WorldTech IT, LLC · 1 month ago
F5 Engineer
WorldTech IT is a service provider specializing in delivering, managing, and maintaining F5 solutions. The F5 Engineer will configure, deploy, troubleshoot, and optimize F5 BIG-IP, Distributed Cloud, and NGINX solutions across customer environments, while supporting cloud platforms and participating in an on-call rotation.
Information TechnologyProfessional ServicesSecurity
No H1B
Hiring Manager
Allison Ashlock
Responsibilities
Deliver expert-level LTM and GTM configuration for virtual servers, pools, nodes, monitors, SSL termination, iRules, admin partitions, and route domains
Deploy BIG-IP on all current hardware platforms such as iSeries, rSeries, Viprion, and Velos as well as on cloud providers (AWS, Azure, GCP, OCI)
Upgrade BIG-IP software as needed to patch CVEs or apply relevant bug fixes
Execute AFM tasks including firewall rule management, management of port protection, and basic firewall policy implementation
Apply advanced Linux scripting capabilities (cut, sort, grep, shell scripting) for operational automation and troubleshooting
Perform complex Advanced Troubleshooting and root cause analysis for client cases
Implement new BIG-IP ASM/AWAF solutions and manage policy lifecycle for external customers and perform policy tuning to reduce false positives and mature WAF posture over time
Expand use of AWAF advanced technologies such as Bot Defense, DoS Mitigation, Brute Force Logon Defense, and API protection
Provide customers with reports outlining WAF policy effectiveness and prioritized areas for improvement
Upgrade BIG-IP software as needed to patch CVEs or apply relevant bug fixes
Troubleshoot WAF and related configurations and assist teammates with escalations
Architect and deploy full BIG-IP APM solutions including access policies, per-request policies, webtops, and resource assignments for enterprise customer environments
Design and implement federation and SSO architectures using SAML 2.0 (IdP and SP-initiated), OAuth 2.0, OpenID Connect, and Kerberos-based authentication flows
Configure and troubleshoot MFA integrations including RADIUS, LDAP, Active Directory, and third-party MFA providers (Duo, Okta, Entra AD)
Build complex Visual Policy Editor (VPE) workflows incorporating branching logic, iRules integration, and dynamic resource assignment
Design Zero Trust access architectures leveraging APM per-app VPN, clientless remote access, and endpoint inspection policies
Troubleshoot advanced APM issues including session variable debugging, policy trace analysis, and OAuth/OIDC token flow failures
Perform APM high availability configuration and manage failover behavior across active/standby and active/active BIG-IP pairs
Onboard and migrate workloads into F5 XC, including App Connect, Network Connect, and CE (Customer Edge) deployments
Deploy and deliver XC ADN/WAAP in SaaS Mode with advanced add-ons including API Management, Bot Defense Standard (Shape), Client-Side Defense, and Traffic Insights
Manage origins serviced by existing CE (Customer Edge) infrastructure and deliver XC WAAP and LB services on top of CE deployments
Administer XC Bot Defense, DDoS Protection, API Discovery, and advanced Service Policy configurations
Troubleshoot XC service mesh, load balancing, origin pool configurations, and CE connectivity
Deploy and manage NGINX App Protect WAF and DoS modules in customer environments
Configure NGINX as a reverse proxy, API gateway, and load balancer in both traditional and containerized (Kubernetes) environments
Maintain and tune NGINX App Protect policies, signature sets, and custom attack signatures
Support NGINX Plus deployments including health monitoring and HA configurations (active-active / active-passive
Integrate NGINX into CI/CD pipelines and GitOps workflows where applicable
Qualification
Required
• Minimum 5 years of developing and maintaining F5 BIG-IP and ASM/AWAF policies
• 2-3 years of hands-on experience with F5 APM architecture, deployment and optimization
• 2-3 years of hands-on experience with F5 Distributed Cloud (XC) WAF and/or NGINX App Protect
• Legally authorized to work in the United States
• Advanced understanding of admin partitions, route domains, AFM, and BIG-IP security hardening
• Extensive knowledge of HTTP/S, SSL/TLS, and traffic inspection using Fiddler, HttpWatch, tcpdump, and Wireshark
• Strong Linux administration and scripting skills (Bash; advanced grep, cut, sort, sed/awk)
• Expert F5 TMSH CLI skills
• Proficiency with TCL, iRules, and regular expressions
• Working knowledge of DNS and F5's GTM/DNS modules
• Familiarity with hypervisors including F5 vCMP and deployment on major cloud providers
Preferred
• F5 Certified Technology Specialist (CTS) 301A&B, 302, 303 and 304
• F5 Certified Solution Expert (CSE) 401
• Experience with F5 XC API Security for discovery, schema enforcement, and shadow API detection
• Experience with penetration testing tools such as Burp Suite and Qualys WAS
• Familiarity with NGINX Ingress Controller and Kubernetes-native deployments
• Scripting proficiency in Bash, Python, Perl, or TCL for automation and tooling
• Experience with Ansible or Terraform for F5 infrastructure-as-code automation
• Network design and operations experience in ICPs such as AWS, Azure, GCP, and IOC
• Familiarity with containerized environments, microservices, and service mesh concepts
• Experience with F5 XC Multi-Cloud Networking with App Connect and Network Connect
Benefits
Flexibility and a culture where your teammates are genuine, care for you, and love what they do.
You will receive internal and external training to reach expert-level proficiency across all platforms.
Additional compensation during on-call periods.
Company
WorldTech IT, LLC
Professional services and sales for F5 and NGINX solutions.
Funding
Current Stage
Early StageLeadership Team
Austin Geraci
Chief Technology Officer - CTO
Recent News
2025-07-24
Company data provided by crunchbase