Web Application Firewall Engineer

Role : WAF / Akamai Engineer

Location : Pune, Hyderabad

Type : Fulltime

Experience : 8+ Years Must

Must have : WAF and Akamai

Roles and Responsibilities

• Provide SME WAF Engineer design support for WAF solution design against industry best practices such as company MVP, OWASP and vendor best practices
• Discover, document, and create technical design and automation consumable configurations for WAF deployment and audit prerequisites, including :
• Baseline configuration design patterns from MVP reviews for all platform
• Technical deployment methods of custom rules and exceptions per platform and any per platform ordering / priority considerations with a lens on the safest deployment models possible
• Acceptable access controls for WAF management planes per platform against the companies agreed IDAM (Identity and Access Management) policies
• Ascertain the ownership and processes related to necessary certifications
• Review and address any rate limit each platform against MVP standards
• Integrate rate limit configurations into the Baseline Configuration
• Establish mechanisms per platform to stay informed about upcoming General Availability (GA) versions
• Discover and document supported logging options for each platform
• Design and document SIEM connector options, considering platform and company preferences.
• Liaise with the SIEM Team / SOC when the systems are fully compliant and ready for monitoring.
• Develop custom WAF tuning processes, documentation, and designs tailored to the organization's needs.
• Conduct training sessions for Application Teams, equipping them with the knowledge and skills needed for WAF tuning.
• Collaborate with Application Teams to fine-tune WAF settings, enhancing security measures and performance
• Review each platform against the Minimum Viable Product (MVP) benchmarks to identify and rectify any discrepancies
• Establish and agree upon a Baseline Configuration that satisfies MVP requirements
• Document WAF limitations and collaborate with the Risk team and vendors to seek resolutions