Senior Network Security Engineer
Key Skills for This Role
Full Job Posting
Qualifications
- Bachelor's degree in Computer Science, Information Security, or a related field.
- 8+ years' experience in application delivery, WAF, and content security engineering.
- Primary, hands-on expertise with Cloudflare (Domains, WAF Rules, Rate Limiting Rules, SSO Applications, Custom Hostnames, Workers, Hostname Lists, IP Lists) and OPSWAT file scanning platforms.
- Secondary working knowledge of Palo Alto and Fortigate firewalls, and F5 LTM/WAF and GTM platforms.
- Strong understanding of DNS, SSL/TLS, Layer 4–7 traffic management, and file-based threat triage.
- Certifications preferred: Cloudflare Certified (Solutions Associate/Engineer), OPSWAT certification, Palo Alto PCNSA/PCNSE, Fortinet NSE, F5 Certified BIG-IP Administrator.
- Technical Skills Matrix
- Primary Expertise — Cloudflare
- Domains — onboarding, DNS management, and domain lifecycle across the Cloudflare account.
- WAF Rules — minimum of 3 WAF rules configured and maintained per domain.
- Rate Limiting Rules — configuring and tuning rate limiting policies to mitigate abuse and DDoS-style traffic.
- SSO Applications — configuring SSO/Access applications for secure authentication.
- Custom Hostnames — managing custom hostname (SaaS) configurations.
- Workers — developing and deploying edge Workers for custom logic and security automation.
- Hostname Lists — creating and maintaining hostname lists for policy application.
- IP Lists — creating and maintaining IP lists for allow/block/rate-limit policies.
- Domains — onboarding, DNS management, and domain lifecycle across the Cloudflare account. WAF Rules — minimum of 3 WAF rules configured and maintained per domain. Rate Limiting Rules — configuring and tuning rate limiting policies to mitigate abuse and DDoS-style traffic. SSO Applications — configuring SSO/Access applications for secure authentication. Custom Hostnames — managing custom hostname (SaaS) configurations. Workers — developing and deploying edge Workers for custom logic and security
Responsibilities
- Manage the Cloudflare environment across all onboarded domains, including DNS, WAF rules, rate limiting rules, custom hostnames, hostname lists, and IP lists.
- Own domain onboarding and lifecycle management within Cloudflare, ensuring a consistent security baseline and WAF rule set is applied to every domain.
- Configure and maintain Cloudflare SSO Applications (Zero Trust/Access) for secure application authentication.
- Develop, deploy, and maintain Cloudflare Workers for custom edge logic, traffic manipulation, and security automation.
- Build and maintain Cloudflare hostname lists and IP lists to support WAF, rate limiting, and access-control policies.
- Manage the OPSWAT file scanning platform for Data-in-Transit and Data-at-Rest content inspection; triage, analyze, and action file scan results, including false-positive review.
- Tune WAF rules and policies across Cloudflare and supporting platforms to reduce false positives while maintaining strong protection coverage.
- Provide administration and support for Palo Alto firewalls, including policy and rule management.
- Provide administration and support for Fortigate firewalls, including policy and rule management.
- Support F5 LTM/WAF administration: virtual servers, pools, health monitors, and WAF policy management.
- Support F5 GTM for global DNS-based load balancing, site failover, and health monitoring.
- Monitor Cloudflare analytics and logs — WAF events, rate-limiting triggers, and Worker performance — driving root-cause analysis for anomalies.
- Maintain accurate documentation of domain configurations, WAF rule sets, hostname/IP lists, SSO application configs, and secondary-platform settings.
- Coordinate with infrastructure and security teams on change management for major Cloudflare and firewall/WAF configuration changes.
About malomatia
Qatar-based technology services provider driving digital transformation and innovation.
Visit company websiteJobs and hiring trendsApply for this job in 1 click
Skip the repetitive application forms
Install the Base Career Chrome Extension and autofill job applications across major job boards with your profile.
Trusted by over 500,000 job seekers on Base Career
More from this employer
More jobs at malomatia
Consultant -Data Portal
, QAT
The employer is seeking an experienced full-stack web developer to build and maintain a data dissemination portal. The work spans React front-end development, API and semantic-layer integration, architecture, and collabo
AI Security SME
, QAT
The employer seeks an AI Security SME to lead security architecture, governance, and assurance for ML, LLM, and agentic platforms. Candidates need extensive cybersecurity and AI/ML security experience, hands-on cloud and
Executive Assistant
, QAT
The employer is seeking an experienced Executive Assistant to provide strategic and administrative support to the Chief of SBU. The role manages communications, meetings, records, expenses, and follow-up on key deliverab
Engineer - Information Security Operations
, QAT
The employer is seeking an Information Security Operations Engineer to monitor security alerts, investigate incidents, and improve detection and response. The role includes managing security tools, applying threat intell
Engineer – System
, QAT
The employer is seeking a Senior Systems Engineer with 8+ years of experience to administer Linux and Windows systems and enterprise infrastructure in a 24/7 SOC Fusion Center environment. The role covers virtualization,
Consultant -Data Portal
Doha, QAT
AI Security SME
Doha, QAT
Consultant -Data Portal
, QAT
AI Security SME
, QAT
Executive Assistant
Doha, QAT
Executive Assistant
, QAT
Engineer - Information Security Operations
, QAT
Engineer – System
, QAT