F5 Engineer

Description

RavenTek is a rapidly growing IT modernization and integration company. Our employees are excited about the work that we do. We deliver and customize leading-edge agile solutions, services and products to mission critical organizations, primarily federal government agencies.

We are currently hiring a F5 Engineer to support our customer located in Ft. Meade, MD. Please review the requirements below and if you would like to be considered, we encourage you to apply!

Requirements

• Experience with SSL Interception on web sessions for ICAP/DLP inspection
• Experience with transparent, dynamic, and explicit proxies
• Experience with configuring URI forwarding and scripting/writing iRule
• Experience with testing, architecting, integrating, and deploying proxies
• Experience with web/application servers, load-balancers, and web authentication
• Experience with designing, implementing, and deploying Symantec Bluecoat solutions
• Experience with executing SSL Interception with an integrated internal PKI environment
• Experience with various proxy authentication methods with relation to a domain environment
• Experience working in DMZ environments with a strong understanding of hardware load-balancing, firewalls, multi-tiered architectures.
• Experience with HTML/CSS/JavaScript/Perl and Python
• Experience with building and troubleshooting virtual servers
• Experience with configuring and deploying SNAT pools
• Experience with creating, modifying, and troubleshooting iRule
• Experience with creating, installing SSL certificates, and troubleshooting ciphers
• Experience with using command line tools such as tcpdump and curl
• Experience with deploying and troubleshooting BIG IP High Availability
• Experience with using BIG IP route domains and partitions
• Experience with understanding of different load balancing methods (ratio, round robin, priority groups, least connections)
• Experience with creating, implementing, and administering F5 Application Security Manager rules with LTM Virtual Servers.
• Experience with implementing and supporting F5 Access Policy Manager and client authentication for both Active Directory and Identity Federation such as SAML
• Experience with implementing and administering F5 Secure Web Gateway.
• Experience with configuration of F5 iControl.
• Experience with planning and implementing enterprise monitoring and configuring tools for the F5 platforms such BIG-IQ.
• Hands-on experience with deployment using F5 BIGIQ Management and Ansible Playbooks in an automated SDLC process which includes declarative deployments

SIPR DMZ specific F5 Proxy experience configurating and testing:  

1. Bluecoat Blacklist Import to F5

2. Bluecoat Whitelist Import to F5

3. Policy group

4. Certificate Authority (CA)

5. FQDN

6. Transparent (forwarding)

7. Explicit 

8. URI forwarding 

9. iRule

10. LDAP

11. OCSP

12. Kerberos/NTLM

13. DNS

14. High Availability 

 Additional hands-on and troubleshooting experience with the following:

Experience with Linux command line, strong with local load balancing concepts and techniques strong with global server load balancing concepts and techniques. Understanding of DNS protocol and operation with a basic understand of HTTP protocol for application delivery. Wireshark and packet decode, Public Key Infrastructure and lifecycle, TLS/SSL standards and vulnerability mitigation, REST, Python, Ansible Playbooks, Using the F5 REST API, Using AppViewX, Using Cisco policy-based routing, BIG IP DNS Experience, Configuring BIND, DNS Express and creating and modifying, wideIPs, Creating Distributed Applications,  Creating GTM pools and the load balancing methods (global availability, topology, least connections), Creating and troubleshooting iRules for wideIPs

Required Security Clearance: Top Secret

Other Requirements:

Must be fully vaccinated with the COVID vaccine unless you need a reasonable accommodation for religion or a health-related need.  

Employment Type: Full Time / Permanent

Working Conditions:

Business work hours are from Monday through Friday, (day shift) 40-hour week

Physical Requirements:

Employee needs to be able to sit at a workstation for extended periods; use hand(s) to handle or feel objects, tools, or controls; reach with hands and arms; talk and hear. Most positions require ability to work on desktop or laptop computer for extended periods of time reading, reviewing/analyzing information, and providing recommendations, summaries and/or reports in written format. Must be able to effectively communicate with others verbally and in writing. Employee may be required to occasionally lift and/or move moderate amounts of weight, typically less than 20 pounds. Regular and predictable attendance is essential.

Background Screening/Check/Investigation:

Successful Completion of a Background Screening/Check/Investigation will/may be required as a condition of hire.

ADA: RavenTek will make reasonable accommodations in compliance with the Americans with Disabilities Act of 1990.

EEO/AA: RavenTek does not discriminate on the basis of race, color, national origin, sex, religion, age, disability, sexual orientation, gender identity, veteran status, height, weight, or marital status in employment or the provision of services and is an equal access/equal opportunity/affirmative action employer.