Şəbəkə və əməliyyatların təhlükəsizliyi arxitekturası üzrə baş mütəxəssis

About the role

We are looking for a senior specialist to lead the design, implementation and support of security solutions for large‑scale network infrastructures. The role involves ensuring secure connectivity between internal and external systems, collaborating with DevOps and architecture teams, and producing technical documentation.

Key responsibilities

• Design, deploy and maintain security solutions for extensive network environments.
• Analyze and audit secure connections such as site‑to‑site VPN, remote access and DMZ against security requirements.
• Participate in the evaluation and execution of projects involving secure links.
• Manage and tune F5 BIG‑IP platforms (LTM, ASM, APM) and write iRules.
• Configure firewalls (Palo Alto, Cisco ASA, FortiGate) and define security policies.
• Integrate IPS/IDS, Web Application Firewalls, reverse proxies and other protection systems.
• Collaborate closely with DevOps, system administrators and architecture teams to embed security.
• Respond to network incidents, perform traffic analysis and conduct investigations.
• Create technical documentation and architecture diagrams for security infrastructure.

Required profile

• University degree in a related field.
• More than 5 years of experience in network security.
• Deep knowledge of network protocols (TCP/IP, UDP, DNS, HTTP/S, IPsec, BGP, OSPF, NAT).
• Hands‑on experience with F5 BIG‑IP, especially iRules development.
• Proven involvement in secure connectivity projects (VPN, DMZ, Zero Trust).
• Experience with Palo Alto, Cisco ASA, FortiGate firewalls.
• Ability to produce network diagrams and technical documentation.
• Intermediate or higher proficiency in English.

Required skills

• F5 BIG‑IP (LTM, ASM, APM, iRules)
• Palo Alto, Cisco ASA, FortiGate firewalls
• VPN technologies (site‑to‑site, remote access)
• DMZ and Zero Trust concepts
• IPS/IDS, Web Application Firewall, Reverse Proxy
• Network protocols: TCP/IP, UDP, DNS, HTTP/S, IPsec, BGP, OSPF, NAT
• Cloud WAFs (Cloudflare, AWS WAF, Azure Front Door) – preferred
• DDoS mitigation – preferred
• Python, Ansible – basic knowledge preferred
• Certifications: F5 LTM&ASM, PCNSA, CCNP Security, CEH – preferred