WAF Solution Architect

WAF Solution Architect – 6-month contract – Berkshire / Hybrid – £550 a day (Outside IR35)
WAF / Azure DevOps / CI/CD / Web threats / API / Python
Key skills and capabilities:

• Understanding of the use and configuration of a WAF Platform
• Knowledge and experience of using APIs
• Scripting knowledge of Python & other scripting tools
• Exposure to Network reporting tools
• Understanding of operational metrics and their use to measure performance
• Understanding of the Cyber threat environment in the context of Website and APIs
• Solid understanding of network protocols, HTTP/S, and web technologies.
• In-depth knowledge of web application security principles and threat landscapes.
• Familiarity with security and API frameworks, best practices, and standards
• Hands-on experience in configuring WAF policies, rules, and signatures to mitigate web threats like SQL injection, XSS, and DDoS attacks.
• Proficiency in CI/CD tools, particularly Azure DevOps, for automating security testing and policy enforcement.
• Experience in integrating security measures into CI/CD pipelines
• Experience with Terraform for defining, deploying, and managing WAF infrastructure.
• Capability to develop and maintain Terraform modules for consistent and automated WAF deployment across environments.
• Proficiency in securing APIs with WAF solutions to protect against common API vulnerabilities such as injection attacks, broken authentication, and data exposure.
• Scripting skills in languages such as Python and YAML scripting for automating WAF deployment, configuration, and testing.
• Understanding of operational metrics and their use to measure performance.
• Supporting security audits by providing necessary documentation and reports related to WAF deployments and policies.
• Commitment to staying updated with the latest trends and technologies in web application security.
• Proactively seeking opportunities to enhance WAF solutions through continuous improvement and adoption of advanced practices.

The ideal candidate will own driving the development of the Cyber WAF platform to meet the operational and security requirements of the application and content development team.  They will lead the adoption of CI/CD capabilities whilst ensuring the security and usability requirements are met in a balanced way.