Cyber SDC- WAF & Internet Ingress & Edge- Manager
EY · Phoenix, AZ · 4 wk ago
Hybrid$145k–$266k/yrFull-time
We need to output only HTML fragment, no html/body tags, no markdown fences. Use for section headings). So we will have
. Should we keep subheadings? Probably just list each sentence as a bullet. But we need to preserve all substantive information; we can break into separate items for each distinct responsibility.
We'll need to decide grouping: Could group under each subheading as separate but we can just list each sentence.
Better to keep each bullet as a distinct responsibility sentence.
Let's extract:
Service Leadership and Ownership:
- Own end-to-end operational delivery for WAF and Internet Ingress & Edge services.
- Establish service priorities, operating rhythms, ownership boundaries, escalation paths, and performance expectations.
- Maintain alignment between WAF protection, application delivery, ingress, DNS, certificates, load balancing, and edge security operations.
- Represent the service tower in customer reviews, governance forums, architecture discussions, and operational planning activities.
- Ensure services remain secure, available, supportable, auditable, and aligned with business needs.
People and Resource Management:
- Lead, coach, and develop WAF and Internet Ingress & Edge engineers across senior and staff levels.
- Manage staffing, work allocation, coverage schedules, on-call rotations, skills development, and succession planning.
- Promote cross-training between WAF, load balancing, cloud networking, DNS, certificates, and automation disciplines.
- Confirm team members follow standard work, change controls, documentation expectations, and operational procedures.
- Identify capacity or capability gaps and coordinate staffing, vendor, or specialist support as needed.
Operational Governance and Service Performance:
- Own service metrics, SLA and KPI performance, operational reporting, risk tracking, backlog health, and improvement actions.
- Lead service reviews, problem management, root cause follow-through, and corrective action governance.
- Maintain clear intake, prioritization, approval, escalation, and lifecycle management processes.
- Ensure customer dependencies, approvals, and handoffs are visible and appropriately managed.
- Drive consistent documentation, runbooks, inventories, support records, and operating procedures.
Incident, Escalation, and Resilience Management:
- Serve as an operational escalation point for significant availability, security, performance, or application delivery issues.
- Coordinate cross-team response across WAF, ingress, cloud, firewall, network, application, and vendor resources.
- Provide or support incident command when major incidents require structured coordination and stakeholder communication.
- Ensure recovery actions, communications, technical decisions, and follow-up items are documented and completed.
- Use incident and problem trends to improve resilience, monitoring, runbooks, and support readiness.
Platform Lifecycle and Continuous Improvement:
- Own lifecycle planning across WAF, CDN, bot and DDoS capabilities, AWS ALB/NLB, AVI, Azure ingress, DNS, certificates, and associated automation.
- Guide platform upgrades, maintenance, capacity planning, modernization, decommissioning, and vendor coordination.
- Drive Infrastructure-as-Code, automation, configuration standardization, monitoring, and configuration drift remediation.
- Identify opportunities to simplify onboarding, reduce manual effort, improve observability, and increase operational consistency.
- Translate lessons learned into standard work and measurable service improvements.
Application Onboarding and Cross-Team Coordination:
- Govern application onboarding, protection, service exposure, traffic management, and operational acceptance processes.
- Ensure ownership, dependencies, DNS, certificates, routing, monitoring, security, support, and rollback requirements are understood before production changes.
- Coordinate with application owners and dependent teams to minimize disruption and resolve blockers.
- Maintain clear accountability for business decisions, technical approvals, and operational responsibilities.
- Support predictable handoff from implementation into steady-state operations.
Now Qualifications section: after responsibilities we have "Qualifications" heading. We'll use
for section headings: About the role, Responsibilities, Requirements, Qualifications, Skills, Benefits, Pay, Schedule. Include sections only if posting has real specific content. We need to parse the posting. First, location: "Location: Anywhere in Country". Not needed as heading. We have introductory paragraphs: "At EY, we’re all in to shape your future with confidence..." etc. That's prose; we can put in
. Then "Practice Description" paragraph: about business-critical applications etc. That's prose. Then "Job Summary" paragraph: about seeking experienced WAF & Internet Ingress and Edge Manager... That's prose. Then "Role positioning:" paragraph: about service ownership and people leadership. That's prose. Then "Key Responsibilities" heading (but we need to use
for section headings). So we will have Responsibilities
and then list items.
