Senior Akamai Edge Security Engineer

About the Opportunity:

What You’ll Do:

• Administer and tune Akamai: Kona Site Defender, WAF, Bot Manager Premier, Adaptive Security Engine, Account Protector, Client Reputation, DDoS, related edge services.
• Lead Imperva Website Security: onboarding, policy, monitoring, data-protection/privacy controls, origin integrations.
• Design and maintain controls for apps, APIs, websites, and digital services across cloud, on-prem, and colo.
• Optimize WAF: API constraints, rate limits, IP/geo restrictions, ACLs, custom rules, Slow POST, browser controls.
• Run bot mitigation (behavior, scoring, allow/deny, automated enforcement).
• Monitor and respond to DDoS, credential stuffing, account takeover, scraping, and app-layer attacks.
• Support Property Manager, GTM, Cloudlets, SiteShield, Akamai DNS, CDN/caching, origin offload, traffic steering.
• Administer CPS / SSL-TLS lifecycle, SAN renewals, mTLS.
• Integrate security into SDLC and CI/CD; Security-as-Code and IaC.
• Automate with Python, Java, JavaScript, C#, C/C++, Shell, or PowerShell.
• Monitor Akamai Event/Control Center, Splunk, Grafana, and cloud-native tools.
• On-call for critical incidents, emergency changes, and production deploys.
• Act as SME for application, cloud, and edge security; support audit and compliance.

Required Qualifications:

• Bachelor’s in a technical field or equivalent experience.
• 5+ years implementing and supporting enterprise security technologies.
• 5+ years web application security, CDN, or edge security platforms.
• Hands-on Akamai security or a comparable WAF/CDN platform (Imperva, Cloudflare, or equivalent—Akamai strongly preferred).
• Working knowledge of WAF, bot management, DDoS, HTTP/S, TCP/IP, DNS, GTM, SSL/TLS, certificates, API security, OWASP Top 10, Linux and Windows, CDN operations.
• Docker, Kubernetes, IaC, and Security-as-Code.
• Scripting or programming in at least one of: Python, Java, JavaScript, C#, C/C++, Shell, PowerShell.
• Data-protection / GDPR / CCPA familiarity.
• Able to analyze traffic logs, spot attack patterns, and ship countermeasures.
• Comfortable with a 6-month assignment and rotating on-call (~1 week in 6).
• U.S. Citizen or Green Card holder (no sponsorship now or in the future).

Preferred Qualifications:

• Deep Akamai: Property Manager, GTM, Cloudlets, SiteShield, CPS, Adaptive Security Engine, Account Protector, Client Reputation, Bot Manager Premier.
• Secure public-cloud design on AWS, Azure, and GCP.
• Splunk, Grafana, SIEM / observability.
• DevSecOps and CI/CD security integrations.
• PCI-DSS, HIPAA, HITRUST, NIST, or CSA.
• Snowflake / data-platform security.
• Large-scale internet-facing apps and APIs.
• Healthcare or regulated-industry edge security.

About ZipStaff