Web Application Firewall (WAF) Consultant - Cincinnati, OH | TCS Job

Must Have Technical/Functional Skills

• Hands-on experience operating, managing, and administering enterprise Web Application Firewall solutions, preferably Cloudflare WAF, in regulated or large global environments.

• Experience onboarding and offboarding URLs, domains, and applications, including application discovery, prerequisite validation, standard configuration, cutover, testing, and rollback coordination.

• Strong knowledge of WAF policies, managed rules, custom traffic rules, signatures, allowlists, blocklists, rate limiting, bot protection, CDN controls, and DDoS mitigation.

• Experience applying DNS updates required for WAF deployment and coordinating certificate, origin, proxy, load-balancing, and application dependencies.

• Ability to write and tune per-application WAF traffic rules while minimizing false positives and avoiding business disruption.

• Experience applying WAF rules, signatures, software patches, and software updates in line with compliance and change-management requirements.

• Experience implementing required firewall rule changes during application onboarding and offboarding through approved change-request processes.

• Operational experience monitoring WAF issues, investigating incidents and support tickets, analyzing traffic and security logs, and troubleshooting application-access or performance problems.

• Experience coordinating scheduled WAF maintenance windows, stakeholder communications, deployment validation, incident escalation, and post-change verification.

• Working knowledge of web protocols, HTTP/HTTPS, TLS, DNS, certificates, reverse proxies, APIs, OWASP Top 10, web attacks, cloud ingress, and application delivery architectures.

• Good to have: AWS and Azure ingress services, application load balancers, infrastructure as code/Terraform, Splunk or SIEM integration, ServiceNow, SRE practices, and Cloudflare certification.

Roles & Responsibilities

• Operate, manage, and administer the in-scope WAF platform and respond to WAF incidents, service requests, and support tickets.

• Onboard and offboard URLs, domains, and applications based on approved requests, including prerequisite validation, standard configuration, DNS coordination, testing, cutover, and documentation.

• Apply approved default and standard WAF configurations to onboarded applications and maintain configuration consistency.

• Create, review, test, and apply application-specific WAF traffic rules, including allowlists, blocklists, signatures, rate limits, and other approved protections.

• Apply WAF rules, signatures, patches, and software updates based on customer compliance requirements and approved maintenance schedules.

• Coordinate DNS updates and firewall rule change requests needed to support WAF onboarding, offboarding, and application connectivity.

• Monitor WAF health, alerts, traffic behavior, security events, and operational issues; update configurations as needed through approved controls.

• Investigate incidents and application problems associated with WAF implementation using platform logs, request details, traffic analysis, and application-team inputs.

• Provide troubleshooting and operational support to application teams affected by WAF policies, false positives, connectivity issues, performance concerns, or deployment changes.

• Support Cloudflare WAF capabilities related to CDN, bot protection, and DDoS mitigation where included in the approved service scope.

• Sched ule maintenance windows, communicate planned activities and service impacts, execute approved changes, validate outcomes, and maintain rollback readiness.

• Maintain application inventories, configuration records, SOPs, knowledge articles, change evidence, incident records, operational reports, and audit-support documentation.

• Coordinate with application, DNS, network, cloud, SOC, service-management, and vendor teams for delivery, escalation, and service restoration.

• Follow applicable ITAR/export-control, RBAC, least-privilege, change-management, compliance, and evidence-retention requirements.

Generic Managerial Skills, If any

Strong communication, stakeholder coordination, technical documentation, incident ownership, disciplined change execution, and ability to work independently with application, DNS, network, cloud, SOC, SRE, and vendor teams.

Salary Range: $110,000 - $130,000 per year

TCS Employee Benefits Summary:

Discretionary Annual Incentive.

Comprehensive Medical Coverage: Medical & Health, Dental & Vision, Disability Planning & Insurance, Pet Insurance Plans.

Family Support: Maternal & Parental Leaves.

Insurance Options: Auto & Home Insurance, Identity Theft Protection.

Convenience & Professional Growth: Commuter Benefits & Certification & Training Reimbursement.

Time Off: Vacation, Time Off, Sick Leave & Holidays.

Legal & Financial Assistance: Legal Assistance, 401K Plan, Performance Bonus, College Fund, Student Loan Refinancing.