Network Security Engineer - F5

Job Description Roles & Responsibilities The L3 Network Security Support Engineer is the highest technical escalation point for the bank's perimeter and application-security infrastructure F5 BIG-IP (LTM load balancing and ASM/Advanced WAF), Intrusion Prevention/Detection systems (Cisco Firepower/FTD), and Next-Generation Firewalls (Palo Alto and Check Point). The role owns complex troubleshooting and root-cause analysis, design and change implementation, performance and capacity management, security policy tuning, and audit/regulatory compliance, ensuring the availability, performance and security of business-critical and customer-facing banking services. Key Responsibilities: F5 Load Balancing & Web Application Firewall (WAF) Provide L3 support for F5 BIG-IP LTM virtual servers, pools, health monitors, SSL offload, persistence and iRules for business-critical and customer-facing applications. Administer and tune F5 ASM / Advanced WAF create, tune and enforce WAF policies aligned to OWASP Top 10, manage attack signatures, bot defence, and false-positive reduction, and transition policies from monitoring to blocking mode safely. Manage SSL/TLS certificates, cipher/hardening standards, and PKI integration on the F5 estate. Troubleshoot latency, performance and availability issues; monitor interface/throughput utilisation; and provide capacity, upgrade and HA-design input. IPS / IDS (Intrusion Prevention & Detection) Provide L3 support for the IPS/IDS platform (Cisco Firepower / FTD via FMC) policy and signature management, tuning, and threat analysis. Optimise IPS/IDS policies, reduce false positives, and manage inline vs detection modes; validate coverage of critical assets and segments. Perform packet-level analysis and threat investigation; correlate IPS/IDS events with the SIEM for detection and response. Maintain signature/rule currency and coordinate tuning with the SOC and threat-intelligence functions. Next-Generation Firewall (NGFW) Provide L3 support for Palo Alto (PAN-OS /Panorama) and Check Point (Gaia / SmartConsole / MDS) firewalls across production and DR. Manage security policies, rule bases, NAT, App-ID/URL filtering, threat-prevention profiles, and site-to-site / remote-access VPNs (IPsec/SSL). Perform firewall hardening, HA configuration, version/patch management (N-2 compliance), and periodic rule recertification / clean-up of no-hit rules. Lead complex firewall change implementation and troubleshooting with minimal business impact. General L3/ Operational Act as the senior escalation point for P1/P2 incidents; lead root-cause analysis and problem management to prevent recurrence. Own change management (raise, review and implement CRs) in line with the bank's governance, and contribute to design / Low-Level Design (LLD) for new solutions. Support audit and regulatory compliance (e.g. SAMA / CBUAE, PCI-DSS), remediate findings, and maintain configuration backups (SolarWinds NCM) and evidence. Maintain SOPs, runbooks and topology documentation; mentor L1/L2 engineers; and coordinate with OEM/vendor TAC for escalations. Required Skills & Experience Deep hands-on expertise with F5 BIG-IP LTM and ASM/Advanced WAF, iRules, SSL/TLS. Strong expertise in IPS/IDS Cisco Firepower/ FTD / FMC (signature tuning, policy, analysis). Strong expertise in NGFW Palo Alto (PAN-OS/Panorama) and Check Point (R8x/Gaia). Solid networking foundation TCP/IP, routing/switching, NAT, VPN (IPsec/SSL), DNS, and load-balancing concepts. SSL/TLS, PKI/certificate management, and security hardening standards. SIEM integration and log analysis; packet capture and analysis (Wireshark / tcpdump). Scripting/automation (Python / Bash / API) desirable for operational efficiency. Certifications (Preferred) F5 Certified 201/301 (LTM) and ASM/Advanced WAF. Cisco CCNP Security / Firepower (SNCF). Palo Alto PCNSE. Check Point CCSA/ CCSE. CISSP / CISM desirable. Experience & Qualifications Bachelor's degree in Computer Science, Engineering, Information Technology or related field. 8+ years' experience in network/security engineering, with 3+ years at L3 level supporting F5, IPS/IDS and NGFW. Prior experience in a bank or large regulated enterprise, supporting business-critical and customer-facing services, strongly preferred. Behavioral / Soft Skills Strong incident-leadership and problem-solving under pressure (P1 handling). Clear written and verbal communication, including stakeholder and leadership updates. Disciplined approach to change management, documentation and audit. Collaborative team player able to mentor junior engineers and coordinate with vendors. Preferred Industry Experience Banking Financial Services Insurance (BFSI) Large Enterprise Security Operations Environment Work Model Full-time onsite deployment at customer location Willingness to support after-hours activities during critical incidents or planned maintenance Participation in on-call support rotation if required TekWissen Group is an equal opportunity employer supporting workforce diversity. Desired Candidate Profile Bachelor's degree in Computer Science, Engineering, Information Technology or related field. 8+ years' experience in network/security engineering, with 3+ years at L3 level supporting F5, IPS/IDS and NGFW. Prior experience in a bank or large regulated enterprise, supporting business-critical and customer-facing services, strongly preferred. Company Industry BankingFinancial ServicesBroking Department / Functional Area System AdministrationNetwork AdministrationSecurity (IT Software) Keywords Network Security Engineer - F5 Get real-time job updates only on our App