Senior Network Security Engineer

Own end-to-end application delivery, WAF, and content/file threat protection with primary, hands-on expertise across Cloudflare and OPSWAT, and secondary working knowledge of Palo Alto, Fortigate, and F5 (LTM/WAF and GTM). Responsible for Cloudflare domain onboarding and lifecycle, WAF rule and rate-limiting configuration, SSO application setup, custom hostnames, Workers development, hostname/IP list management, and OPSWAT-based file scanning — while providing secondary-level support for traditional firewall and F5 load-balancing/WAF platforms.

• Manage the Cloudflare environment across all onboarded domains, including DNS,   WAF rules  , rate limiting rules, custom hostnames, hostname lists, and IP lists.
• Own domain onboarding and lifecycle management within Cloudflare, ensuring a consistent security baseline and WAF rule set is applied to every domain.
• Configure and maintain Cloudflare SSO Applications (Zero Trust/Access) for secure application authentication.
• Develop, deploy, and maintain Cloudflare Workers for custom edge logic, traffic manipulation, and security automation.
• Build and maintain Cloudflare hostname lists and IP lists to support WAF, rate limiting, and access-control policies.
• Manage the OPSWAT file scanning platform for Data-in-Transit and Data-at-Rest content inspection; triage, analyze, and action file scan results, including false-positive review.
• Tune WAF rules and policies across Cloudflare and supporting platforms to reduce false positives while maintaining strong protection coverage.
• Provide   administration and support for Palo Alto firewalls, including policy and rule management.
• Provide   administration and support for Fortigate firewalls, including policy and rule management.
• Support F5 LTM/WAF administration  : virtual servers, pools, health monitors, and WAF policy management.
• Support F5 GTM   for global DNS-based load balancing, site failover, and health monitoring.
• Monitor Cloudflare analytics and logs — WAF events, rate-limiting triggers, and Worker performance — driving root-cause analysis for anomalies.
• Maintain accurate documentation of domain configurations, WAF rule sets, hostname/IP lists, SSO application configs, and secondary-platform settings.
• Coordinate with infrastructure and security teams on change management for major Cloudflare and firewall/WAF configuration changes.

• Bachelor's degree in Computer Science, Information Security, or a related field.
• 8+ years' experience in application delivery, WAF, and content security engineering.
• Primary, hands-on expertise with Cloudflare (Domains, WAF Rules, Rate Limiting Rules, SSO Applications, Custom Hostnames, Workers, Hostname Lists, IP Lists) and OPSWAT file scanning platforms.
• Secondary working knowledge of Palo Alto and Fortigate firewalls, and F5 LTM/WAF and GTM platforms.
• Strong understanding of DNS, SSL/TLS, Layer 4–7 traffic management, and file-based threat triage.
• Certifications preferred: Cloudflare Certified (Solutions Associate/Engineer), OPSWAT certification, Palo Alto PCNSA/PCNSE, Fortinet NSE, F5 Certified BIG-IP Administrator.

Primary Expertise — Cloudflare

• Domains — onboarding, DNS management, and domain lifecycle across the Cloudflare account.
  • WAF Rules — minimum of 3 WAF rules configured and maintained per domain.
  • Rate Limiting Rules — configuring and tuning rate limiting policies to mitigate abuse and DDoS-style traffic.
  • SSO Applications — configuring SSO/Access applications for secure authentication.
  • Custom Hostnames — managing custom hostname (SaaS) configurations.
  • Workers — developing and deploying edge Workers for custom logic and security automation.
  • Hostname Lists — creating and maintaining hostname lists for policy application.
  • IP Lists — creating and maintaining IP lists for allow/block/rate-limit policies.

About Malomatia

malomatia is a leading Qatar-based IT services and solutions provider, bringing together top Qatari and international talent to deliver innovative, end-to-end technology solutions that empower clients to achieve their strategic goals.

Our mission

Empowering Qatar’s businesses and governments to leap into the digital future with agile, knowledge-driven solutions.

Our vision

To become Qatar’s trusted knowledge partner in digital transformation, disrupting industries, shaping the future, and building a world-class tech ecosystem.

Driving change that makes a real impact

Since 2008, malomatia has been driving Qatar’s digital transformation through innovative, ISO-certified IT solutions. With expertise across key public and private sectors, we empower the nation’s vision with advanced services in cloud, cybersecurity, AI, and contact center excellence, elevating the role of technology in shaping Qatar’s sustainable future.