Senior Network Engineer - Application Delivery & Security

About the role

Lead the rollout and ongoing operation of Teraswitch’s F5 application delivery and security platform across 25+ points of presence. Own the F5 fleet end-to-end: architecture, standardization, device onboarding at scale, day-to-day operations, and automation in a multi-tenant, service-provider environment.

Responsibilities

• Drive the global deployment of the F5 platform across 25+ points of presence, establishing standardized, repeatable designs for application delivery and security.
• Collaborate with Network and Software Engineering teams to build and improve customer self-service experiences for F5-delivered services.
• Architect and operate global server load balancing with BIG-IP DNS (GTM), including anycast, wide IPs, topology/geolocation-based steering, and health-driven failover across POPs.
• Design, deploy, and tune L4–L7 load balancing and SSL/TLS termination (LTM), including traffic profiles, certificate management, and iRules for advanced traffic handling.
• Build and operate WAF (F5 Advanced WAF / ASM) and DDoS mitigation (AFM and behavioral L3–L7 defenses) to protect multi-tenant customer workloads.
• Integrate F5 with the routing layer via BGP—route health injection and anycast VIP advertisement into the global backbone.
• Onboard, provision, and manage the F5 fleet at scale using custom provisioning, control, and automation (iControl REST, Ansible, Python).
• Improve reliability through observability (F5 Telemetry Streaming into metrics and logging stack), alerting, incident response, and postmortems.
• Participate in an on-call rotation supporting critical production systems.

Requirements

• Deep, hands-on experience designing and operating F5 BIG-IP in production, including LTM (L4–L7 load balancing and SSL/TLS termination) and iRules.
• Strong applied networking fundamentals across the L2–L7 path—TCP/IP, DNS, HTTP/HTTPS, and TLS.
• Working knowledge of BGP and dynamic routing, and how they integrate with application delivery (e.g., route health injection, anycast).
• F5 automation experience (iControl REST and/or declarative config via AS3 and Declarative Onboarding).
• Configuration management (Ansible) and/or scripting experience (Python, bash).
• Comfortable working in a fast-paced, results-oriented environment.
• Committed to operational best practices and security by design.
• A balance of AI-assisted development and actual understanding of the technologies in use.

Preferred Skills

• F5 experience in a service or hosting provider environment—multi-tenant design, automation-first operations, and scalable, secure delivery.
• Global server load balancing at scale with BIG-IP DNS / GTM.
• WAF policy design and tuning, including bot defense, with F5 Advanced WAF / ASM.
• DDoS mitigation across L3–L7 (AFM, DDoS Hybrid Defender, behavioral DoS).
• Multi-tenant isolation using vCMP, route domains, and partitions.
• Fleet management and centralized operations of F5 Systems.
• Infrastructure-as-code and GitOps for network/ADC configuration (Terraform F5 provider, CI/CD pipelines).
• Operating and upgrading F5 platforms at scale (TMOS lifecycle; rSeries / VELOS / F5OS or BIG-IP Next a plus).
• NGINX and/or F5 Distributed Cloud (XC) experience.
• F5 certification (e.g., F5 Certified Technology Specialist / CTS, or higher).
• Demonstrated ability to design and operate automation-first infrastructure at scale.

Location

Preference given to full-time onsite candidates in Pittsburgh, PA, followed by hybrid candidates.

Benefits

• Health, Dental, and Vision Insurance
• 401(k) with company profit sharing
• PTO and 11 Company Paid Holidays