Azure Web Application Firewall & Cyber Security Tools Engineer

Vsolutions Technologies is seeking an Azure Web Application Firewall & Cyber Security Tools Engineer to support their Technical Security Solutions Operations service. This role involves administering and enhancing WAF solutions, managing security tools, and ensuring the protection of web applications against various threats.

Responsibilities:

• Administer and maintain Azure Front Door WAF and Azure Application Gateway WAF policies, rulesets, exclusions, and custom signatures to protect web applications against OWASP Top 10 and emerging threats
• Coordinate with application teams to design protection profiles per app and/or per path, align rules with business requirements, and ensure safe rollouts
• Monitor WAF efficacy, coverage, and performance; analyze events and false positives; tune policies to reduce friction while maintaining strong protection
• Build and maintain Terraform modules for Azure Front Door and Application Gateway WAF resources, ensuring version-controlled
• Operate CI/CD pipelines for GitHub-based deployments, including branching strategies, environment promotion, and rollback procedures
• Document operational standards, deployment runbooks, troubleshooting guides, and best practices
• Provide operational support for additional security tools, including Proofpoint, Digital Guardian, Windows Certificate Services, Silverfort, Calico, F5 ASM, Rapid7 Nexpose, and Qualys
• Assist in troubleshooting, performance tuning, and implementing updates or enhancements across supported platforms

Requirements:

• Hands-on administration of Azure Front Door WAF and Azure Application Gateway WAF (policy authoring, tuning, exclusions, custom rules)
• Terraform expertise for Azure resources and GitHub deployments
• Proven ability to use code to configure Azure firewalls/WAFs
• Scripting skills to automate configuration, validations, and operational tasks (PowerShell, Bash, or Python)
• Strong understanding of web application security (OWASP Top 10, bot protection, API protection, TLS, header-based controls) and secure DevOps practices
• 5+ years in application security, cloud security, or network security engineering roles
• Demonstrated success operating Azure WAF(Azure Front Door and/or Application Gateway)
• Track record of building infrastructure-as-code for security controls and running Git-based deployment pipelines
• Excellent documentation, communication, and stakeholder collaboration skills
• Ability to manage shifting priorities and deliver secure, reliable outcomes in a dynamic environment
• Experience with F5 ASM Web application Firewall and ASM policy tuning
• Exposure to Calico, Proofpoint email security, Netskope, Digital Guardian, Silverfort, and vulnerability management tools
• PKI fundamentals and certificate lifecycle management (Windows Certificate Services, CA hierarchies)
• Agile delivery experience (scrum/kanban, backlog grooming, story writing)
• Practical DevSecOps experience integrating security controls into CI/CD, policy-as-code, and automated testing