Description

Lead architecture design and migration strategy for enterprise Web Application Firewall and application ingress on public cloud.

This role is on-site.

Responsibilities

• Lead design workshops, requirement gathering, and tradeoff discussions with senior client stakeholders.
• Design WAF and application ingress architecture, producing HLD, LLD, traffic flow diagrams, and policy enforcement maps.
• Define target-state WAF solutions covering load balancing, content switching, TLS/mTLS termination, and policy enforcement across multi-region Azure.
• Define BCDR architecture for application ingress and WAF layers, including failover patterns and RPO/RTO targets.
• Define migration approaches, including dependencies, risk, outage profiles, and rollback strategies.

Required Skills

• 10-15 years of experience managing enterprise WAF (NetScaler, F5, Cloudflare, Akamai).
• Hands-on architecture and operations experience on at least one platform besides NetScaler.
• Architecture understanding of Azure cloud, including Load Balancer and vNet.
• Knowledge of OWASP Top 10, API Security Top 10, positive vs. negative security models, and bot management.
• Demonstrable experience leading WAF or ingress migrations (brownfield to greenfield, on-prem to cloud, or vendor swap).
• Experience defining API security controls, schema validation, rate limiting, and abuse protection.
• Ability to align designs with zero-trust principles and enterprise reference architectures.

Preferred Skills

• Automation and scripting using Python and Terraform.
• Experience in large-scale enterprise environments.

Key Skills

Education

Not specified