We need to extract bullet points under Key Responsibilities. The posting lists sections: Service Leadership and Ownership, People and Resource Management, Operational Governance and Service Performance, Incident, Escalation, and Resilience Management, Platform Lifecycle and Continuous Improvement, Application Onboarding and Cross-Team Coordination. Each has multiple sentences. We need to turn each bullet into
Qualifications
and list bullet points. Qualifications bullet list: - Bachelor's degree in Information Technology, Computer Science, Engineering, Cybersecurity, or equivalent experience preferred. - 8+ years of experience in WAF, application delivery, load balancing, cloud networking, edge security, infrastructure operations, or related technical disciplines. - 3+ years of experience leading technical teams, service delivery, operations, or platform management. - Experience managing business-critical production services using formal incident, change, problem, and lifecycle management practices. - Working knowledge of WAF policy operations, CDN, bot and DDoS controls, AWS ALB/NLB, AVI, Azure ingress, DNS, SSL/TLS certificates, and Infrastructure as Code. - Strong customer engagement, leadership, communication, risk management, troubleshooting, and decision-making skills. Preferred Qualifications: we could include under Qualifications or separate? The instruction says use headings for sections like Qualifications, Skills, Benefits, Pay, Schedule. Preferred Qualifications could be part of Qualifications or maybe Skills. But we have a separate "Technical And Leadership Skills" section later. That could map to Skills heading. We have "Preferred Qualifications" bullet list: - Experience leading integrated WAF and application delivery teams in enterprise or regulated environments. - Experience with Cloudflare, Akamai, F5 Distributed Cloud, Imperva, AWS WAF, Azure WAF/Front Door, or comparable platforms. - Experience with Terraform, Git-based workflows, APIs, monitoring, SIEM integration, and operational automation. - Experience managing on-call models and coordinating major incident response. - Relevant certifications such as CISSP, CCSP, AWS Solutions Architect, AWS Advanced Networking, Azure Network Engineer Associate, ITIL, or comparable credentials. Then "Technical And Leadership Skills" heading with sub-bullets grouped: Service Leadership Team and capacity management, Stakeholder and vendor leadership, Cross-tower coordination, Coaching and succession planning, Decision-making under pressure; then WAF & Edge Platforms list; then Operations & Government list. We could map that toSkills
and list all those as bullet points. Now Benefits: The posting includes "What We Offer You" paragraph about compensation and benefits, includes base salary range, total rewards package, flexible vacation policy, hybrid model, etc. So we need Benefits and Pay sections. We have Pay: base salary range for US: $144,900 to $265,800; for NYC Metro, Washington State, California (excluding Sacramento): $173,900 to $302,100. Also mention individual salaries determined by factors. We have Benefits: medical and dental coverage, pension and 401(k) plans, wide range of paid time off options, flexible vacation policy, designated EY Paid Holidays, Winter/Summer breaks, Personal/Family Care, other leaves. Also mention hybrid model expectation: 40-60% in person. We could put Pay section with those details, Benefits section with those details, and maybe Schedule section? The posting mentions flexible vacation policy, hybrid model expectation, but not explicit schedule like full-time/part-time. Could we create Schedule section? The instruction says include Schedule only if posting actually states them. It mentions "Join us in our team-led and leader-enabled hybrid model. Our expectation is for most people in external, client serving roles to work together in person 40-60% of the time over the course of an engagement, project or year." That's schedule-ish. Also "Under our flexible vacation policy, you’ll decide how much vacation time you need based on your own personal circumstances." That's also schedule/benefits. Could treat as Schedule: hybrid expectation and flexible vacation. But we already have Benefits covering vacation. Might be okay to have Schedule section with hybrid work expectation. But we need to avoid filler like "not specified". We have specific content. Thus we will have sections: About the role (maybe combine intro paragraphs), Responsibilities, Qualifications, Skills, Benefits, Pay, Schedule. We need to ensure we don't repeat job title as heading. We'll output HTML fragment withheadings and
for prose,
- for lists.
We need to preserve all substantive information; not invent or summarize away detail. So we need to include all details from the posting.
Let's gather prose sections:
Intro: "Location: Anywhere in Country At EY, we’re all in to shape your future with confidence. We’ll help you succeed in a globally connected powerhouse of diverse teams and take your career wherever you want it to go. Join EY and help to build a better working world."
We can combine into a paragraph.
Then "Practice Description Business-critical applications depend on integrated application protection and application delivery services. Web Application Firewall, bot and DDoS protection, content delivery, load balancing, traffic management, DNS integration, certificate services, and cloud ingress platforms must operate as a coordinated service to maintain security, availability, performance, and user experience. The WAF & Internet Ingress and Edge Manager leads the teams responsible for these capabilities. The role provides service ownership, operational governance, resource leadership, stakeholder coordination, escalation management, lifecycle planning, and continuous improvement across WAF and ingress platforms."
Then "Job Summary We are seeking an experienced WAF & Internet Ingress and Edge Manager to lead operational service delivery for enterprise application protection, load balancing, ingress, traffic management, and edge connectivity services. The role is accountable for service performance, operational resilience, team effectiveness, customer engagement, risk management, application onboarding governance, incident escalation, platform lifecycle management, automation adoption, and cross-team execution. The manager works across application, cloud, networking, firewall, security, vendor, and operations teams to maintain secure, reliable, and supportable services."
Then "Role positioning: This is a service ownership and people leadership role. The manager is not expected to perform every platform configuration personally, but must have sufficient technical depth to guide engineers, challenge designs, direct incident response, manage risk, and make informed operational decisions."
We could combine these into a few
elements. Now after responsibilities, we have Qualifications, Preferred Qualifications, Technical And Leadership Skills, What We Offer You (benefits/pay), etc. We need to avoid duplication: The "Technical And Leadership Skills" includes some items that may overlap with Qualifications but we keep as is. Now Benefits: from "What We Offer You": "At EY, we’ll develop you with future-focused skills and equip you with world-class experiences. We’ll empower you in a flexible environment, and fuel you and your extraordinary talents in a diverse and inclusive culture of globally connected teams. Learn more. We offer a comprehensive compensation and benefits package where you’ll be rewarded based on your performance and recognized for the value you bring to the business." Then base salary ranges. Then "In addition, our Total Rewards package includes medical and dental coverage, pension and 401(k) plans, and a wide range of paid time off options.Join us in our team-led and leader-enabled hybrid model. Our expectation is for most people in external, client serving roles to work together in person 40-60% of the time over the course of an engagement, project or year.Under our