Job Description
As a Senior Application Delivery and Security Engineer, you will join our enterprise network and security team. In this role, you will own the design, security, and reliability of our application delivery services, built primarily on F5 BIG-IP Virtual Editions, with emphasis on Local Traffic Manager (LTM), BIG-IP DNS (GTM), and Advanced WAF (ASM).
Web application security is the center of gravity for this position. You will be the team's primary expert for ASM policy design, tuning, and troubleshooting, protecting the business critical web applications and APIs that run on the platform. This is a hands on engineering role for someone who has lived in ASM event logs, knows how to tighten a policy without breaking an application, and wants that depth recognized.
You will report to the IT Manager, Network and Security Engineering, and will work Hybrid in any of RA office based in Milwaukee or Mequon, WI OR Mayfield Heights, OH OR Chelmsford, MA or Eden Prairie, MN.
Primary Responsibilities
Advanced WAF and ASM web application security (primary focus of the role):
•Build and manage ASM and Advanced WAF security policies end to end, including policy creation, learning and tuning, signature management, and false positive remediation.
•Protect web applications and APIs against the OWASP Top 10, malicious bot traffic, and layer 7 denial of service using native ASM controls.
•Analyze ASM event logs and violation data to tune policies precisely, strengthening protection without disrupting legitimate application traffic.
•Act as the go to resource for WAF policy strategy, enforcement decisions, and security incident troubleshooting.
F5 BIG-IP platform engineering and lifecycle:
•Design, deploy, configure, and maintain F5 BIG-IP Virtual Edition instances across production and non production environments.
•Perform upgrades, hotfixes, licensing, and lifecycle management for the F5 Virtual Edition estate.
•Deploy and support Virtual Editions on hypervisor and cloud platforms.
Local Traffic Management (LTM):
•Configure and support LTM virtual servers, pools, monitors, profiles, and persistence.
•Implement SSL and TLS offload and certificate handling.
•Write and troubleshoot iRules and LTM policies for advanced traffic steering.
Global Traffic Management (BIG-IP DNS / GTM):
•Manage wide IPs, listeners, data centers, and global load balancing methods to deliver multisite availability and failover.
Troubleshooting, delivery, and operations:
•Resolve complex application delivery issues using tcpdump, qkview, system logs, and packet level analysis.
•Partner with application, network, and security teams to onboard new applications behind F5 services.
•Create and maintain documentation, runbooks, and standard configurations.
•Participate in change management and provide support for maintenance windows and escalations, including outside standard business hours when needed.
The Essentials - You Will Have
•Bachelor's Degree in relevant field.
•Legal authorization to work in the US is required. We will not sponsor individuals for employment visas, now or in the future, for this job opening.
The Preferred - You Might Also Have
•Typically requires a minimum of 8 years of related experience.
•Palo Alto Networks firewall experience beyond routine operations, including the ability to implement, configure, and troubleshoot security policies, NAT, VPNs, App-ID, and Panorama.
•Palo Alto certification such as PCNSE.
•Experience with F5 automation using iControl REST, AS3, Ansible, or Terraform.
•Familiarity with web application security principles and the OWASP Top 10.
•Experience deploying infrastructure in Microsoft Azure cloud environments.
•Bachelor's degree in Computer Science, Engineering, Information Technology, or equivalent experience.
•Current or previously held F5 certification, such as F5-CA (BIG-IP Administrator) and F5-CTS (LTM, DNS, and/or ASM).
•Current or previously held Cisco networking certification, such as CCNA or CCNP.
•Extensive practical experience with F5 LTM, BIG-IP DNS (GTM), and ASM Advanced WAF in an enterprise environment.
•Deep, demonstrable expertise in ASM policy building and tuning. This is the critical requirement for the role.
•Experience deploying and supporting F5 Virtual Editions on hypervisor and cloud platforms.
•Strong knowledge of TCP/IP, routing and switching, DNS, HTTP and HTTPS, and SSL and TLS.
•Proficiency writing and troubleshooting iRules and LTM policies.
•Strong troubleshooting and analytical skills, with the ability to work independently.
What We Offer
•Health Insurance including Medical, Dental and Vision
•401k
•Paid Time off
•Parental and Caregiver Leave
•Flexible Work Schedule where you will work with your manager to enjoy a work schedule that can be flexible with your personal life.
For this role, the Base Salary Compensation is from $119,360.00 - $179,040.00 USD Annual with an annual target bonus of 8% of base salary. Actual pay will be based on factors such as skills, knowledge, education, and experience.
This position is part of a job family. Experience will be the determining factor for position level and compensation.
Rockwell Automation's hybrid policy aligns that employees are expected to work at a Rockwell location at least Mondays, Tuesdays, and Thursdays unless they have a business obligation out of the office.
