Senior Application Delivery & Security Engineer
About The Position
Rockwell Automation is hiring a Senior Application Delivery & Security Engineer for its enterprise network and security team. The role owns the design, security, and reliability of application delivery services built primarily on F5 BIG-IP Virtual Editions, with emphasis on Local Traffic Manager (LTM), BIG-IP DNS (GTM), and Advanced WAF (ASM). Web application security is the primary focus, especially ASM policy design, tuning, and troubleshooting for business-critical web applications and APIs. The position reports to the IT Manager, Network and Security Engineering. It is hybrid and may be based at a Rockwell Automation office in Milwaukee or Mequon, Wisconsin; Mayfield Heights, Ohio; Chelmsford, Massachusetts; or Eden Prairie, Minnesota. Employees are expected to work at a Rockwell location at least Mondays, Tuesdays, and Thursdays unless a business obligation requires them to work elsewhere. The role includes engineering and lifecycle management of F5 BIG-IP Virtual Edition instances; configuring LTM traffic management and BIG-IP DNS global load balancing; analyzing application-delivery problems; partnering with application, network, and security teams; and maintaining documentation and operational standards. Support for maintenance windows and escalations may be needed outside standard business hours. A bachelor’s degree in a relevant field is required. Legal authorization to work in the United States is required; the company will not sponsor employment visas for this opening. The preferred profile includes at least eight years of related experience and deep practical expertise in F5 technologies, particularly ASM policy building and tuning. The annual base salary range is $119,360 to $179,040, with an annual target bonus of 8% of base salary.
Requirements
- Bachelor’s degree in a relevant field.
- Legal authorization to work in the United States; employment visa sponsorship is not available for this opening.
- Deep, demonstrable expertise in ASM policy building and tuning is a critical requirement.
- Strong knowledge of TCP/IP, routing and switching, DNS, HTTP and HTTPS, and SSL and TLS.
- Proficiency writing and troubleshooting iRules and LTM policies.
- Strong troubleshooting and analytical skills, with the ability to work independently.
Nice To Haves
- Typically, at least 8 years of related experience.
- Palo Alto Networks firewall experience beyond routine operations, including implementing, configuring, and troubleshooting security policies, NAT, VPNs, App-ID, and Panorama.
- Palo Alto certification such as PCNSE.
- Experience with F5 automation using iControl REST, AS3, Ansible, or Terraform.
- Familiarity with web application security principles and the OWASP Top 10.
- Experience deploying infrastructure in Microsoft Azure cloud environments.
- Bachelor’s degree in Computer Science, Engineering, or Information Technology, or equivalent experience.
- Current or previously held F5 certification, such as F5-CA (BIG-IP Administrator) and F5-CTS (LTM, DNS, and/or ASM).
- Current or previously held Cisco networking certification, such as CCNA or CCNP.
- Extensive practical experience with F5 LTM, BIG-IP DNS (GTM), and ASM Advanced WAF in an enterprise environment.
- Experience deploying and supporting F5 Virtual Editions on hypervisor and cloud platforms.
Responsibilities
- Build and manage ASM and Advanced WAF security policies, including policy creation, learning and tuning, signature management, and false-positive remediation.
- Protect web applications and APIs against the OWASP Top 10, malicious bot traffic, and layer 7 denial-of-service attacks using native ASM controls.
- Analyze ASM event logs and violation data to tune policies while preserving legitimate application traffic.
- Serve as the primary resource for WAF policy strategy, enforcement decisions, and security incident troubleshooting.
- Design, deploy, configure, and maintain F5 BIG-IP Virtual Edition instances in production and non-production environments.
- Perform F5 Virtual Edition upgrades, hotfixes, licensing, and lifecycle management.
- Deploy and support Virtual Editions on hypervisor and cloud platforms.
- Configure and support LTM virtual servers, pools, monitors, profiles, and persistence.
- Implement SSL and TLS offload and certificate handling.
- Write and troubleshoot iRules and LTM policies for advanced traffic steering.
- Manage BIG-IP DNS wide IPs, listeners, data centers, and global load-balancing methods for multisite availability and failover.
- Resolve complex application-delivery issues using tcpdump, qkview, system logs, and packet-level analysis.
- Partner with application, network, and security teams to onboard applications behind F5 services.
- Create and maintain documentation, runbooks, and standard configurations.
- Participate in change management and provide support for maintenance windows and escalations, including outside standard business hours when needed.
Benefits
- Health insurance, including medical, dental, and vision.
- 401(k).
- Paid time off.
- Parental and caregiver leave.
- Flexible work schedule, coordinated with the manager.
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Senior
