M365 Security Architect

Role: Senior Network Security Engineer WAAP (Web Application & API Protection)

Location: Houston, TX(Onsite)

Duration: 6+ Months Note :- WAAP (Web Application & API Protection) experience is must

Key Responsibilities

Translate business and application security requirements into enterprise-grade WAAP and network security architectures.

Develop and support solutions aligned with Client application security and defense-in-depth strategy.

Lead architecture, design, and deployment of Web Application and API Protection (WAAP) solutions across global environments.

Develop and drive multi-year roadmap for application-layer security, including WAF, API security, bot protection, and DDoS mitigation.

WAAP Responsibilities (Primary Focus)

• Architect, implement, and manage WAAP platforms, including: Web Application Firewall (WAF), API Security (discovery, protection, runtime analysis), Bot Management, DDoS Protection (L3 L7)
• Design and deploy WAAP solutions using platforms such as: Thales, Imperva, Cloud-native WAFs (Azure, AWS WAF) or equivalent
• Develop and maintain custom WAF rules, security policies, and signatures to protect critical applications.
• Perform false positive tuning, policy optimization, and rule of lifecycle management.
• Enable API discovery, schema enforcement, and protection against OWASP API Top 10 threats.
• Integrate WAAP with: SIEM/SOAR platforms, Identity providers, Threat intelligence feeds
• Collaborate with application teams to: Onboard applications into WAAP platforms, Perform security assessments and risk reviews, Ensure minimal performance impact while enforcing strong security controls
• Implement protection against OWASP Top 10 vulnerabilities (SQLi, XSS, RCE, etc.).
• Lead WAAP incident response and root cause analysis for application-layer attacks.
• Define and track application security metrics and KPIs (attack trends, mitigation effectiveness).
• Ensure compliance with security frameworks (CIS, NIST, Zero Trust, data protection standards).

Core Network Security Responsibilities

• Architect and maintain secure network infrastructure across data center, campus, and cloud environments.
• Conduct security design reviews ensuring compliance with enterprise security standards.
• Provide risk reporting, control effectiveness, and security posture visibility.
• Support internal and external security audits.
• Manage and optimize Security Information and Event Management (SIEM) systems.
• Develop and maintain network security policies and procedures.
• Collaborate with cybersecurity, infrastructure, and application teams globally.

Technical Qualifications

• 10+ years of experience in network security architecture, engineering, and operations.
• WAAP & Application Security Expertise (Mandatory)
• Strong experience with WAAP platforms (Akamai preferred; Cloud WAF or equivalent accepted).
• Deep understanding of: OWASP Top 10 (Web & API) Application-layer threats and mitigation techniques
• Hands-on experience in: WAF policy creation and tuning, API security controls (schema validation, authentication enforcement), Bot mitigation strategies, DDoS protection architecture (L3 L7)
• Experience in: Traffic analysis ( TLS inspection), Behavioral-based threat detection
• Strong understanding of: Secure application architectures (monolith, microservices, APIs), DevSecOps integration and CI/CD security controls (nice to have)
• Network Security & Infrastructure
• Strong hands-on experience in: Firewalls (Fortinet, Palo Alto, Juniper), IDS/IPS, VPN, SIEM
• Expertise in: Firewall policy design, NAT, routing, inspection, and threat prevention
• Experience in designing secure: Hybrid (on-prem + cloud + internet-facing) environments
• Experience in: Proxy architectures (forward/reverse), Secure internet gateways
• Networking & Protocol Expertise
• Strong knowledge of: TCP/IP, DNS, TLS/SSL
• Routing protocols (BGP, OSPF, MPLS)
• Experience with: QoS, NetFlow, ACLs, NAT, IP traffic management
• Network monitoring and analysis tools
• Cloud & Integration Experience securing applications in: AWS, Azure, Google Cloud Platform
• Familiarity with: Cloud-native WAF and API security tools
• Integration experience with: SIEM, EDR/XDR, IAM platforms
• Data Center & Enterprise Networking Experience managing enterprise environments with: Aruba, Arista, Juniper switches
• Firewalls, load balancers, WAN optimization tools
• Understanding of: High availability and performance optimization for application traffic
• Operations & Lifecycle Management
• Lead onboarding and lifecycle management of applications into WAAP platforms.
• Perform security tuning, upgrades, and optimization activities.
• Support incident response and threat mitigation at application layer.
• Work within ITIL frameworks (incident, problem, change management).
• Education & Certifications
• Bachelor's Degree in Computer Science, IT, or related field (or equivalent experience).
• 10+ years of experience in enterprise network security and application security.
• Preferred certifications: CCNP / CCIE / JNCIE, Security certifications (CISSP, CISM), Vendor certifications (Akamai, AWS Security, Azure Security)
• Key Differentiators (What This JD Targets)
• Positions WAAP as a primary security control layer, not an add-on
• Strong alignment with: Application security + Network security convergence Defense-in-depth strategy
• Emphasizes: API security (modern requirement), Bot/DDoS protection (critical for internet-facing apps)
• Keeps strong foundation in: Firewalls, SIEM, network architecture

For applications and inquiries, contact:View email address on us.fitly.work