9 hours ago

Lead Architect – Application Security

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI

Last checked: 9 hours agoStatus: Live

Job Summary

Lead the application security architecture across F5’s security portfolio, spanning WAF, DDoS mitigation, AI security, bot defense, API security, TLS inspection, and identity-aware access. Own cross-portfolio architectural strategy, modernization from legacy to composable API-driven services, and threat modeling/governance. Drive alignment across product, engineering, SRE, and infrastructure while mentoring senior architects and representing F5’s security vision externally.

Location: San Jose, Seattle

Workplace: Hybrid

Employment Type: Full time

Job Function: Cybersecurity

Key Responsibilities

•Define cross-portfolio application security architecture strategy across hardware, software, and cloud-native solutions and align it to F5’s long-term vision.
•Establish architectural principles, patterns, and roadmaps for WAF/WAAP, API security, DDoS, identity, client-side protection, and AI/ML-powered detection and response.
•Lead modernization to evolve monolithic or appliance-based capabilities into composable, API-driven services within a SaaS-native security control plane.
•Champion architectural governance, threat modeling, telemetry/feedback loops, and scalability/observability/resiliency/secure-by-default practices across teams.
•Drive cross-functional alignment across product, engineering, SRE, and infrastructure and represent F5’s security vision through customer and industry engagements.

Pay and Benefits

Salary: USD 297,600 - 446,400 annually

Equity and Bonus:Equity

Key Requirements

•20+ years of experience in software and security architecture, including at least 10 years focused on application-layer security.
•Proven ability architecting complex application security systems across WAAP, API security, DDoS mitigation, bot protection, and malware detection.
•Deep understanding of L7 protocols (HTTP/2, HTTP/3, WebSockets, gRPC) and application security standards (OWASP Top 10, NIST, MITRE ATT&CK).
•Strong technical knowledge of TLS/certificate management and identity & access protocols (OAuth2, OIDC, SAML) with secure session management.
•Familiarity with zero trust, policy-as-code, multi-tenant SaaS designs, and runtime enforcement in Kubernetes-based container platforms (Kubernetes, Istio, Envoy).

Experience:20+ yearsCybersecurityApplication-layer securityWAAPSaaSCloud-native

Skills:Attention to detailProblem-solvingCommunicationMentorship

Tech Stack:WAFDDoS mitigationAI SecurityBot DefenseAPI SecurityTLS inspectionIdentity-aware accessF5 Distributed Cloud ServicesBIG-IPNGINXHTTP/2HTTP/3WebSocketsGRPCOWASP Top 10NISTMITRE ATT&CKTLSCertificate managementOAuth2

Company Brief

Provides application delivery networking, load balancing, and security solutions for on-premises and cloud environments, helping organizations optimize, secure, and scale applications and APIs across multi-cloud infrastructures.

Industry: Networking Equipment

Company Size: Enterprise (1,001+ employees)

Revenue: USD 1B+

Growth: Public Company

Valuation: Public Company (Market Cap in USD)

Funding: IPO / Publicly Listed

Headquarters: Seattle, United States

Founded: 1996

Glassdoor: 3.8

Website LinkedIn

Loading job details...

Preparing the role view and application actions.