Network Systems Specialist II

Roswell Park Comprehensive Cancer Center

6d•Onsite

About The Position

At Roswell Park Comprehensive Cancer Center, technology plays a critical role in supporting patient care, research, and innovation. As an F5 Application Delivery & Web Application Security Engineer, you'll help protect and optimize the systems that connect patients, clinicians, researchers, and employees to the applications they rely on every day. In this highly visible role, you will serve as the primary expert for Roswell Park’s F5 platform, ensuring our public-facing applications remain secure, available, and performing at their best. You will work at the intersection of infrastructure, cybersecurity, and application delivery, helping defend against evolving cyber threats while enabling secure access to critical services. This position is ideal for a technology professional who enjoys solving complex challenges, enhancing security, and collaborating across teams to make a meaningful impact.

Requirements

Hands-on experience supporting F5 BIG-IP technologies, including load balancing and web application security
Understanding of networking fundamentals such as TCP/IP, DNS, routing, switching, VLANs, NAT, and high-availability design
Experience working with web application firewalls, perimeter security technologies, or enterprise firewalls
Ability to analyze application and network traffic to identify and resolve issues
Effective communication skills and enjoyment of partnering with technical and non-technical teams
Proactive approach to improving security, reliability, and system performance
Master’s degree and the equivalent of four (4) years of full-time experience in computer system hardware, operating systems and software, enterprise networking or computer systems security as it relates to technology used at the organization; or
Bachelor’s degree and the equivalent of four (4) years of full-time experience as a Network Systems Specialist I at Roswell Park Comprehensive Cancer Center; or
Bachelor’s degree and the equivalent of six (6) years of full-time experience in computer system hardware, operating systems and software, enterprise networking or computer systems security as it relates to technology used at the organization; or
Associates degree and the equivalent of eight (8) years of full‐time experience in computer system hardware, operating systems and software, enterprise networking or computer systems security as it relates to technology used at the organization; or
High School Diploma or High School equivalency Diploma and the equivalent of ten (10) years of full‐time experience in computer system hardware, operating systems and software, enterprise networking or computer systems security as it relates to technology used at the organization.

Nice To Haves

F5 BIG-IP LTM
F5 Advanced WAF (ASM)
F5 DNS/GTM
Application Delivery Controllers (ADC)
Web Application Firewalls (WAF)
Palo Alto Networks Firewalls
GlobalProtect VPN
SSL/TLS Certificate Management
Reverse Proxy Technologies
Internet Edge Security
DMZ Architecture
OWASP Top 10
Secure Application Publishing
Zero Trust Architecture
API Security
Healthcare or highly regulated environments
Enterprise networking and cybersecurity best practices

Responsibilities

Application Delivery & Load Balancing: Design, administer, and support Roswell Park’s enterprise F5 BIG-IP environment. Configure and maintain load balancing, traffic management, DNS services, SSL/TLS encryption, reverse proxy services, and high-availability solutions. Build and support virtual servers, pools, health monitors, profiles, and traffic management policies. Develop and maintain automation workflows and F5 configurations. Manage software upgrades, platform migrations, hardware refreshes, and lifecycle planning. Oversee SSL certificate management and secure application publishing.
Web Application Security: Design, implement, and optimize F5 Advanced Web Application Firewall (WAF) protections for internet-facing applications. Monitor and respond to web application security events and emerging threats. Tune security policies to balance strong protection with application performance and availability. Partner with application teams to securely onboard new applications and services. Help protect systems against common web-based attacks and vulnerabilities. Support security assessments, remediation efforts, and compliance activities. Implement advanced security controls such as bot protection, rate limiting, geolocation filtering, and threat intelligence services.
Perimeter & Network Security: Collaborate with Cybersecurity and Infrastructure teams to strengthen Roswell Park's internet-facing security posture. Support firewall, network segmentation, and secure access initiatives. Participate in Zero Trust and modern security architecture projects. Assist with vulnerability remediation and security hardening efforts. Analyze network and application traffic to troubleshoot performance and connectivity issues.
Operational Excellence: Monitor the health, performance, and security of critical infrastructure. Troubleshoot complex application delivery and network issues. Create and maintain technical documentation, standards, and implementation plans. Participate in scheduled maintenance activities and on-call support for critical systems.