Job Purpose:

• Involve in the migration of applications and APIs to FortiWEB.

• Involve in the implementation of FortiWEB solution and applications migration.

• Support application security enhancement, WAF optimization, and application onboarding.

• Provide FortiADC expertise for application delivery and load-balancing requirements when required.

• Involve in FortiSandbox implementation and integration for payload and file inspection.

• Coordinate with application owners, network teams, cybersecurity teams, and infrastructure teams.

• Operate day-to-day tasks for the WAF solution.

Job Description:

• Assess the existing WAF architecture, policies, application coverage, traffic, capacity, and integrations.

• Identify security, performance, scalability, resiliency, and availability gaps.

• Participate in design workshops and prepare HLD, LLD, migration plans, runbooks, and functional test plans.

• Deploy and configure the FortiWeb platform.

• Migrate applications and APIs to FortiWeb.

• Convert existing WAF policies to FortiWeb best-practice equivalent policies.

• Install and bind SSL certificates.

• Configure security profiles for existing and newly onboarded applications.

• Implement payload validation, multi-file inspection, threat detection, and advanced attack protection.

• Integrate FortiWeb with FortiSandbox for payload and file inspection.

• Prepare application cutover and rollback procedures.

• Execute application migrations during approved maintenance windows.

• Coordinate application testing and validation with application owners.

• Tune WAF policies to improve protection, performance, and reduce false positives.

• Validate throughput, bandwidth handling, concurrent connections, and application availability.

• Troubleshoot WAF, SSL, application publishing, security-policy, and performance issues.

• Provide post-migration support and operational monitoring.

• Maintain application migration records, implementation documents, test results, and validation reports.

• Deliver knowledge-transfer sessions to the customer’s technical teams.

• Operate day-to-day tasks for the WAF solution.

Job Qualifications:

• Bachelor’s degree in Computer Science, Network Engineering, Cybersecurity, or a related field.

• 2 or 3+ years of experience.

• Strong hands-on experience with FortiWeb deployment, migration, administration, and troubleshooting.

• Strong hands-on experience with FortiADC deployment and application load balancing.

• FortiSandbox experience is a huge advantage.

• Experience migrating applications and security policies from another WAF platform.

• Strong knowledge of web application security, APIs, SSL/TLS, HTTP/HTTPS, and OWASP Top 10.

• Experience with WAF policy tuning, application onboarding, payload validation, and file inspection.

• Strong knowledge of networking and cybersecurity principles.

• Experience preparing HLD, LLD, migration plans, test plans, and implementation documents.

• Relevant Fortinet certifications are preferred.

• Good communication, documentation, and troubleshooting skills.

• Experience in monitoring and operating day-to-day tasks in WAF and Load Balancing solutions