L2 Web Application Firewall (WAF) Administrator

Role Overview

L2 Web Application Firewall (WAF) Administrator

Key Responsibilities

• Operate and manage

  Web Application Firewalls (WAF)

  in 24x7 production environments.
• Configure security policies, enforce rulesets, and tune signatures to defend against web-based threats (SQLi, XSS, CSRF, etc.).
• Respond to and troubleshoot WAF-related incidents, traffic anomalies, and false positives.
• Perform regular health checks, system upgrades, patching, and SSL certificate management.
• Monitor WAF dashboards, threat logs, and alerts to proactively mitigate application-level attacks.
• Coordinate with security, application, and network teams to implement protection for new or updated web apps.
• Maintain technical documentation, including WAF policies, traffic flows, and change logs.
• Ensure compliance with OWASP Top 10, PCI-DSS, and internal security standards.
  

Required Skills & Experience

• Minimum

  5 years of hands-on experience

  in

  Web Application Firewall administration

  .
• Expertise in

  F5 ASM

  ,

  Citrix WAF

  ,

  Imperva

  , or other enterprise-grade WAF platforms.
• Deep understanding of

  web protocols (HTTP/S)

  and

  Layer 7 traffic behavior

  .
• Experience with protocols and technologies such as, BDP, OSPF, MP-FBP EVPN, VXLAN, or VPC Application Centric Infrastructure (ACI) deployment and data center experience
• Strong knowledge of

  OWASP Top 10 vulnerabilities

  and common web attack patterns.
• Ability to write and tune

  custom WAF rules

  , manage exceptions, and interpret log data for root cause analysis.
• Familiarity with

  SSL offloading

  , certificate renewal, and encryption standards.
• Experience in coordinating with SOC/NOC teams and participating in incident response.
  

Certifications (Mandatory)

• F5-201/Other Industry leading OEM Professional level
  

Nice to have

• Experience in WAF policy automation or scripting (Python, Bash, Ansible).
• Exposure to multi-vendor WAF environments.
• Experience with design and implementing Software Defined Network (SDN) and large complex networks
• Basic understanding of load balancing, but primary expertise must be WAF-centric.
• Experience with protocols and technologies such as, BDP, OSPF, MP-FBP EVPN, VXLAN, or VPC