Job Summary

We are looking for an experienced L2 F5 WAF & SSL Orchestrator Engineer to provide operational support, administration and troubleshooting for enterprise F5 BIG-IP security infrastructure.The engineer will primarily support F5 BIG-IP ASM/Advanced WAF and SSL Orchestrator (SSLO) environments and will be responsible for maintaining the availability, performance and security of critical banking applications.The role requires strong hands-on experience in F5 BIG-IP technologies, Web Application Firewall policy management, SSL/TLS traffic inspection, troubleshooting and incident management within a 24x7 enterprise environment.

Key Responsibilities

- Provide Level 2 operational support for F5 BIG-IP platforms with primary focus on ASM/WAF and SSL Orchestrator (SSLO).
- Monitor F5 infrastructure for availability, performance, capacity and security events.

- Troubleshoot incidents related to

- F5 ASM / WAF

- SSL Orchestrator

- LTM

- Virtual Servers

- Pools and Pool Members

- SSL Profiles

- Certificates

- SSL/TLS traffic

- Application access and connectivity
- Analyze and resolve Web Application Firewall-related incidents, blocked requests, false positives and application access issues.
- Create, modify, deploy and tune F5 ASM/WAF security policies.
- Manage WAF policy exceptions, signatures, violations and security events.
- Perform configuration and operational activities on F5 SSL Orchestrator (SSLO).
- Support SSL/TLS traffic decryption, inspection and re-encryption through SSLO.
- Troubleshoot SSL handshake, certificate, cipher and TLS-related issues.




- Configure and support application onboarding on F5 BIG-IP based on approved architecture and design standards.
- Perform approved configuration changes, upgrades, patches and security updates.
- Analyze security incidents and identify their root cause, containment and remediation actions.
- Lead L2 troubleshooting and prepare Root Cause Analysis (RCA) for major incidents.
- Escalate complex technical issues to L3 engineering teams and F5 TAC whenever required.
- Coordinate with application, network, SOC, security, infrastructure and other stakeholder teams during incident investigation and remediation.
- Ensure that WAF and SSLO configurations comply with organizational security policies and applicable banking/regulatory requirements.
- Maintain operational documentation including:

- SOPs

- Runbooks

- Troubleshooting guides
- Knowledge-base articles

- Configuration documentation
- Participate in change, incident and problem-management processes.
- Provide technical and engineering analysis for F5-related security solutions and assist with architectural/design recommendations where required.

Mandatory Technical Skills Candidate should have strong hands-on experience with:





- F5 BIG-IP ASM / Advanced WAF
- F5 SSL Orchestrator SSLO
- F5 BIG-IP LTM
- Web Application Firewall administration
- WAF policy creation and tuning
- Attack signatures and violations
- WAF false-positive troubleshooting
- SSL/TLS concepts
- SSL certificates and certificate chains
- SSL Profiles
- SSL offloading / termination
- SSL decryption and re-encryption
- Virtual Servers
- Pools and Pool Members
- Health Monitors
- Load balancing
- TCP/IP
- HTTP / HTTPS
- DNS fundamentals
- Network Security
- Incident and Problem Management
- RCA preparation

Preferred Skills Exposure to one or more of the following will be advantageous:

- F5 iRules
- F5 iApps
- F5 BIG-IQ
- F5 AFM
- F5 APM
- OWASP Top 10
- Web application attacks
- SIEM/SOC integration
- Vulnerability management
- Banking/BFSI security environments
- ITIL processes
- F5 TAC coordination

Experience Minimum 5 years of relevant experience in Network Security / F5 BIG-IP administration and support.Educational Qualification

- BE / B.Tech / BCA in Computer Science, IT, Electronics or related discipline, or
- Master’s degree in Computer Science / IT or related field.

Certification RequirementsCandidate should possess relevant security/networking and F5 certifications.Required certification combination:

- CEH / CCNA / CCNP Security or equivalent networking/security certification
- F5 OEM Certification such as F5-CA / F5-CTS

Minimum 2 relevant certifications preferred/required as per project criteria.

Experience: 5+ Years

Employment Type: Full time

📌 WAF Engineer (Bhubaneswar)
🏢 Kreate Technologies
📍 Bhubaneswar