Network Security Engineer – F5 (L3)

About the role

The L3 Network Security Engineer will be the highest technical escalation point for a bank’s perimeter and application‑security infrastructure, focusing on F5 BIG‑IP, Cisco Firepower and next‑generation firewalls. The role ensures availability, performance and regulatory compliance of critical banking services.

Key responsibilities

• Provide L3 support for F5 BIG‑IP LTM and ASM/Advanced WAF, including virtual servers, pools, SSL offload, iRules and policy tuning.
• Manage Cisco Firepower/FTD IPS/IDS via FMC, handling policy and signature tuning, threat analysis and SIEM correlation.
• Support Palo Alto and Check Point NGFW platforms, overseeing security policies, NAT, VPNs, HA design, patching and rule recertification.
• Lead incident response for P1/P2 events, conduct root‑cause analysis, drive change management and ensure audit/regulatory compliance.

Required profile

• 8+ years of network/security engineering experience with at least 3 years at L3 level supporting F5, IPS/IDS and NGFW.
• Bachelor’s degree in Computer Science, Engineering, IT or a related field.
• Prior experience in banking or other highly regulated enterprises is strongly preferred.

Required skills

• F5 BIG‑IP LTM and ASM/Advanced WAF, iRules, SSL/TLS.
• Cisco Firepower/FTD and FMC for IPS/IDS.
• Palo Alto PAN‑OS and Panorama.
• Check Point Gaia, SmartConsole and MDS.
• TCP/IP, routing/switching, NAT, VPN (IPsec/SSL), DNS, load‑balancing concepts.
• PKI/certificate management and security hardening standards.
• SIEM integration and log analysis.
• Packet capture and analysis with Wireshark and tcpdump.
• Scripting/automation using Python, Bash and APIs.