Note: The job is a remote job and is open to candidates in USA. Pacer Group is a prominent company in the Financial Services and Cyber Security domain, seeking an experienced Web Application Firewall (WAF) Engineer to join their Cyber Security Technology team. The role involves designing, deploying, sustaining, and monitoring critical perimeter and edge controls to secure web properties and API endpoints against digital threats.
Responsibilities
- Drive day-to-day operations, rule optimization, monitoring, and deep troubleshooting for web application firewalls (F5 and Akamai) across the global enterprise ecosystem
- Perform complex architecture, infrastructure maintenance, and engineering duties supporting existing security controls alongside incoming, enterprise-wide security initiatives
- Execute regular system health checks, user activity audits, and security policy validations to guarantee uninterrupted control efficacy and corporate compliance
- Partner directly with software engineering and application teams to review traffic anomalies, interpret malicious payloads, and ensure applications comply with enterprise defense standards
- Author, update, and maintain meticulous engineering documentation detailing architecture design, operational runbooks, backup configurations, and management procedures
- Maintain a customer-centric focus while handling escalations, working a flexible schedule, and participating in an on-call rotation to facilitate rapid incident resolution
Skills
- Enterprise WAF Administration: Minimum 5+ years of hands-on experience deploying, configuring, and maintaining enterprise web application firewalls, specifically Akamai Kona Site Shield, F5 ASM/AWAF, and Salt Security API Protection
- Layer 7 Network Security: Deep understanding of application layer TCP/IP protocols, Layer 7 security fundamentals, HTTP/HTTPS behavior, and modern web application architectures
- Advanced Troubleshooting & Network Analysis: Mastery of network diagnostic techniques, including performing and analyzing packet captures (Wireshark/tcpdump), executing CLI-based diagnostics, and reviewing complex firewall logs
- Log Analysis & Secure Coding Support: Proven ability to analyze application traffic logs to identify malicious behavior and collaborate closely with developers to promote secure coding practices (OWASP Top 10 mitigation)
- Automation & Scripting: Practical coding or scripting experience (Python or PowerShell) to automate routine security tasks, policy deployments, or log parsing
- Network Infrastructure Security: Functional knowledge of adjacent security domains, including Network Access Control (NAC), traditional stateful firewalls, and load balancing technologies
- Industry-recognized cyber security certifications (e.g., CISSP, CEH, F5-CTS, or Akamai certifications)
Benefits
- Medical
- Dental
- Vision
- 401(k)
Company Overview
Company H1B Sponsorship