Cyber Security Architect - 262117

Job Type: Permanent position | Full time position

Job Description

Designation / Job title : Cyber Security Architect - Primary or Mandatory skills :- F5 BIG-IP platforms: i

Series, r

Series, Velos, Viprion (hardware & virtualised).

• F5 Modules: LTM, DNS/GTM, ASM (AWAF), SSLO, CGNAT, AFM (DDoS), PEM, BIG-IQ CM.
• Enterprise routing and switching: OSPF, BGP, STP, VLAN, LACP

Good to have skills :

• IPSec VPN design and implementation.
• Packet capture and analysis: tcpdump, Wireshark.
• Automation & Infrastructure-as-Code: Terraform, AS3, i

Rules.

• Authentication services: TACACS+, RADIUS.

Detailed Job description : - We are seeking a highly skilled and experienced Cyber Security Architect with deep expertise in F5 technologies, enterprise network security, and application delivery. The ideal candidate brings 10+ years of hands‑on experience designing, implementing, and managing complex network and security infrastructures — ideally within ISP, enterprise, or professional services environments across the APAC region.

Key Responsibilities

• Lead end-to-end design, implementation, and delivery of F5-based network and security solutions (LTM, DNS/GTM, ASM/AWAF, SSLO, CGNAT, AFM, PEM).
• Architect and implement DNS solutions including caching resolvers, validating resolvers, and authoritative DNS servers with a focus on performance, scalability, and fault tolerance.
• Design and enforce DNS and application security controls to protect against DDoS attacks, WAF threats, and DNS-based exploits.
• Produce and maintain comprehensive technical documentation: High-Level Designs (HLD), Low-Level Designs (LLD), security design documents, operational runbooks, and SOPs.
• Collaborate with network, infrastructure, platform, and security teams to deliver cohesive and resilient solutions.
• Drive high availability and failover architecture design, ensuring zero-downtime resilience.
• Provide expert troubleshooting, optimization, and post-implementation support across enterprise and ISP environments.
• Lead stakeholder and vendor coordination, acting as the primary liaison between clients, vendors, and internal teams.
• Define professional services scoping requirements and engage directly with customers to understand and address their technical needs.
• Champion automation practices using Terraform, AS3/i

Rules, and related tooling.

• Implement security hardening, RBAC, secure logging, and compliance controls across F5 platforms.

Required Skills & Experience Experience

• 10+ years in network infrastructure, security architecture, or application delivery roles.
• Proven track record delivering F5 professional services to enterprise and/or ISP clients.
• Demonstrated experience with large-scale migrations (e.g., DNS migrations, CGNAT deployments, WAF rollouts).
• Regional project implementation experience across APAC is highly desirable.

Technical Expertise required for this role:

• F5 BIG-IP platforms: i

Series, r

Series, Velos, Viprion (hardware & virtualised).

• F5 Modules: LTM, DNS/GTM, ASM (AWAF), SSLO, CGNAT, AFM (DDoS), PEM, BIG-IQ CM.
• Enterprise routing and switching: OSPF, BGP, STP, VLAN, LACP.
• IPSec VPN design and implementation.
• Packet capture nd analysis: tcpdump, Wireshark.
• Automation & Infrastructure-as-Code: Terraform, AS3, i

Rules.

• Authentication services: TACACS+, RADIUS.
• Monitoring & observability: SNMP, Syslog, Grafana, Prometheus.
• Virtualisation: VMware and related virtualisation technologies.
• Cloud platforms: AWS, Microsoft Azure.

#J-18808-Ljbffr