Senior Network Engineer
About the job
- At least 10 years of network engineering experience in large-scale, multi-region, and global routing environments.
- Deep hands-on expertise with BGP and OSPF in global IP backbone environments, including traffic engineering and multi-vendor interoperability.
- Strong operational and engineering experience with JunOS; MX, QFX, and SRX experience is preferred.
- Strong troubleshooting skills across routing, switching, TCP/IP, asymmetric paths, latency, packet loss, MTU/fragmentation, and QoS behaviors.
- Experience with hybrid cloud and cloud-native networking across AWS, Azure, and/or GCP.
- Hands-on automation skills using Python, Ansible/AWX, configuration templating, Git workflows, and automated testing and validation pipelines.
- Strong understanding of network security controls, boundary protection, encryption, logging, and segmentation concepts required for FedRAMP.
- Familiarity with firewalls, VPNs, DDoS mitigation, IDS/IPS, and NIST 800-53-based security frameworks.
- Strong incident leadership skills to coordinate cross-functional teams under pressure.
- Written and verbal communication across Architecture, Product, Security, Compliance, Operations, and Build teams.
- Ability to mentor and elevate peers and junior engineers.
- Ability to work effectively amid competing priorities and regulatory constraints.
- Experience engineering, operating, or supporting FedRAMP Moderate and/or High environments is strongly preferred.
- Engineer, build, operate, and deliver network solutions for global data centers, cloud platforms, FedRAMP-authorized environments, build environments, and product connectivity needs.
- Engineer and optimize routing for a global IP backbone, including multi-region route propagation, redundancy, and traffic-engineering strategies.
- Engineer, build, and operate scalable, highly available Layer 3 topologies using BGP, OSPF, and routing policies including communities, AS-path manipulation, MED/local-pref tuning, ECMP, and route-reflector hierarchy.
- Design and implement secure network segmentation, boundary controls, and traffic isolation required for FedRAMP Moderate/High environments.
- Implement hybrid and cloud-native routing across AWS, Azure, and GCP using Direct Connect, ExpressRoute, VPN, Transit Gateway, Virtual WAN, and cloud router constructs, aligned with FedRAMP architectures and security control requirements.
- Develop and maintain automated provisioning, configuration, compliance, and validation pipelines using Python, Ansible/AWX, and Git-driven CI/CD workflows, including FedRAMP configuration baselines.
- Ensure connectivity, availability, and performance across multi-region data centers, backbone sites, cloud platforms, and regulated FedRAMP environments using proactive monitoring, telemetry, and lifecycle management practices.
- Operate networks in accordance with FedRAMP continuous monitoring requirements, including configuration drift detection, vulnerability mitigation, and audit readiness.
- Troubleshoot complex routing, TCP, and connectivity issues using netcat, ping/ICMP, logs, and packet captures.
- Lead or support major incident response, including FedRAMP-relevant incident handling, escalation, and reporting procedures.
- Execute changes, upgrades, and migrations safely using structured procedures (MOPs), documented approvals, automated workflows, and validated rollback mechanisms.
- Remediate vulnerabilities and maintain compliance across network OS versions, configurations, firmware, and security posture in coordination with Security and Compliance teams.
- Engineer enhancements, new capabilities, and service-driven connectivity features supporting product and platform evolution and FedRAMP boundary services.
- Design automation that enforces least privilege, segmentation, encryption-in-transit, logging, and configuration compliance for regulated environments.
- Replace manual operational steps with automated workflows incorporating pre- and post-checks, compliance gates, evidence collection, and safe-rollback logic.
- Test new network OS versions, automation logic, routing changes, and security controls in controlled environments prior to production and FedRAMP deployment.
- Partner with Build, Engineering, Architecture, Product, Security, and Compliance teams to ensure reliability, scalability, and alignment with FedRAMP control objectives.
- Translate product, regulatory, and platform requirements into network designs that meet FedRAMP architectural and security expectations with clear timelines and dependencies.
