F5 Support Engineer

F5 Support Engineer West Houston, TX – Hybrid Contract-to-hirePay rate around $70/hr, depending on experienceOur client is seeking an F5 Support Engineer with deep experience in F5 APM, F5 ASM/Advanced WAF, and Microsoft identity platforms including Microsoft Entra ID (Azure AD). This engineer will support secure application delivery, identity-based access, and web application protections across the enterprise. This role is ideal for someone who understands how F5 integrates with Microsoft identity, SSO, MFA, conditional access, federation, and Zero Trust access models.Key Responsibilities:F5 APMConfigure and support F5 APM policies, including:SSO (SAML, OIDC)MFA integrationsAccess profiles, authentication chains, endpoint checksAzure AD / Microsoft Entra ID integrationTroubleshoot access issues between F5 APM and Microsoft identity providers.Build and maintain custom logon pages, access workflows, and identity federation flows.F5 ASM/Advanced WAFConfigure, tune, and support ASM/Advanced WAF policies including:Signature tuningBot defenseL7 DDoS protectionsAPI protection and JSON/XML profilesWork with application teams to onboard applications to ASM and ensure secure deployments.Microsoft Identity & AccessDeep understanding of Microsoft Entra ID, Azure AD, and identity services.Support integration of F5 with:Azure AD enterprise applicationsSAML/OIDC/OAuthConditional AccessMFA (Microsoft Authenticator, Entra MFA)Work with Microsoft 365, Azure, and internal security teams on identity-driven access controls.Additional ResponsibilitiesSupport F5 LTM, GTM/DNS, SSL offloading, traffic policies, and iRules as needed.Perform lifecycle tasks: upgrades, patching, certificate renewals, failover testing.Participate in on-call rotation for access issues or security events.Maintain documentation: access flows, identity mappings, APM profiles, WAF policies.Required Qualifications3–5+ years hands-on with F5 BIG-IP APM (strongest skillset).2–3+ years with F5 ASM/Advanced WAF.Strong experience integrating F5 with Microsoft Entra / Azure AD.Strong understanding of identity protocols (SAML, OAuth2, OIDC, Kerberos, NTLM).Knowledge of SSL/TLS, cert chains, ciphers, and secure access design.Troubleshooting skills across Layers 4–7 (HTTP, SSL, authentication flows).Preferred QualificationsF5 CTS-APM or CTS-WAF certifications.Experience with iRules, TCL, or AS3 automation.Azure engineering experience (App Proxy, Conditional Access, Hybrid identity).Python or Ansible automation knowledge.Experience supporting enterprise or critical infrastructure environments.