF, DDoS).

- Solid understanding of networking concepts and protocols including TCP/IP, routing, and switching.

Preferred Qualifications

- - Experience with Infoblox DNS.

- Certifications such as PCNSA, PCNSE, NSE4, or F5 Load Balancer certifications.

📌 Infrastructure Security Engineer - WAF& Palo Alto Firewall (Mumbai)
🏢 Gruve
📍 Mumbai