- Conduct capacity planning across links, devices, cloud gateways, backbone segments, routing domains, and FedRAMP boundary components.
- Manage procurement cycles, RMA workflows, vendor escalations, and equipment lifecycle, ensuring vendors and solutions support FedRAMP use cases.
- Evaluate vendor technologies for performance, resiliency, automation compatibility, FedRAMP eligibility, and cost-effectiveness.
- Create and maintain runbooks, architectural diagrams, and troubleshooting guides, including FedRAMP boundary diagrams and network control documentation.
- Maintain documentation required for FedRAMP audits, assessments, and continuous monitoring activities.
- Define lifecycle standards for network roles, routing constructs, appliances, and platform components.
- Ensure monitoring, alerting, and operational procedures are documented, auditable, and continuously improved.
- Mentor engineers through structured troubleshooting, technical deep dives, FedRAMP design considerations, and post-incident learning sessions.
About the company
F5 offers multi-cloud application services and security to keep apps secure and available across different hosting environments. Its products include web application and API protection (WAF and API security), bot defense, fraud prevention, and application delivery features like load balancing and access management. The solutions protect and accelerate applications wherever they run, combining security with delivery in a single toolkit, sold as licenses, subscriptions, and support contracts, plus professional services. The goal is to help customers securely deliver fast, reliable applications across any cloud or data center while reducing abuse and ensuring smooth user access.
Company Size
5,001-10,000
Company Stage
IPO
Headquarters
Seattle, Washington
Founded
1996
Get referred to F5
See people who can refer or advise you
Simplify's Take
What believers are saying
- Q3 FY2026 revenue reached $865 million, up 11%, with 19% product growth.
- F5 raised FY2026 guidance to 9%–10% revenue growth after stronger demand.
- MuleSoft integration and Dreamforce 2026 visibility should accelerate AI-security sales cycles.
What critics are saying
- CVE-2026-94127 was actively exploited on September 22, 2026, undermining trust.
- February 2026 securities litigation alleges F5 concealed the 2025 BIG-IP breach.
- Cloudflare, NetScaler, and Radware pressure F5 on cost, simplicity, and modernization.
What makes F5 unique
- iRules keeps BIG-IP programmable without changing applications, a sticky enterprise control point.
- F5 AI Security Platform spans models, agents, APIs, and hybrid multicloud environments.
- Workforce AI Security extends network-path governance to employee AI use and agent actions.
Help us improve and share your feedback! Did you find this helpful?
Benefits
Comprehensive medical, dental, & vision coverage
Paid employee life & disability insurance
Employee Assistance Program (EAP)
Competitive pay
Employee Stock Purchase Plan
401(k) with company match
Health and daycare saving accounts (HSA and FSAs)
Tuition assistance
Adoption assistance
20 days of vacation and 25 days of vacation after year 5
10 days of sick leave
8 Weeks Paid FMLA & Family Leave
11 paid holidays
Headspace (Meditation App)
Growth & Insights and Company News
6 month growth
0%1 year growth
0%2 year growth
0%F5 helps service providers modernize critical network services. On: October 12, 2026 F5 today announced enhanced cloud-native network functions and new observability capabilities that help service providers modernize critical network services as they move from virtualized infrastructure to Kubernetes and cloud-native architectures. Service providers are under pressure to support growing 5G, edge, IT, and emerging AI workloads, boost efficiency, and maintain the performance, security, and operational control required for carrier-grade services. Moving network functions to Kubernetes lets operators use infrastructure more flexibly but also introduces additional requirements for traffic management, security, lifecycle operations, and visibility across increasingly distributed environments. F5 now accelerates this transition. "Service providers should not have to choose between cloud-native agility and the performance, security, and control required for critical network infrastructure," said Kunal Anand, Chief Product Officer at F5. "BIG-IP Cloud-Native Edition brings proven F5 BIG-IP capabilities into Kubernetes, giving network and cloud operations teams a more consistent way to deploy, secure, observe, and operate 5G, edge, and AI infrastructure at scale." Independent testing by The Tolly Group of selected BIG-IP Cloud-Native Network Functions within BIG-IP Cloud-Native Edition demonstrated substantial infrastructure-efficiency gains in Kubernetes-based DNS and CGNAT workloads compared with virtualized network function deployments. In a DNS scenario, F5 processed 1.9x more queries per second while using 91.5% less CPU. In a CGNAT scenario, F5 delivered comparable