Senior Network Engineer - Application Delivery & Security

Teraswitch•Pittsburgh, PA

1d•Onsite

About The Position

Engineered to outperform, Teraswitch is on a mission to provide high-performance infrastructure services for critical workloads. With 25+ datacenter locations around the world interconnected by our low latency global backbone network, we are the class leader in performance bare metal hosting and rapidly expanding into additional infrastructure services. The Network Engineering team at Teraswitch designs and operates our low-latency global backbone and the network services layered on top of it. This role leads the rollout and ongoing operation of our F5 application delivery and security platform across 25+ points of presence — global server load balancing, L4–L7 application delivery and SSL/TLS termination, WAF, and DDoS mitigation — for a multi-tenant, service-provider environment. You'll own the F5 fleet end to end: architecture and standardization, device onboarding and provisioning at scale, day-to-day operations, and automation. This role reports to the Principal Network Architect. Title and level will be calibrated to your experience, technical depth, and demonstrated scope of ownership.

Requirements

Deep, hands-on experience designing and operating F5 BIG-IP in production, including LTM (L4–L7 load balancing and SSL/TLS termination) and iRules
Strong applied networking fundamentals across the L2–L7 path — TCP/IP, DNS, HTTP/HTTPS, and TLS
Working knowledge of BGP and dynamic routing, and how they integrate with application delivery (e.g., route health injection, anycast)
F5 automation experience (iControl REST and/or declarative config via AS3 and Declarative Onboarding)
Configuration management (Ansible) and/or scripting experience (Python, bash)
Comfortable working in a fast-paced, results-oriented environment
Committed to operational best practices and security by design
A balance of AI-assisted development and actual understanding of the technologies in use.

Nice To Haves

F5 experience in a service or hosting provider environment specifically — multi-tenant design, automation-first operations, and scalable, secure delivery (as distinct from single-tenant enterprise)
Global server load balancing at scale with BIG-IP DNS / GTM
WAF policy design and tuning, including bot defense, with F5 Advanced WAF / ASM
DDoS mitigation across L3–L7 (AFM, DDoS Hybrid Defender, behavioral DoS)
Multi-tenant isolation using vCMP, route domains, and partitions
Fleet management and centralized operations of F5 Systems
Infrastructure-as-code and GitOps for network / ADC configuration (Terraform F5 provider, CI/CD pipelines for config)
Operating and upgrading F5 platforms at scale (TMOS lifecycle; rSeries / VELOS / F5OS or BIG-IP Next a plus)
NGINX and/or F5 Distributed Cloud (XC) experience
F5 certification (e.g., F5 Certified Technology Specialist / CTS, or higher)
Demonstrated ability to design and operate automation-first infrastructure at scale

Responsibilities

Drive the global deployment of our F5 platform across 25+ points of presence, establishing standardized, repeatable designs for application delivery and security
Work with the broader Network and Software Engineering teams to build and improve customer self-service experiences for F5 delivered services
Architect and operate global server load balancing with BIG-IP DNS (GTM) — anycast, wide IPs, and topology / geolocation-based steering with health-driven failover across POPs
Design, deploy, and tune L4–L7 load balancing and SSL/TLS termination (LTM), including traffic profiles, certificate management, and iRules for advanced traffic handling
Build and operate WAF (F5 Advanced WAF / ASM) and DDoS mitigation (AFM and behavioral L3–L7 defenses) to protect multi-tenant customer workloads
Integrate F5 with the routing layer via BGP — route health injection and anycast VIP advertisement into our global backbone
Onboard, provision, and manage the F5 fleet at scale using custom provisioning, control, and automation (iControl REST, Ansible, Python)
Improve reliability through observability (F5 Telemetry Streaming into our metrics and logging stack), alerting, incident response, and postmortems
Participate in an on-call system supporting critical production systems.