Engineer - Application Delivery & Security

Job Overview

This role entails full ownership of application delivery processes, global traffic management, Web Application Firewall (WAF) operations, and content/file threat defense using F5 BIG-IP (LTM & Advanced WAF), F5 GTM, FortiWeb WAF, and OPSWAT tools. The position demands managing traffic routing, SSL/TLS lifecycle management, ensuring high availability, API and bot protection, file threat analysis, and automating infrastructure deployments.

Key Responsibilities

• Set up and administer F5 BIG-IP LTM including virtual servers, pools, health monitors, persistence profiles, and traffic routing.
• Manage F5 GTM configurations for global DNS-based load balancing, traffic management between south and north flows, private DNS services, and oversee pool and health monitoring.
• Oversee SSL/TLS lifecycle tasks such as offloading, certificate administration, SSL profiles, and implementing TLS hardening on F5 and FortiWeb.
• Develop and uphold high availability configurations via clustering, synchronization, failover, and resilience across F5 platforms.
• Implement web application security measures including OWASP Top 10 protections, customized security policies, signature management, API and bot defense tactics, rate limiting, and IP reputation intelligence on F5 Advanced WAF and FortiWeb.
• Optimize attack detection rules, update signatures, minimize false positives, and create custom attack signatures when necessary on WAF systems.
• Lead the full deployment lifecycle of BIG-IP and FortiWeb appliances/virtual editions including provisioning, TMOS/firmware updates, hotfixes, backups, restores, and configuration management.
• Integrate FortiWeb with cloud load balancers, especially OCI Load Balancer, for Layer 7 traffic inspection.
• Handle OPSWAT platform management for scanning files in transit and at rest, analyze and respond to findings, including false positive assessments.
• Maintain policies and workflows that support secure file transfers and organizational content handling.
• Drive infrastructure automation efforts using REST API, AS3, Terraform, and Ansible for configuring deployments automatically.
• Conduct ongoing health and performance checks, logging, data analytics, and root-cause failure analysis; ensure vulnerability remediation, security hardening, and patch compliance for all app delivery and security components.

Candidate Requirements

• Bachelor's degree in computer science, information security, or a closely related discipline.
• Minimum eight years of experience working with F5 BIG-IP (LTM, GTM, Advanced WAF) and/or FortiWeb within enterprise production environments.
• Familiarity with content disarm and reconstruction (CDR) and multi-scanning platforms like OPSWAT is highly desirable.
• Proficient with infrastructure automation and scripting tools including Terraform, Ansible, and REST API/AS3.
• Preferred certifications include F5 Certified BIG-IP Administrator (F5-CA), F5 301a/302 Advanced WAF, and Fortinet NSE 6 for FortiWeb.
• Strong knowledge of DNS systems, SSL/TLS protocols, Layer 4-7 traffic management principles, and file threat triage.

Technical Skill Details

• Expertise in configuring and managing LTM and traffic steering components: virtual servers, pools, health monitors, persistence.
• Extensive experience managing SSL/TLS duties such as offloading, certificate lifecycle, and TLS security strengthening.
• Ability to implement and maintain high availability through clustering, failover, and syncing configuration.
• Advanced knowledge of global traffic management using DNS/GSLB, load balancing, site failover, and health checks.
• Handling south-north traffic steering and integrating private DNS within F5 GTM solutions.
• FortiWeb integration with OCI Load Balancers to enhance Layer 7 traffic inspection.
• Proficient in web application firewalls: creating policies, managing signatures, protecting APIs and mitigating malicious bots, applying rate limits and IP intelligence.
• Deployment and lifecycle management of network virtual appliances and physical units including firmware and patch updates.
• Management of OPSWAT to secure files in transit and at rest, along with effective triage and analysis.
• Managing vulnerability assessments, security hardening, and keeping compliance through patch management.
• Use of monitoring tools to ensure performance and diagnose issues including logging, analytics, and root cause investigations.
• Automation of infrastructure configuration through leading tools and scripting.

Company Overview

malomatia is a premier IT solutions provider based in Qatar, delivering innovative technology services by leveraging the combined expertise of local and international professionals to help organizations achieve their strategic objectives.

Founded in 2008, malomatia has led digital transformation initiatives in key sectors like government, healthcare, education, customs, and transportation with a focus on cloud, cybersecurity, AI, and contact center technology. The company is committed to driving impactful change and fostering a knowledge-driven digital ecosystem empowered by values such as ownership, integrity, teamwork, agility, and innovation.

Join malomatia to be part of a dedicated team shaping Qatar’s technological future by creating smarter societies through transformative IT solutions.