throughput while using 79.7% less CPU and 98.5% less memory. A broader cloud-native solution for service providers F5 BIG-IP Cloud-Native Edition extends capabilities from the F5 Application Delivery and Security Platform within Kubernetes-based service provider environments, bringing together complementary capabilities across cloud-native networking, application delivery, security, and observability. BIG-IP Cloud-Native Network Functions extend core BIG-IP network and security services into Kubernetes-native environments, including DNS, CGNAT, network security, subscriber policy enforcement, and traffic management. BIG-IP Next for Kubernetes operates at the Kubernetes network layer, providing networking, application delivery, security, and manageability. BIG-IP eBPF Observability provides kernel-level application and network visibility for troubleshooting distributed environments. Modernizing critical network services for Kubernetes Enhanced F5 BIG-IP Cloud-Native Network Functions provide Kubernetes-native traffic management and security capabilities designed for service provider environments. * Expanded traffic management: Broad Layer 4-7 support, including ingress and egress networking and support for TCP, UDP, HTTP/2, Diameter, SCTP, GTP, and SIP, helps operators move a wider range of network services into Kubernetes rather than limiting modernization to HTTP-based applications. * Subscriber-aware policy enforcement: Operators can dynamically apply quality-of-service (QoS), traffic-shaping, and content-filtering policies based on subscriber and service requirements, supporting differentiated services while maintaining consistent policy enforcement. * Cloud-native lifecycle management: Kubernetes-native deployment and management workflows let teams automate common configuration and lifecycle tasks as network functions move from VM-based to containerized infrastructure. By moving these services into Kubernetes-native deployments, operators can make more flexible use of compute and memory resources, more efficiently using infrastructure as network traffic and service demands grow. Deeper visibility across distributed Kubernetes environments Network, security, application, and platform teams often rely on different tools when troubleshooting the same problem. New F5 BIG-IP eBPF Observability provides a consistent source of application and network telemetry across distributed Kubernetes clusters, enabling teams to examine app behavior, container activity, and network flows together when investigating performance or connectivity issues. * Real-time, low-overhead telemetry: Operations teams gain granular network and app insights across Kubernetes environments without requiring application-by-application instrumentation. * Scalable visibility: Kubernetes-native deployment models and a resource-efficient architecture support visibility across distributed environments, helping teams investigate issues without adding another heavy monitoring layer. * Shared operational context: BIG-IP eBPF Observability provides correlated application and network context to determine whether an issue originates in the application, container, or network to reduce investigation time. Independent validation of cloud-native network functions The Tolly Group tested BIG-IP Cloud-Native Network Functions against virtualized network function deployments in the same Kubernetes environment across two essential service provider workloads. * DNS: F5 processed 1.9x more queries per second with 91.5% less CPU demand and 48% lower average latency than the tested VNF configuration. * CGNAT: F5 delivered comparable throughput with 79.7% less CPU demand, 98.5% less memory consumption, and 82% lower p95 latency than the tested VNF configuration. These results demonstrate how Kubernetes-native network functions can help operators increase workload density and reduce infrastructure requirements for the workloads tested. Extending BIG-IP as service provider infrastructure evolves Service providers have relied on BIG-IP across physical and virtual infrastructure for critical networking and security services. As those environments increasingly incorporate Kubernetes, F5 is extending those capabilities into the architectures operators are adopting while providing a path to maintain familiar operational models and policies. BIG-IP Cloud-Native Edition gives service providers a broader cloud-native solution across traffic management, networking, security, and observability. It also creates opportunities for operators to adopt additional F5 capabilities as their infrastructure evolves across 5G core, edge, IT, and newer workload environments. BIG-IP Cloud-Native Network Functions, BIG-IP Next for Kubernetes, and BIG-IP eBPF Observability address different layers of that transition while helping customers maintain familiar networking, security, and operational models. Availability BIG-IP Cloud-Native Edition and the capabilities highlighted in this announcement are available now for service provider environments.
