Role overview

This is a hands-on senior engineering role, you will be the engineer who owns the edge of HSBC's public web estate: Akamai CDN delivery, Akamai WAF, DNS and traffic management, and the Azure networking that connects the edge back to origin. You'll design and make the changes, be the person others come to when traffic behaves strangely, and raise the standard of how we run the edge.

You'll work day to day with platform engineers, application pods, and cybersecurity, and act as the technical reference point for CDN and edge security across the team.

Key responsibilities

- Own CDN delivery configurations across a large public web estate: caching strategy, request routing, origin failover, and performance tuning — designing and implementing changes, end to end.
- Own WAF policy across the estate: rule design and tuning, false-positive triage, protection updates, and hands-on response during live attack traffic, working alongside cybersecurity.
- Run DNS and global traffic management, including regional routing, load balancing, and failover between origins.
- Manage TLS certificates and secure delivery standards at the edge.
- Configure and troubleshoot the Azure networking that fronts our origins: Application Gateway, load balancers, NSGs, DNS, and traffic routing.
- Lead technical investigation of complex performance and availability issues, tracing requests from browser through edge to origin using logs, monitoring, and diagnostic tooling.
- Act as senior technical escalation during incidents affecting traffic, availability, or edge security, and drive root cause analysis so problems don't come back.




- Review changes and designs from other engineers, and share edge and CDN knowledge across the team.
- Keep documentation, runbooks, and knowledge articles accurate and helpful.

Required qualifications and requirements

Essential

- Deep, current hands-on experience running Akamai in production at scale: property configuration, caching, routing, origin management. You should be comfortable opening a property and knowing exactly what it does.
- Hands-on experience operating Akamai WAF (App & API Protector or Kona): policy design and tuning, false-positive management, and working through real attack traffic — not just reviewing dashboards.
- Strong command of how the web actually works: HTTP/HTTPS, TLS, DNS, caching behaviour, headers, and the full request path from client to origin. You can debug from a HAR file, curl output, or edge logs.
- Solid Azure networking experience: application gateways, load balancers, NSGs, DNS, and traffic routing between edge and origin.
- A track record of diagnosing hard production issues across edge, network, and application layers.
- Ability to produce clear technical documentation and explain edge behaviour to engineers and business stakeholders.

Desirable

- Bot management and DDoS mitigation experience.
- Multi-CDN experience (e.g., CloudFront, Cloudflare, Tencent) or CDN migrations.
- Terraform (Akamai provider) and CI/CD pipeline experience.
- Experience operating within security and operational risk controls in regulated environments.
- Experience managing configuration through APIs or infrastructure as code.

📌 CDN & Cloud Network Engineer - Akamai (India)
🏢 Principle Pride
📍 India