F5 Load Balancer & Firewall | Job Description Framework
JOB DESCRIPTION FRAMEWORK
F5 Load Balancer & Firewall
L1, L2 and L3 Roles

Primary SkillF5 BIG-IP Load BalancerSecondary SkillEnterprise FirewallDocument PurposeRole definition for recruitment, staffing and managed infrastructure-security operationsClassificationInternal Use

Role Progression
L1 - OperationsL2 - EngineeringL3 - SME / ArchitectureMonitor, triage and standard requestsImplement, troubleshoot and optimizeDesign, govern and lead critical resolution

L2 Security Engineer - F5 Load Balancer & Firewall (B3 Band)
Experience6- 10 yearsPrimary SkillF5 BIG-IP Load BalancerSecondary SkillEnterprise FirewallRole ObjectiveIndependent administration, implementation and advanced troubleshooting across F5 and firewall services.

Key Responsibilities
• Administer F5 BIG-IP LTM virtual servers, pools, nodes, monitors, SNAT, profiles, persistence and SSL configurations.
• Implement approved application onboarding, traffic-management and firewall policy changes with validation and rollback planning.
• Troubleshoot P1/P2 incidents involving VIPs, pools, monitors, persistence, SNAT, routing, VLANs, TLS, DNS, firewall policy and NAT.
• Analyze F5 logs, connection tables, statistics, packet captures and firewall traffic logs to isolate faults across the end-to-end flow.
• Manage SSL certificates, client/server SSL profiles, cipher settings and certificate-renewal activities.
• Support HA/failover validation, backups, upgrades, hotfixes, configuration synchronization and platform-health activities.
• Create or modify basic iRules and traffic policies under approved engineering standards.
• Prepare RCA, preventive actions, SOPs, knowledge articles and audit evidence.
• Guide L1 engineers and review triage quality and standard changes.
Required Technical Skills
• Strong BIG-IP LTM, tmsh, profiles, persistence, SNAT, SSL and HA administration
• Firewall policy, NAT, VPN and routing troubleshooting across at least one enterprise platform




• HTTP/TCP flow analysis, packet capture and application-connectivity troubleshooting
• Change implementation, rollback, validation and problem management
• Basic iRules, REST API and automation awareness
• AI Foundation + Programming Language awareness + Scripting knowledge
Preferred Certifications
• F5 Certified BIG-IP Administrator / Technology Specialist
• Relevant firewall professional certification
• ITIL Foundation
Expected Behavioral Competencies
• Clear customer and stakeholder communication
• Ownership of incidents, requests and changes
• Accurate documentation and evidence management
• Collaboration across application, network, security and vendor teams
• Compliance with access, change and information-handling requirements

L3 Security SME - F5 Load Balancer & Firewall (Band C1)
Experience10- 15+ yearsPrimary SkillF5 BIG-IP Load BalancerSecondary SkillEnterprise FirewallRole ObjectiveTechnical ownership, architecture, critical-incident resolution and lifecycle governance for application-delivery and firewall platforms.

Key Responsibilities
• Design scalable F5 BIG-IP and enterprise firewall architectures with high availability, disaster recovery and secure traffic flows.
• Lead F5 and firewall implementations, migrations, upgrades, consolidations and application-transformation programs.
• Own critical troubleshooting across LTM, DNS/GSLB where deployed, SSL/TLS, iRules, traffic policies, routing, NAT, VPN, clustering and application protocols.
• Define application-delivery standards for VIPs, pools, monitors, persistence, SNAT, SSL, naming, logging, lifecycle and exception governance.




• Review and approve high-risk changes, implementation plans, rollback strategies and validation evidence.
• Drive performance tuning, capacity planning, policy optimization, certificate strategy and lifecycle-risk management.
• Develop advanced iRules, traffic-management policies and automation/API integration where required.
• Integrate F5 and firewall platforms with DNS, SIEM, monitoring, PKI, DevOps pipelines and security tooling.
• Lead RCA reviews, vendor escalations and recurring-problem elimination.
• Mentor L1/L2 teams and maintain engineering standards, SOPs and knowledge assets.
• Provided valuable support in driving automation initiatives within the project.
• Contribute significantly to the development of standardized Documents, processes and frameworks to support practice growth and operational excellence.
Required Technical Skills
• Expert BIG-IP LTM, DNS/GSLB, TMOS, tmsh, SSL, persistence, HA, iRules and traffic-policy knowledge
• Advanced enterprise firewall architecture, segmentation, NAT, VPN and routing knowledge
• Application-delivery architecture across data-center, cloud and hybrid environments
• Advanced packet-flow, performance and failure-domain analysis
• Automation/API integration, governance and technical leadership
• Aware any Workflow AI tool + Any Programing language + Scripting
Preferred Certifications
• F5 Certified Technology Specialist / Solution Expert
• Advanced firewall certification such as CCSE, PCNSE or equivalent
• CISSP / CCSP or equivalent architecture certification
Expected Behavioral Competencies
• Explicit customer and stakeholder communication
• Ownership of incidents, requests and changes
• Accurate documentation and evidence management
• Collaboration across application, network, security and vendor teams
• Compliance with access, change and information-handling requirements

Internal Use | L1-L3 Role Framework

📌 Load Balancer (Hyderabad)
🏢 Knotify Services
📍 Hyderabad