Summary
Malomatia is seeking an Application Delivery and Security Engineer in Doha, Qatar. The role covers F5 BIG-IP and GTM, F5 Advanced WAF and FortiWeb, OPSWAT file scanning, and application traffic and content protection. Responsibilities include platform deployment and lifecycle management, security policy tuning, vulnerability remediation, monitoring, and infrastructure automation. Applicants should have a relevant bachelor’s degree and 8+ years of enterprise experience with F5 BIG-IP and/or FortiWeb; CDR or multi-scanning experience is highly desirable.
The posting
As published on malomatia.com. Pulled from the employer's site and shown as they wrote it.
Own end-to-end application delivery, global traffic management, Web Application Firewall (WAF), and content/file threat protection across F5 BIG-IP (LTM & Advanced WAF), F5 GTM, FortiWeb WAF, and OPSWAT. Responsible for traffic steering, SSL/TLS lifecycle, high availability, API/bot protection, file-based threat triage, and automation of infrastructure delivery.
Responsibilities
- Configure and manage F5 BIG-IP LTM: virtual servers, pools, health monitors, persistence profiles, and traffic steering.
- Administer F5 GTM for global DNS-based load balancing, south-north traffic steering, private DNS integration, and pool/health monitor management.
- Own SSL/TLS lifecycle across the app delivery stack: offloading, certificate management, SSL profiles, and TLS hardening on F5 and FortiWeb tiers.
- Design and maintain High Availability: device clustering, config sync, failover, and resiliency across F5 platforms.
- Manage Web Application Protection: OWASP Top 10 profiles, custom security policies, signature management, API protection, bot mitigation, rate limiting, and IP intelligence (F5 Advanced WAF, FortiWeb).
- Tune attack detection policies, manage signature updates, and reduce false positives across WAF platforms; build custom attack signatures where required.
- Lead BIG-IP and FortiWeb appliance/VE deployment, provisioning, TMOS/firmware upgrades, hotfixes, backup/restore, and configuration lifecycle management.
- Integrate FortiWeb with OCI Load Balancer and other cloud LB services for L7 inspection.
- Manage OPSWAT file scanning platform for Data-in-Transit and Data-at-Rest content inspection; triage, analyze, and action file scan results, including false-positive review.
- Maintain scanning policies and workflows to support secure file transfer and content-handling processes across the organization.
- Drive Infrastructure Automation using REST API, AS3, Terraform, and Ansible for automated configuration deployment.
- Perform health/performance monitoring, logging, analytics, and root-cause analysis; own vulnerability assessment, hardening, and patch compliance for all app-delivery and content-security assets.
Qualifications
- Bachelor’s degree in computer science, Information Security, or related field.
- 8+ years' experience with F5 BIG-IP (LTM/GTM/Advanced WAF) and/or FortiWeb in enterprise production environments.
- Experience with content disarm & reconstruction (CDR) / multi-scanning platforms (OPSWAT or equivalent) is highly desirable.
- Working knowledge of infrastructure-as-code and automation (Terraform, Ansible, REST API/AS3).
- Certifications preferred: F5 Certified BIG-IP Administrator (F5-CA), F5 301a/302 (Advanced WAF), NSE 6 (FortiWeb).
- Strong understanding of DNS, SSL/TLS, Layer 4–7 traffic management, and file-based threat triage.
Technical Skills Matrix
Load Balancing
- LTM Configuration & Traffic Management — Virtual Servers, Pools, Health Monitors, Persistence, Traffic Steering
- SSL/TLS Management — SSL Offloading, Certificate Management, SSL Profiles, TLS Hardening
- High Availability — Device Clustering, Config Sync, Failover, Resiliency Management
- Global Traffic Management (F5 GTM) — DNS/GSLB, Global Load Balancing, Site Failover, Health Monitoring
- South-North Traffic Steering — Load balancing for south-north traffic flows
- Private DNS Integration — Private DNS management via F5 GTM
- OCI LB Integration (FortiWeb) — OCI Load Balancer integration with FortiWeb for L7 inspection
WAF
- Web Application Protection — OWASP Top 10 Protection, Security Policies, Signature Management
- API & Bot Protection — API Security, Bot Mitigation, Rate Limiting, IP Intelligence
- Attack Detection & Policy Tuning — Attack Signature Updates, False Positive Tuning, Custom Policies/Signatures
- FortiWeb WAF — OWASP Top 10 — OWASP Top 10 protection profiles
- Bot Detection & Mitigation — Bot detection, geo-blocking, IP reputation management (FortiWeb)
- SSL/TLS Offloading (FortiWeb) — SSL/TLS offloading, deep inspection, OCI LB integration
NVA Management
- Deployment & Lifecycle — BIG-IP / FortiWeb appliance / VE deployment, provisioning & lifecycle
- Patch & Operations — TMOS/firmware upgrades, hotfixes, backup/restore, config management
Content Security
- OPSWAT File Scanning Management — File scanning for Data-in-Transit and Data-at-Rest
- Triage & Analysis — Triage and analysis of file scan results, false-positive review
Security Operations
- Vulnerability Remediation — Vulnerability assessment, hardening, patch & security compliance
Monitoring & Logs
- Monitoring & Troubleshooting — Health/performance monitoring, logging, analytics, RCA
Automation
- Infrastructure Automation — REST API, AS3, Terraform, Ansible, automated configuration deployment