Own end-to-end application delivery, WAF, and content/file threat protection with primary, hands-on expertise across Cloudflare and OPSWAT, and secondary working knowledge of Palo Alto, Fortigate, and F5 (LTM/WAF and GTM). Responsible for Cloudflare domain onboarding and lifecycle, WAF rule and rate-limiting configuration, SSO application setup, custom hostnames, Workers development, hostname/IP list management, and OPSWAT-based file scanning — while providing secondary-level support for traditional firewall and F5 load-balancing/WAF platforms.
- Manage the Cloudflare environment across all onboarded domains, including DNS, WAF rules , rate limiting rules, custom hostnames, hostname lists, and IP lists.
- Own domain onboarding and lifecycle management within Cloudflare, ensuring a consistent security baseline and WAF rule set is applied to every domain.
- Configure and maintain Cloudflare SSO Applications (Zero Trust/Access) for secure application authentication.
- Develop, deploy, and maintain Cloudflare Workers for custom edge logic, traffic manipulation, and security automation.
- Build and maintain Cloudflare hostname lists and IP lists to support WAF, rate limiting, and access-control policies.
- Manage the OPSWAT file scanning platform for Data-in-Transit and Data-at-Rest content inspection; triage, analyze, and action file scan results, including false-positive review.
- Tune WAF rules and policies across Cloudflare and supporting platforms to reduce false positives while maintaining strong protection coverage.
- Provide administration and support for Palo Alto firewalls, including policy and rule management.
- Provide administration and support for Fortigate firewalls, including policy and rule management.
- Support F5 LTM/WAF administration : virtual servers, pools, health monitors, and WAF policy management.
- Support F5 GTM for global DNS-based load balancing, site failover, and health monitoring.
- Monitor Cloudflare analytics and logs — WAF events, rate-limiting triggers, and Worker performance — driving root-cause analysis for anomalies.
- Maintain accurate documentation of domain configurations, WAF rule sets, hostname/IP lists, SSO application configs, and secondary-platform settings.
- Coordinate with infrastructure and security teams on change management for major Cloudflare and firewall/WAF configuration changes.
- Bachelor's degree in Computer Science, Information Security, or a related field.
- 8+ years' experience in application delivery, WAF, and content security engineering.
- Primary, hands-on expertise with Cloudflare (Domains, WAF Rules, Rate Limiting Rules, SSO Applications, Custom Hostnames, Workers, Hostname Lists, IP Lists) and OPSWAT file scanning platforms.
- Secondary working knowledge of Palo Alto and Fortigate firewalls, and F5 LTM/WAF and GTM platforms.
- Strong understanding of DNS, SSL/TLS, Layer 4–7 traffic management, and file-based threat triage.
- Certifications preferred: Cloudflare Certified (Solutions Associate/Engineer), OPSWAT certification, Palo Alto PCNSA/PCNSE, Fortinet NSE, F5 Certified BIG-IP Administrator.
Primary Expertise — Cloudflare
- Domains — onboarding, DNS management, and domain lifecycle across the Cloudflare account.
- WAF Rules — minimum of 3 WAF rules configured and maintained per domain.
- Rate Limiting Rules — configuring and tuning rate limiting policies to mitigate abuse and DDoS-style traffic.
- SSO Applications — configuring SSO/Access applications for secure authentication.
- Custom Hostnames — managing custom hostname (SaaS) configurations.
- Workers — developing and deploying edge Workers for custom logic and security automation.
- Hostname Lists — creating and maintaining hostname lists for policy application.
- IP Lists — creating and maintaining IP lists for allow/block/rate-limit policies.