Indosat Ooredoo Hutchison and F5 have launched the Indosat Intelligence Suite, an AI platform for businesses across Asia. Announced on 9 October, the suite combines over 300 AI models with infrastructure in a single interface, eliminating the need for companies to build their own systems. F5 provides BIG-IP Next for Kubernetes, offering tenant isolation and container security alongside AI security features. The platform builds on Indosat's AI infrastructure in Indonesia and supports local data processing through Sahabat-AI and Indosat-hosted tiers. This may help businesses comply with Indonesian regulations requiring certain electronic system operators to store data locally. The partnership aligns with Indonesia's broader sovereign AI initiative.
IDC MarketScape recognized F5 as a Leader in Web Application and API Protection Platforms 2026 Vendor Assessment. F5 ADSP | October 01, 2026 F5, Inc. has entered an era of frontier AI threats, and autonomous agentic attacks. Autonomous AI models can scan, discover, and exploit vulnerabilities across distributed environments in hours. In fact, the patch window has completely inverted, with exploits now occurring seven days before vulnerability disclosure. When exploits emerge before security teams are even aware of a vulnerability, let alone receiving a software patch, reactive defense and multi-week release cycles are no longer viable. Runtime protection can no longer be a secondary layer; it must now be the enterprise's primary line of defense. The mandate for security leaders is clear: with uncontrolled API sprawl, shadow AI workloads, data leakage risks, and requirements for crypto-agility they need to defend every app, API, and AI application and agent with a self-learning engine that enforces consistent policy across hybrid, multi-cloud, and air-gapped data planes. That's exactly what F5's web app and API protection (WAAP) solution is built to do. F5, Inc. is proud to share that F5 was named a Leader in the IDC MarketScape: Worldwide WAAP Platforms 2026 Vendor Assessment (US54130626, September 2026), the second time F5 has been recognized since IDC MarketScape began publishing this report in 2024. F5 has been recognized as a Leader in the IDC MarketSpace Web Application and API Protection Platforms 2026 Vendor Assessment. What F5 delivers for your enterprise that point tools cannot. F5 is the only security provider that delivers an application delivery and security platform built to secure modern applications, APIs, and AI - from development through runtime, across any environment. Delivered as part of the F5 Application Delivery and Security Platform (ADSP), F5 WAAP converges web application firewall (WAF), API security, bot defense, and DDoS mitigation to eliminate security gaps and vendor sprawl wherever apps and APIs operate. In this year's assessment, IDC MarketScape noted F5's strengths including: * AI-powered WAF with a measurable efficacy gain: F5 WAAP balances a combination of signatures and analysis to increase detection accuracy and reduce false positives without the need for constant manual tuning. F5 customers reported that the addition of the neural network risk engine cut false positives and lifted detection accuracy measurably. The new engine further aids F5's efforts to detect zero days in a more timely manner, including the Ivanti EPM and SolarWinds Web Help Desk CVEs. * Breadth of AI security options: The F5 suite for AI includes F5 AI Red Team, F5 AI Guardrails, and F5 AI Remediate. F5 AI Red Team provides proactive testing of AI applications for vulnerabilities. F5 AI Guardrails provides the real-time inspection and monitoring needed to block threats targeting AI, such as prompt injection and data leakage. Importantly, F5 AI Remediate is an important addition to other AI security solutions (e.g., AI Red Team and AI Guardrails, as they allow organizations to close the loop on security events). * Bot and agent defense built on rich telemetry: F5 Distributed Cloud Bot Defense collects 120+ signals through tamper-resistant client-side instrumentation and now distinguishes humans, bots, and AI agents, gating action to verified agents via Web Bot Auth and a Skyfire KYA (Know Your Agent) partnership. * Air-gapped API security supports government and other sensitive customers: F5 API Security Local Edition deploys without external connectivity and enforces directly on F5 BIG-IP, which is important for security and privacy-aware agencies and organizations. Using F5 WAAP technologies to fight