Senior Cybersecurity Engineer (F5)

ECS is seeking a Senior Cybersecurity Engineer to work in a hybrid capacity; at home and onsite at our Fort Meade, MD. customer site.   ECS is a leading Cyber Security company that provides innovative solutions to our clients. We are seeking an experienced F5 Network Security Engineer with specialized expertise in F5 SSL Orchestrator (SSLO) to join our team. This role will be responsible for implementing, managing, and optimizing TLS decryption and re-encryption solutions to enable comprehensive security inspection of encrypted network traffic.   Primary responsibilities include:   SSL Orchestrator (SSLO) Configuration Development and Maintenance

• Design, deploy, configure, and maintain F5 SSL Orchestrator solutions for TLS/SSL decryption and re-encryption
• Create and manage SSLO security policies, service chains, and traffic classification rules
• Develop and test new configurations to add capabilities and optimize SSLO performance and throughput for high-volume enterprise environments

Security Integration

• Integrate SSLO with existing routing, switching and security inspection devices
• Configure and manage service chains for optimal traffic inspection
• Collaborate with security operations teams to ensure visibility into decrypted traffic

Network Security Operations

• Develop and maintain iRules to support custom traffic handling and logging requirements
• Perform troubleshooting of complex TLS/SSL issues including cipher compatibility and protocol negotiations
• Monitor system health, performance metrics, and capacity planning

Documentation & Compliance

• Create and maintain technical documentation, network diagrams, test reports and standard operating procedures
• Support security compliance initiatives and audit requirements
• Develop playbooks for common operational tasks and incident response

Qualifications

• 5+ years of experience in a cybersecurity environment. 
• Bachelor's degree in Computer Science or a related field.
• Security+ or equivalent DoD 8570 baseline certification.
• Must have an existing and active DOD Secret security clearance and be TS/SCI eligible.
• Demonstrated experience with PKI concepts, certificate management, and TLS/SSL protocols
• Strong understanding of TLS 1.2/1.3 protocols, cipher suites, and cryptographic concepts
• Experience with certificate authorities, certificate signing requests (CSRs), and certificate chains
• Proficiency with F5 BIG-IP administration including LTM, APM, and AFM modules
• Knowledge of iRules, iApps, and F5 automation capabilities
• Certifications: F5 Certified Administrator (F5-CA) or higher