Senior Application Delivery & Security Engineer

Rockwell Automation•Mayfield Heights, OH

4d•Hybrid

About The Position

Rockwell Automation is hiring a Senior Application Delivery & Security Engineer for its enterprise network and security team. The role owns the design, security, and reliability of application delivery services built primarily on F5 BIG-IP Virtual Editions, with emphasis on Local Traffic Manager (LTM), BIG-IP DNS (GTM), and Advanced WAF (ASM). Web application security is the role’s primary focus, particularly ASM policy design, tuning, troubleshooting, and protection of business-critical web applications and APIs. This is a hands-on engineering position involving F5 platform design, deployment, configuration, maintenance, and lifecycle management across production and non-production environments. The engineer will work with application, network, and security teams to onboard applications, resolve complex delivery issues, maintain documentation, and support change management and escalations. The position reports to the IT Manager, Network and Security Engineering and is hybrid, based at a Rockwell Automation office in Milwaukee or Mequon, Wisconsin; Mayfield Heights, Ohio; Chelmsford, Massachusetts; or Eden Prairie, Minnesota. Employees are expected to work at a Rockwell location at least Mondays, Tuesdays, and Thursdays unless a business obligation requires otherwise. The position requires a bachelor's degree in a relevant field and legal authorization to work in the United States; employment visa sponsorship is not available. The posting states that the role typically requires at least eight years of related experience. Compensation is $119,360 to $179,040 USD annually, with an annual target bonus of 8% of base salary. Actual compensation depends on factors including skills, knowledge, education, and experience.

Requirements

Bachelor's degree in a relevant field.
Legal authorization to work in the United States; employment visa sponsorship is not available.
Typically, a minimum of 8 years of related experience.
Extensive practical enterprise experience with F5 LTM, BIG-IP DNS (GTM), and ASM Advanced WAF.
Deep, demonstrable expertise in ASM policy building and tuning; identified as the critical requirement for the role.
Experience deploying and supporting F5 Virtual Editions on hypervisor and cloud platforms.
Strong knowledge of TCP/IP, routing and switching, DNS, HTTP and HTTPS, and SSL and TLS.
Proficiency writing and troubleshooting iRules and LTM policies.
Strong troubleshooting and analytical skills, with the ability to work independently.

Nice To Haves

Palo Alto Networks firewall experience beyond routine operations, including implementing, configuring, and troubleshooting security policies, NAT, VPNs, App-ID, and Panorama.
Palo Alto certification such as PCNSE.
Experience with F5 automation using iControl REST, AS3, Ansible, or Terraform.
Familiarity with web application security principles and the OWASP Top 10.
Experience deploying infrastructure in Microsoft Azure cloud environments.
Bachelor's degree in Computer Science, Engineering, or Information Technology, or equivalent experience.
Current or previously held F5 certification, such as F5-CA (BIG-IP Administrator) and F5-CTS (LTM, DNS, and/or ASM).
Current or previously held Cisco networking certification, such as CCNA or CCNP.

Responsibilities

Build and manage ASM and Advanced WAF security policies end to end, including policy creation, learning and tuning, signature management, and false-positive remediation.
Protect web applications and APIs against the OWASP Top 10, malicious bot traffic, and Layer 7 denial-of-service attacks using native ASM controls.
Analyze ASM event logs and violation data to tune policies while maintaining protection without disrupting legitimate application traffic.
Serve as the go-to resource for WAF policy strategy, enforcement decisions, and security incident troubleshooting.
Design, deploy, configure, and maintain F5 BIG-IP Virtual Edition instances across production and non-production environments.
Perform upgrades, hotfixes, licensing, and lifecycle management for the F5 Virtual Edition estate.
Deploy and support Virtual Editions on hypervisor and cloud platforms.
Configure and support LTM virtual servers, pools, monitors, profiles, and persistence.
Implement SSL and TLS offload and handle certificates.
Write and troubleshoot iRules and LTM policies for advanced traffic steering.
Manage BIG-IP DNS/GTM wide IPs, listeners, data centers, and global load-balancing methods for multisite availability and failover.
Resolve complex application delivery issues using tcpdump, qkview, system logs, and packet-level analysis.
Partner with application, network, and security teams to onboard applications behind F5 services.
Create and maintain documentation, runbooks, and standard configurations.
Participate in change management and support maintenance windows and escalations, including outside standard business hours when needed.