Senior Network Security Engineer

Own end-to-end application delivery, WAF, and content/file threat protection with primary, hands-on expertise across Cloudflare and OPSWAT, and secondary working knowledge of Palo Alto, Fortigate, and F5 (LTM/WAF and GTM). Responsible for Cloudflare domain onboarding and lifecycle, WAF rule and rate-limiting configuration, SSO application setup, custom hostnames, Workers development, hostname/IP list management, and OPSWAT-based file scanning — while providing secondary-level support for traditional firewall and F5 load-balancing/WAF platforms.

Responsibilities

• Manage the Cloudflare environment across all onboarded domains, including DNS, WAF rules , rate limiting rules, custom hostnames, hostname lists, and IP lists.
• Own domain onboarding and lifecycle management within Cloudflare, ensuring a consistent security baseline and WAF rule set is applied to every domain.
• Configure and maintain Cloudflare SSO Applications (Zero Trust/Access) for secure application authentication.
• Develop, deploy, and maintain Cloudflare Workers for custom edge logic, traffic manipulation, and security automation.
• Build and maintain Cloudflare hostname lists and IP lists to support WAF, rate limiting, and access-control policies.
• Manage the OPSWAT file scanning platform for Data-in-Transit and Data-at-Rest content inspection; triage, analyze, and action file scan results, including false-positive review.
• Tune WAF rules and policies across Cloudflare and supporting platforms to reduce false positives while maintaining strong protection coverage.
• Provide administration and support for Palo Alto firewalls, including policy and rule management.
• Provide administration and support for Fortigate firewalls, including policy and rule management.
• Support F5 LTM/WAF administration : virtual servers, pools, health monitors, and WAF policy management.
• Support F5 GTM for global DNS-based load balancing, site failover, and health monitoring.
• Monitor Cloudflare analytics and logs — WAF events, rate-limiting triggers, and Worker performance — driving root-cause analysis for anomalies.
• Maintain accurate documentation of domain configurations, WAF rule sets, hostname/IP lists, SSO application configs, and secondary-platform settings.
• Coordinate with infrastructure and security teams on change management for major Cloudflare and firewall/WAF configuration changes.

Qualifications

• Bachelor's degree in Computer Science, Information Security, or a related field.
• 8+ years' experience in application delivery, WAF, and content security engineering.
• Primary, hands-on expertise with Cloudflare (Domains, WAF Rules, Rate Limiting Rules, SSO Applications, Custom Hostnames, Workers, Hostname Lists, IP Lists) and OPSWAT file scanning platforms.
• Secondary working knowledge of Palo Alto and Fortigate firewalls, and F5 LTM/WAF and GTM platforms.
• Strong understanding of DNS, SSL/TLS, Layer 4–7 traffic management, and file-based threat triage.
• Certifications preferred: Cloudflare Certified (Solutions Associate/Engineer), OPSWAT certification, Palo Alto PCNSA/PCNSE, Fortinet NSE, F5 Certified BIG-IP Administrator.

Technical Skills Matrix

Primary Expertise — Cloudflare

• Domains — onboarding, DNS management, and domain lifecycle across the Cloudflare account.
  • WAF Rules — minimum of 3 WAF rules configured and maintained per domain.
  • Rate Limiting Rules — configuring and tuning rate limiting policies to mitigate abuse and DDoS-style traffic.
  • SSO Applications — configuring SSO/Access applications for secure authentication.
  • Custom Hostnames — managing custom hostname (SaaS) configurations.
  • Workers — developing and deploying edge Workers for custom logic and security automation.
  • Hostname Lists — creating and maintaining hostname lists for policy application.
  • IP Lists — creating and maintaining IP lists for allow/block/rate-limit policies.