Resident Engineer - Cyber Security (5-10 yrs)

1. The Resident Engineer (RE) is fully responsible for planning, configuring, integrating, and supporting CLIENT's F5 BIG-IP Infrastructure, including all components and clusters of F5 BIGIP, such as Local Traffic Management (LTM), Traffic Manager, Advanced Web Application Firewall (AWAF), iRules, and Analytics. The RE ensures full high availability of the service from the same clusters and ensures service availability at DR deployment.

2. Manage the day-to-day operations and administrative tasks concerning CLIENT'S F5 BIG-IP Infrastructure across physical and virtual appliances, licenses, firmware, and network layers while ensuring integrated service and optimal system performance at DC and DR.

3. Integrate new applications seamlessly with the F5 BIG-IP Solution to ensure comprehensive Advanced Web Application Firewall (AWAF) protection. This involves finely tuning the policy to meet CLIENT's requirements, guaranteeing full protection for the published service.

4. Develop and maintain F5 iRules scripts and application templates to facilitate efficient deployment and management of services, ensuring zero negative impact on bigip nodes and services.

5. Keep application templates up-to-date and troubleshoot any issues to ensure optimal functionality.

6. Fine-tune F5 BIG-IP parameters and system variables to meet security standards and performance requirements.

7. Fully accountable to provide proactive maintenance, on-site support, and round-the-clock (24/7) technical support and assistance for hardware, software, and configurations, as well as published services, promptly addressing any support requests from service owners.

8. Ensure continuous software support, including updates, patches, and hot fixes, to maintain system security

9. Conduct regular preventive maintenance, system monitoring, and diagnostics to prevent failures.

10. Guarantee zero impact on the F5 BIG-IP nodes and the published services across different clusters during any operation on various F5 clusters. The RE is entirely accountable for any downtime or degradation attributable to their actions on any published services or different F5 clusters.

11. Manage incident resolution and emergency response according to predefined timeframes.

12. Follow Change and Incident Management Procedures, including conducting incident investigations.

13. Ensure the latest stable versions of OS, Firmware, and other updates to maximize service protection and stability.

14. Ensure that services are on boarded efficiently and that the complete WAF policy exercises are carried out according to the communicated timeline. This includes onboarding services, building and implementing the full WAF policy, conducting traffic learning, enforcing policies to prevent blocking, and mitigating any false positives after policy enforcement.

15. Ensure immediate support for zero-day findings by implementing effective workarounds.

16. The RE must fully comply with the assigned SLA for any subject related to this domain.

17. Ensure all requests are responded to within the same business day (zero un-responded or unhandled tasks).

18. For any change, the RE must ensure proper approval from CLIENT's Management before implementing it.

19. Ensuring timely provision of reports, including :

a. Daily reports detailing service requests communicated with the international vendor F5 Networks.

b. Weekly reports on assigned and pending tasks for the RE.

c. Bi-weekly reports on the progress of clean-up, improvement, and tuning on ADC and AWAF.

d. Monthly reports on published services.