highly sophisticated attacks. Over the years, organizations across a wide range of industries have turned to F5 WAAP solutions to deliver consistent policy enforcement, streamline operations, and secure apps, APIs, and AI across dispersed hybrid multi-cloud environments. Today, 28% of F5's top 1,000 customers have adopted all three deployment modes - SaaS, software, and hardware/cloud - validating that a unified platform approach dramatically simplifies security operations at enterprise scale. For example, Prime Bank, which operates 146 branches and 153 ATMs across Bangladesh, has been using F5 WAAP technologies for the last decade including most recently AI-powered WAF, enabling the bank to fight the most sophisticated attacks. As Md Mahbubul Alam Rafel, Chief Information Security Officer at Prime Bank, put it: "You do not need a human to generate an attack anymore, so you must have solutions with AI capacity as well. You have to fight fire with fire. We are already taking advantage of AI-based security insights within our existing consumption of F5 ADSP." Likewise, F5 customer HDI Sigorta, among Turkey's top 10 insurance firms, uses F5 WAAP technologies to protect its hybrid application landscape, including more than 200 APIs. As Altuğ Şahin, Network and Cybersecurity Manager at HDI Sigorta, explains: "F5 helped us significantly reduce blind sports across the API landscape, improved our threat detection capabilities, and enabled us to respond faster and more confidently to emerging risks." With AI-driven threats now able to exploit vulnerabilities faster than security teams can patch them, WAFs in monitoring mode and reactive multi-week release cycles are insufficient. F5 gives organizations the accuracy and confidence to enforce active blocking across any environment - plus close the loop from proactive vulnerability discovery to runtime virtual patching. It's how F5, Inc. help organizations reduce risk and strengthen their security posture in the frontier AI era. F5, Inc. believe being named a Leader in the 2026 IDC MarketScape for WAAP affirms its mission: protecting every app, API, and AI application and agent without compromise. Nirav Shah SVP, Product and Solution Marketing | F5 Nirav Shah is the Senior Vice President and Head of Products and Solution Marketing at F5, where he leads the strategic direction for Application Security and AI Security. Before joining F5, he spent eleven years at Fortinet in several leadership positions, most notably heading the AI-Powered SASE, SOC, and Secure Networking solutions. His extensive background also includes significant roles at Cisco Systems, where he spearheaded major initiatives for SD-WAN. With more than two decades of experience in the cybersecurity sector, he has an established record of launching market-defining products and building high-performance teams that align product development with sales and marketing for maximum impact. As a thought leader and USC alumnus, he is a frequent speaker at industry conferences and a regular contributor to leading publications on the intersection of AI and cybersecurity, while remaining dedicated to mentoring emerging cybersecurity professionals. Featured Blog Posts
F5 positioned as market shaper in the Gartner Emerging Market Quadrant for AI Application Security. F5 | Published 22 Sept 2026 COMPANY NEWS: To us, the recognition underscores F5's ability to secure AI across cloud, on-premises, and air-gapped environments at enterprise scale F5 - 22 September - (NASDAQ: FFIV), the global leader in delivering and securing every app and API, today announced it has been positioned by Gartner(R) in the Market Shapers quadrant of the September 2026 Emerging Market Quadrant for AI Application Security - one of only two vendors to be recognised in that position.1 According to Gartner, vendors evaluated in the Emerging Market Quadrant for AI Application Security are assessed across two axes: potential for market disruption and potential to execute. "Enterprises are not running AI in a lab. They are running it inside regulated networks, behind APIs, and across agents that authenticate and act on their own," said John Maddison, Chief Marketing Officer at F5. "Enterprises cannot assemble a security posture from dozens of disparate point products. More than 40 vendors are competing to secure enterprise AI, and most are solving one slice of the problem. In our view, F5's positioning in the Market Shapers quadrant offers confirmation of a straightforward conviction: security leaders