F5 BIG-IP Engineer (L3 Support) – Banking Domain

Job Summary

• Administer and optimize F5 BIG‑IP LTM, GTM/DNS, ASM, APM, AFM for banking applications.
• Implement iRules, traffic policies, SSL offloading, and secure application routing for high‑volume financial transactions.
• Manage VIPs, pools, health monitors, and ensure zero‑downtime deployments for digital banking services.
• Perform L3 troubleshooting for transaction failures, latency issues, SSL handshake errors, and application delivery disruptions.
• Execute patching, firmware upgrades, hotfixes, and configuration hardening in line with bank security standards.

• Handle L3 escalations for WAF, DDoS protection, IPS/IDS, firewall policies, and application‑layer attacks targeting banking systems.
• Investigate and respond to security alerts impacting digital channels, payment systems, and customer‑facing applications.
• Conduct RCA, prepare incident reports, and support compliance audits (PCI‑DSS, SWIFT CSP, ISO 27001).
• Work closely with SOC, NOC, and application teams to ensure rapid containment and recovery from security incidents.

• Troubleshoot L3 issues across API gateways, payment switches, core banking integrations, and secure connectivity.
• Support load balancing for UAT, DR, and production environments with strict change‑management controls.
• Support cloud‑integrated load balancing (AWS ELB/ALB/NLB, Azure Traffic Manager) if applicable.
• Maintain detailed documentation, runbooks, and architecture diagrams aligned with banking governance frameworks.

• 4–7 years of experience in F5 BIG‑IP and security operations, preferably in BFSI.
• Strong expertise in:
  • F5 LTM, GTM/DNS, ASM, APM, AFM
  • SSL/TLS, certificate lifecycle management
  • iRules, traffic policies, HTTP/HTTPS, TCP/IP
  • WAF tuning, DDoS mitigation, application security
• Experience supporting internet/mobile banking, payment gateways, API platforms, or similar high‑availability systems.
• Familiarity with SIEM tools (Splunk, QRadar, Elastic) and banking‑grade monitoring systems.
• Knowledge of PCI‑DSS, SWIFT CSP, NESA/ADHICS, ISO 27001, or regional banking security frameworks.

• F5‑CA / F5‑CTS
• CCNP Security, CEH, CompTIA Security+
• Cloud certifications (AWS/Azure) are an advantage.