Senior F5 Consultant / Network & Security Engineer
HybridDocklands, Victoria, Australia
Job Summary
Conduct discovery of the existing physical BIG-IP estate and document current-state architecture across DMZ, Corporate, and Engineering zones. Develop High-Level and Low-Level Designs for migrating to BIG-IP Virtual Edition, then build three isolated high-availability pairs on VMware ESXi. Execute like-for-like migration of LTM configurations, including virtual servers, pools, iRules, and traffic policies, while integrating VLANs, routing, and firewall security policies across zones. Implement APM and ASM/Advanced WAF for identity-aware pre-authentication, MFA, SSO, and OWASP Top 10 protection. Manage the full migration lifecycle, including rollback procedures, after-hours production cutovers, and User Acceptance Testing. Decommission legacy systems, produce as-built documentation, and deliver operational handover to the client's Network and Security team.
Required Qualifications
- Deep, hands-on F5 BIG-IP engineering experience
- LTM essential
- APM and ASM/Advanced WAF
- Demonstrated experience migrating physical BIG-IP appliances to BIG-IP Virtual Edition
- Strong VMware vSphere/ESXi skills
- distributed switching
- port groups
- networking requirements of virtual appliances
- Solid core networking: L2/L3
- VLANs
- routing
- NAT
- DNS
- SSL/TLS with certificate lifecycle management
- Intermediate to expert level firewall engineering skills across Cisco and Palo Alto platforms
- security policy design
- rule implementation
- NAT
- troubleshooting across segmented zones
- Practical experience with iRules
- traffic policies
- profiles
- health monitors
- persistence
- Sound understanding of F5 high availability: device service clustering
- traffic groups
- floating self-IPs and VIPs
- failover behaviour
- Experience working within formal change control
- planning and executing after-hours change windows in production environments
- Strong documentation ability across HLD, LLD, runbooks and as-built material
- consulting skills to lead workshops and engage senior stakeholders
- Availability to work scheduled after-hours cutover windows
- Location: Melbourne based, hybrid, with on-site attendance for workshops, build and cutover activities
- Hours: business hours, with scheduled after-hours windows for production migration and cutover activity
Desired Qualifications
- F5 certifications (F5 Certified Technology Specialist LTM, and/or Security Solution Expert)
- APM integration with enterprise identity platforms such as Microsoft Entra ID, Okta or Duo
- delivering MFA/SSO for legacy applications that cannot support modern authentication
- Experience integrating network infrastructure with enterprise backup platforms such as Commvault
- Background in rail, transport, utilities, government or other critical infrastructure environments
- Experience collaborating alongside vendor professional services teams
Hiring someone like this?
Get your role in front of qualified candidates on Sorce.