Infrastructure Engineer - Networking & WAF Specialist

Job Description

We are looking for a highly skilled and motivated Infrastructure Security Specialist to join our core Infrastructure team. This role is critical in defining and securing the architecture of our hybrid environment, encompassing both multi-cloud platforms and on-premise data centers. The ideal candidate will possess deep technical expertise in Web Application Firewalls (WAF) and the F5 ecosystem, with a strong focus on enforcing "Security as Code" and proactively managing the security posture of our infrastructure pipelines and runtime environments.

Basic Requirements

Key Responsibilities

1. WAF & Application Security Architecture

• WAF Engineering: Architect and manage the F5 and Signal Sciences WAF infrastructure. Move beyond basic setup to perform continuous threat modeling and rule tuning to minimize false positives while blocking active attacks.

• Traffic Policy Enforcement: Translate complex business logic into secure traffic policies. Develop custom rules to mitigate OWASP Top 10 threats, bots, and zero-day vulnerabilities immediately upon discovery.

• Attack Surface Reduction: Regularly audit and harden public-facing endpoints to ensure no unauthorized services are exposed to the internet.

2. Hybrid Network Security

• Secure Ingress Operations: Manage Kubernetes Ingress (F5 Nginx) with a focus on TLS/SSL termination, mutual TLS (mTLS) for service-to-service communication, and certificate rotation rather than just load balancing.

• Micro-segmentation: Design network policies that isolate critical on-premise databases from public cloud front-ends, strictly enforcing "Least Privilege" network access.

• Hybrid Connectivity Security: Secure the interconnects (VPN/Direct Connect) between on-prem data centers and Cloud (AWS/GCP/Azure), ensuring encrypted and authenticated transit.

3. Infrastructure Hardening & Compliance

• OS & Container Hardening: Responsible for the security configuration of base images and VM templates. Implement CIS Benchmarks and ensure all deployed assets match strict security baselines before they go live.

• Vulnerability Management: Own the lifecycle of vulnerability remediation. Prioritize remediation based on threat intelligence and ensure critical CVEs are resolved within SLAs.

• Drift Detection: Implement tools to detect configuration drift. If a server’s security setting is changed manually, your systems should detect and revert it automatically.

4. DevSecOps

• Security Observability: Configure SIEM forwarding and alerts for WAF and Network logs. You are responsible for detecting anomalies (like data exfiltration attempts or unusual traffic spikes), ensuring actionable intelligence is derived from system logs.

• Policy as Code: Write and enforce security policies (using tools like OPA or Sentinel) that automatically reject non-compliant Infrastructure as Code (Terraform/Ansible) commits.

• Pipeline Security Integration: Embed security gates (SAST, SCA, Container Scanning) into the CI/CD pipeline. Ensure that developers cannot deploy vulnerable code or images by accident.

Required Qualifications

• Experience: 10+ years in Infrastructure Security, Network Security, or DevSecOps.

• Primary Tech Stack: Deep expertise in F5 (LTM/ASM/AFM) and Nginx Ingress Controller.

• Security Domain: Strong grasp of WAF tuning, Micro-segmentation, DDoS mitigation strategies, and Zero Trust Networking principles.

• Hybrid Skills: Proven ability to secure complex environments that span physical data centers and public clouds (AWS/GCP/Azure).

• Tooling: Experience with Security as Code tools (Terraform, OPA) and Pipeline Security scanners (e.g., Snyk, Trivy, or SonarQube).

Preferred Qualifications

• Experience writing custom WAF rules (iRules, ModSecurity).

• Service Mesh: Familiarity with mTLS and service mesh concepts (e.g., Istio or Linkerd) for secure ingress.

• Certifications: CISSP, CKS (Certified Kubernetes Security Specialist), or F5 Certified Technology Specialist.

• Scripting (Python/Go) specifically for security automation tasks.


Travel Requirements

None


Relocation Provided

None


Position Type

Experienced

Referral Payment Plan

No

EEO Statement

Motorola Solutions is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion or belief, sex, sexual orientation, gender identity, national origin, disability, veteran status or any other legally-protected characteristic.

We are proud of our people-first and community-focused culture, empowering every Motorolan to be their most authentic self and to do their best work to deliver on the promise of a safer world. If you’d like to join our team but feel that you don’t quite meet all of the preferred skills, we’d still love to hear why you think you’d be a great addition to our team.