cannot govern what they cannot see, and AI cannot be secured from the outside in. F5 secures AI where enterprises actually run it." Securing AI where enterprises run it Enterprise AI has inverted the traditional security model. Today's AI systems operate with greater access, autonomy, and speed than human users are capable of, and the pace of adoption is outrunning the controls meant to govern it. F5's 2026 State of Application Strategy Report found that 88 per cent of organisations have already encountered at least one AI-related operational or security challenge, and 98 per cent are preparing for agentic AI. Meeting these challenges takes more than a collection of point products. AI application security spans the models and applications themselves, the agents that act on their behalf, the MCP servers and APIs that connect them, and the data they can reach. Securing that expansive surface calls for four essential components: * A comprehensive platform with centralised management across every AI workflow * Proven application security capabilities extended into agent-based controls, where intent-aware access control and continuous runtime monitoring govern what an autonomous agent is permitted to do * Adversarial testing wired directly into automated runtime defences, so what red teaming uncovers becomes what production enforces * Secure, air-gapped deployment for regulated sectors where sovereignty is not optional By bringing these capabilities together, F5 is shaping the AI security market and delivering substantive protections to security leaders. F5's approach is grounded in the premise that has shaped the company since its founding: security has to live where traffic flows. Every model call, agent action, and MCP connection traverses the network and application layers, where F5 already delivers and secures applications and APIs for the world's largest banks, carriers, governments, and consumer brands. That vantage point is what allows F5 to unify governance, discovery, testing, runtime protection, and observability - across generative and agentic AI - into a continuous loop rather than a collection of disparate tools, and to deliver those capabilities across hybrid multicloud, on-premises, air-gapped, private cloud, hybrid, and public cloud environments, including those where data residency and sovereignty are non-negotiable. It also shows up in measured performance. F5 AI Guardrails demonstrated up to 98.4 per cent security efficacy in independent testing, enforcing protections inline at the point of interaction rather than inspecting after the fact. F5 AI Red Team stress-tests AI systems against more than 140,000 attack patterns drawn from the industry's deepest AI threat database and converts what it finds directly into enforceable runtime defences. And because F5 discovers AI activity at the network layer, security teams gain visibility into every model, agent, and MCP call - including shadow AI - without a single application integration or code change. "The AI application security market is going to consolidate around vendors who can operate at enterprise scale, in regulated environments, with real traffic and real consequences," Maddison added. "F5's 30 years of experience in these demanding environments gives our customers the foundation to confidently and securely build for the future with AI." Customer demand for F5's AI security solutions is growing as the gap between AI adoption and AI control widens. In its third quarter fiscal year 2026 earnings results, F5 reported that the number of customers purchasing F5 solutions for AI security doubled quarter-over-quarter. Additional information on F5's AI security portfolio is available at f5.com/ai. Supporting resources
F5 and Salesforce announced an integration on 2 September, embedding F5 AI Guardrails into MuleSoft's Agent Fabric Omni Gateway. The partnership aims to address security risks in agentic AI deployments, including prompt injection and data leakage. F5 reported Q3 FY26 revenue of $865 million, up 11% year-over-year, with non-GAAP operating margin at 35.0%. Salesforce posted Q2 FY27 revenue of $11.3 billion, also up 11%, with non-GAAP operating margin of 34.1%. Salesforce raised full-year FY27 revenue guidance to $46.1 billion–$46.4 billion. Both companies operate at similar profitability levels. Salesforce leads in scale with $33.5 billion in cRPO backlog, whilst F5 benefits from specialised AI security positioning. Agentforce ARR grew 210% year-over-year, nearing $3.9 billion.