Azure Firewall/Akamai WAF Engineer

JOB TITLE: Azure Firewall Engineer
JOB LOCATION: Remote, USA
WAGE RANGE*: 70-75
JOB NUMBER: RQ194392

Job Description Summary:

Seize your opportunity to make a personal impact as a Azure Firewall and Akamai Web Application Firewall (WAF) Engineer supporting our HHS HRSA customer. This is your place to make meaningful contributions to challenging projects and grow a rewarding career

HOW YOU WILL MAKE AN IMPACT

• As a hands-on Azure Firewall and Akamai WAF Engineer, you will engineer, test, and implement firewall and WAF solutions using a combination of Azure and Akamai technologies.
• Will work with cross-functional team of engineers and subject matter experts designing solutions and integrating firewalls, WAF, NAT, Azure Load Balancers, TIC 3.0 cloud infrastructure with the Cloud based SASE Load Balancers.
• Ultimately help the customer achieve their goal of reducing their reliance of on-premise Citrix NetScalers.
• Ensure customer networked traffic is safe and secure from threats.

WHAT YOU'LL NEED TO SUCCEED:

• Bachelor's degree in a related STEM field.
• 5+ years of related experience with Azure Firewalls and WAF Technologies (preferably Akamai)
• 3+ years of experience in large-scale enterprise Azure Organization
• Strong understanding of firewalls (stateless, stateful, next-gen firewalls)
• Ability to configure firewall (hardware and software based), including rules, policies, and access control lists.
• Defining security policies for inbound and outbound traffic.
• Filtering traffic based upon IP, port, protocol and well as advance filtering using application-level characteristics.
• Hands-On experience in setting up, configuring, and maintaining WAF solutions such as Azure Application Gateway, Cloudflare or Akamai WAF or ModSecurity.
• Understanding of OWASP top 10 threats, such as SQL injection, cross-site scripting (XSS) and cross-site forgery (CSRF) and how setup WAFs to protect against those threats.
• Custom rule creation for WAF rules to mitigate specific application vulnerabilities.
• Proficient in inspecting HTTP/HTTPS traffic, detecting anomalies and tuning WAFs to reduce false-positives.
• Strong understanding of networking protocols (IP, IPv6, TCP, UDP, HTTP/HTTPS, DNS, SSL/TLS) and how they are used in firewalls and WAFs to secure traffic.
• Familiarity with VPNs and Secure Tunnels, IPSec, SSL and other tunnelling protocols.
• Knowledgeable in load-balancing and ensuring firewall and WAF redundancy for high-availability (HA). Customer currently uses Citrix NetScalers.
• Ability to understand threat intelligence, the latest threat landscapes, attack vectors and how to secure systems accordingly.
• Ability to respond to security incidents involving firewall breaches or WAF vulnerabilities, including post-event analysis and mitigation.
• Familiar with securing cloud environments (AWS, Azure, Google Cloud Platform) using cloud-native firewalls and WAF solutions.
• Familiar with cloud-native WAFS and Firewalls, such as Azure Firewall, WAF, Azure Network Security Groups (NSG), Palo Alto Cloud NGFW for Azure, and Azure Application Gateway.
• Scripting languages such as python, bash, PowerShell to automate repetitive tasks such as rules updating and/or log parsing.
• Familiar with automation tools like Ansible, Terraform, or Puppet for automating firewall and WAF deployments and management.
• Ability to parse and analyze firewall and WAF logs to detect security incidents and optimize security posture.
• Experience with Security information and event management (SEIM) tools (such as Splunk) for aggregating and analyzing logs from firewalls and WAFs.
• Ability to analyze traffic flows and identify anomalies or performance issues.
• Knowledgeable in security framework and standards (e.g., PCI DSS, HIPAA, GDPR) and how firewalls and WAFs ensure compliance.
• Understanding of best practices for securing web applications, network perimeters, and internal communications.
• Ability to fine-tune firewalls and WAFs to ensure they don't create bottlenecks while still providing effective security.
• Knowledge of controlling traffic volume to prevent denial-of-service attacks and maintaining system performance (traffic shaping).
• Strong analytic skills for diagnosing and resolving complex firewall and WAF related issues.
• Root-cause analysis of network security breaches or web application vulnerabilities.
• Effective team player and collaborator.
• Ability to document firewall and WAF configurations, changes, and security incidents for internal records and auditing.
• Provide technical support in Change Management processes that directly impact production environment with regards to Firewall and WAF configuration changes.
• Provide training to the government, and their successors, on details of the migration process, administration, maintenance, support and operational use of the solution.
• Works with Program and Project Management throughout the contract period.
• Participates in special projects, as needed.
• Resolve technical O&M problems that occur and on-call support for non-business hours.
• Provide Weekly and on-demand Status Reports on work performed.

Desired skills:

• Experience with Word, Excel, PowerPoint, Visio, SharePoint, Confluence, ServiceNow, Trello, JIRA, and MS Teams.
• Actively certified in Azure, Akamai or similar.
• SCRUM and Kanban Agile Methodologies
• Experience with any HHS agencies or entities
• Demonstrated strong technical skills and analytic abilities, as well as experience performing system security analysis and risk management.
• Demonstrated experience performing complex technical tasks with minimal direction.
• Demonstrated experience in translating an understanding of systems and applications into test plans and perform hands on testing.
• Possesses experience with communicating and presenting to leadership and decision makers.
• Possess a broad knowledge of Firewall and WAF best practices, policies and guidance.

Equal Opportunity Employer Veterans/Disabled

* While an hourly range is posted for this position, an eventual hourly rate is determined by a comprehensive salary analysis which considers multiple factors including but not limited to: job-related knowledge, skills and qualifications, education and experience as compared to others in the organization doing substantially similar work, if applicable, and market and business considerations. Benefits offered include medical, dental and vision benefits; dependent care flexible spending account; 401(k) plan; voluntary life/short term disability/whole life/term life/accident and critical illness coverage; employee assistance program; sick leave in accordance with regulation. Benefits may be subject to generally applicable eligibility, waiting period, contribution, and other requirements and conditions.

#Dice

Employers have access to artificial intelligence language tools (“AI”) that help generate and enhance job descriptions and AI may have been used to create this description. The position description has been reviewed for accuracy and Dice believes it to correctly reflect the job opportunity.