Designation / Job title : Cyber Security Architect - ******
Primary or Mandatory skills :-
F5 BIG-IP platforms: iSeries, rSeries, Velos, Viprion (hardware & virtualised).
F5 Modules: LTM, DNS/GTM, ASM (AWAF), SSLO, CGNAT, AFM (DDoS), PEM, BIG-IQ CM.
Enterprise routing and switching: OSPF, BGP, STP, VLAN, LACP
Good to have skills :
IPSec VPN design and implementation.
Packet capture and analysis: tcpdump, Wireshark.
Automation & Infrastructure-as-Code: Terraform, AS3, iRules.
Authentication services: TACACS+, RADIUS.
Detailed Job description : -
We are seeking a highly skilled and experienced Cyber Security Architect with deep expertise in F5 technologies, enterprise network security, and application delivery.
The ideal candidate brings 10+ years of hands‐on experience designing, implementing, and managing complex network and security infrastructures — ideally within ISP, enterprise, or professional services environments across the APAC region.
Key Responsibilities
Lead end-to-end design, implementation, and delivery of F5-based network and security solutions (LTM, DNS/GTM, ASM/AWAF, SSLO, CGNAT, AFM, PEM).
Architect and implement DNS solutions including caching resolvers, validating resolvers, and authoritative DNS servers with a focus on performance, scalability, and fault tolerance.
Design and enforce DNS and application security controls to protect against DDoS attacks, WAF threats, and DNS-based exploits.
Produce and maintain comprehensive technical documentation: High-Level Designs (HLD), Low-Level Designs (LLD), security design documents, operational runbooks, and SOPs.
Collaborate with network, infrastructure, platform,



and security teams to deliver cohesive and resilient solutions.
Drive high availability and failover architecture design, ensuring zero-downtime resilience.
Provide expert troubleshooting, optimization, and post-implementation support across enterprise and ISP environments.
Lead stakeholder and vendor coordination, acting as the primary liaison between clients, vendors, and internal teams.
Define skilled services scoping requirements and engage directly with customers to understand and address their technical needs.
Champion automation practices using Terraform, AS3/iRules, and related tooling.
Implement security hardening, RBAC, secure logging, and compliance controls across F5 platforms.
Required Skills & Experience
Experience
10+ years in network infrastructure, security architecture, or application delivery roles.
Proven track record delivering F5 professional services to enterprise and/or ISP clients.
Demonstrated experience with large-scale migrations (e.g., DNS migrations, CGNAT deployments, WAF rollouts).
Regional project implementation experience across APAC is highly desirable.
Technical Expertise required for this role:
F5 BIG-IP platforms: iSeries, rSeries, Velos, Viprion (hardware & virtualised).
F5 Modules: LTM, DNS/GTM, ASM (AWAF), SSLO, CGNAT, AFM (DDoS), PEM, BIG-IQ CM.
Enterprise routing and switching: OSPF, BGP, STP, VLAN, LACP.
IPSec VPN design and implementation.
Packet capture nd analysis: tcpdump, Wireshark.
Automation & Infrastructure-as-Code: Terraform, AS3, iRules.
Authentication services: TACACS+, RADIUS.
Virtualisation: VMware and related virtualisation technologies.
#J-*****-Ljbffr

📌 Cyber Security Architect - 262117 (New South Wales)
🏢 Tech Mahindra
📍 New South Wales