Back to Careers

F5 Network Engineer

Location: 
Carrollton
Date Posted: 
08/12/2019
Employment Type: 
Direct Hire
Job ID: 
10270
Description: 

TPA has a Dallas Texas client that is looking for a F5 Network Engineer.  The ideal candidate would be an F5 Subject Matter Expert, along with Sr Network Engineer (data/connectivity) skills.

Desired F5 Experience:

  • Experience with iRules creation
  • ASM experience
  • Extensive F5 experience – not just someone who has worked with it, but someone who has helped build it out

 

 F5-CA certification (or similar), or a CCNP is stronger preferred

 

 

Job Purpose:

 

Responsible for overseeing the overall design and health of the Load Balancer environment, mentoring junior engineers, reviewing all F5 implementation plans, managing installation projects, and resolving complex production issues. This role will perform design, implementation, and maintenance of load balancer/application delivery controller infrastructure using F5 Big-IP LTM/GTM/ASM and Kemp Load Balancers.

Responsibilities

Essential Duties:

  • Implementation and maintenance of security devices.
  • Mentor less experienced engineers on the team.
  • Provide and maintain configuration standards for the infrastructure.
  • Administer and support F5 appliances throughout the organization.
  • Monitor security bulletins and mitigate as needed.
  • Recommend, design, implement, and support application delivery infrastructure integration into business solutions, while meeting the business’ goals and objectives. This includes supporting documentation and diagrams detailing the specific infrastructure.
  • Analyze network topologies and traffic/capacity requirements.
  • Work on project/tasks assigned to networking team.
  • Develop detailed project plans and implementation diagrams.
  • Assist in driving the development, testing and implementation of technology solutions.
  • Install, configure, and manage traffic management systems supporting Public Key Infrastructure (PKI), Domain Name System (DNS), load balancing and Multi-Factor Authentication (MFA).
  • Translate functional business requirements into a technical solution that conforms to global design standards.
  • Research developments in assigned technology disciplines, determining business requirements, proposing changes, and developing migration and implementation plans as needed.
  • Install, test, maintain and upgrade network operating systems software and hardware in accordance with release management requirements.
  • Provide input into the security technology plan for the organization and ensuring that plans for their assigned technology discipline integrate effectively with other aspects of the technical infrastructure.
  • Support large scale infrastructure migrations and baseline reviews.
  • Support changes in strict accordance with the change management policies, including developing design and implementation plans for approved changes.
  • Gain knowledge and experience in other network security technologies.
  • Propose appropriate changes to standards, policies, and procedures based on emerging business/technology trends and operational challenges with the existing guidelines utilizing performance metrics and operational SLAs as justification.
  • Conduct presentations via training sessions, or 1-to-1 training to network engineers on designs that are being implemented.
  • Configure and support application security policies via the F5 ASM and APM security modules.

Knowledge, Skills, and Abilities:

  • Must be able to work unsupervised, be well organized, and able to multi-task.
  • Ability to work in a fast paced environment.
  • Ability to troubleshoot and resolve issues in a high-pressure environment.
  • Design and implementation experience with F5 BigIP LTM and GTM appliances and virtual appliances.
  • Excellent understanding of LTM configuration (VIPs, Persistence, SNAT, SSL, etc.).
  • Experience writing and troubleshooting iRules.
  • Ability to troubleshoot connection issues and services on F5 appliances.
  • F5 OS upgrades, backup and restores.
  • Managing F5 appliances in HA configurations.
  • Experience working in 24 x 7 centers with complex, high transaction, high availability environments.
  • Knowledge of troubleshooting tools, such as: tcpdump, ssldump, openssl, QKView, logs, curl, Wireshark, Fiddler, Postman.
  • Knowledge of http protocol versions, headers, methods, and status codes.
  • Task/project oriented.
  • Strong oral and written communication skills; ability to communicate technical concepts to non-technical Associates.
  • Ability to analyze and troubleshoot network traffic from layer 1 through 7 with utilities including SSH, nslookup, tcpdump, ssldump, cURL, HTTP GET and Open SSL.
  • Ability to effectively articulate the implications and impact that proposed .architectural changes will have on the business (to technical and non-technical audiences).
  • Availability during evenings and weekends for P1 issues and scheduled change controls.
  • Availability to provide 24x7 on-call support as scheduled.
  • Availability for occasional travel to remote offices/data centers.
  • Knowledge of network monitoring solutions.
  • Knowledge of application load balancing strategies and advanced techniques for application delivery
  • Excellent troubleshooting skills and an ability to identify root causes of issues and provide solutions.
  • Ability to team within and outside of the operations group.
  • Strong interpersonal and presentation skills, both verbal and written, with the capability to articulate and educate others about complex technology with business acumen.

Qualifications

Minimum Qualifications:

  • High School Diploma
  • 5 years’ networking experience with F5 Hardware/Software.
  • F5 Certified Big-IP Administrator (F5-CA).
  • Experience designing, implementing, and supporting environments working on Global and Local load balancing, ASM and APM modules, TMOS code upgrades, and deployment of new load balancing builds for F5 or Kemp load balancing technologies.
  • Experience with F5 Traffic Management Operating system, CLI commands, and Route Domains.
  • Experience requesting and installing PKI server certificates, configuring PKI Certificate Authority (CA) trust bundles, Certificate Revocation List (CRL) and Online Certificate Revocation List (OCSP).
  • Experience with OSPF and BGP routing protocols.
  • Experience with Internet based data transmission.

Preferred Qualifications:

  • Bachelor’s degree
  • Experience working within Federal or Public Regulatory Agency guidelines such as PCI-DSS, FISMA, FedRAMP or HIPAA.
  • Experience with configuration, deployment, and administration of F5 TMOS versions 11.x or higher.
  • F5 Certifications such as: F5-CA, F5-CTS LTM, F5-CTS GTM, or F5-CTS APM.
  • 5 Years Cisco Enterprise Level Network experience.
  • Experience creating and maintaining technical documentation.
  • Experience with network design, install, configuration, and troubleshooting.
  • Experience with routers, switches, firewalls.
  • Experience with RIP, MPLS, RSVP, QoS, and STP.