Infrastructure Engineer Specialist - WAF & DevSecOps Automation

Company Overview At Motorola Solutions, we believe that everything starts with our people. We’re a global close-knit community, united by the relentless pursuit to help keep people safer everywhere. We build and connect technologies to help protect people, property and places. Our solutions foster the collaboration that’s critical for safer communities, safer schools, safer hospitals, safer businesses, and ultimately, safer nations. Connect with a career that matters, and help us build a safer future. Department Overview The Core Platforms & Services team is responsible for the development and operations of critical cloud infrastructure and platform services, in support of Motorola Solutions' public and hybrid cloud-based Software as a Service (SaaS) solutions for public safety customers. This team is part of Motorola Solutions’ Software Enterprise division, which offers secure, reliable and efficient team communications, workflow and operational intelligence solutions for mission critical public safety and enterprise markets throughout the world. Our services leverage Cloud Computing infrastructure on Azure, AWS & GCP to build at scale. Job Description We are seeking a highly specialized Infrastructure Engineer Specialist to lead our infrastructure security efforts with a primary focus on WAF configuration management and building robust DevSecOps automation frameworks . This role is pivotal in bridging the gap between infrastructure stability and automated security policy enforcement across our hybrid cloud environments. Basic Requirements Key Responsibilities 1. WAF Configuration & Lifecycle Management Advanced WAF Engineering: Lead the lifecycle of WAF solutions, moving beyond deployment to advanced configuration management, including automated rule tuning, signature lifecycle management, and high-precision threat policy optimization to minimize false positives. Automated Policy Enforcement: Develop and maintain automated workflows for translating business requirements into WAF traffic policies. Implement CI/CD pipelines that push WAF configurations as code, ensuring consistent policy application across environments. Optimization & Tuning: Proactively analyze WAF logs to identify and remediate complex bot traffic and sophisticated attack patterns, ensuring high availability and optimal performance. 2. DevSecOps Automation Frameworks Security Automation Architecture: Design and deploy automated frameworks that integrate security controls directly into infrastructure provisioning. Use tools like Terraform or Ansible to enforce security baselines as part of the standard deployment lifecycle. Security Observability: Configure SIEM forwarding and alerts for WAF and Network logs. You are responsible for detecting anomalies (like data exfiltration attempts or unusual traffic spikes), ensuring actionable intelligence is derived from system logs. Pipeline Security Integration: Orchestrate the integration of automated security gates (SAST/SCA/Container Scanning) into CI/CD pipelines. Ensure that "Security as Code" is not just a concept, but an automated reality for all infrastructure deployments. Policy as Code (PaC): Develop and manage automated policy engines (e.g., OPA, Sentinel) to programmatically reject non-compliant infrastructure changes before they reach production Required Qualifications Experience: 10+ years in Infrastructure Engineering or DevSecOps, with a significant track record in high-traffic environments. Primary Tech Stack: Extensive experience in WAF configuration management (e.g., F5, Signal Sciences, CloudFront WAF) and Nginx/Kubernetes Ingress Controllers. Automation Expertise: Strong proficiency in building DevSecOps automation frameworks. Expert-level skill in Infrastructure as Code (Terraform, Ansible) and scripting (Python or Go). Security Mindset: Deep understanding of automated threat mitigation, policy-as-code principles, and cloud-native security orchestration. Hybrid Expertise: Proven ability to manage and automate security policies across complex hybrid or multi-cloud infrastructures (AWS, GCP, Azure). Preferred Qualifications Proficiency in developing custom WAF rules (iRules, ModSecurity). Experience with GitOps workflows for infrastructure security. Certifications: Certifications such as CKS (Certified Kubernetes Security Specialist) or advanced security automation credentials. Travel Requirements None Relocation Provided None Position Type Experienced Referral Payment Plan No EEO Statement Motorola Solutions is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion or belief, sex, sexual orientation, gender identity, national origin, disability, veteran status or any other legally-protected characteristic. We are proud of our people-first and community-focused culture, empowering every Motorolan to be their most authentic self and to do their best work to deliver on the promise of a safer world. If you’d like to join our team but feel that you don’t quite meet all of the preferred skills, we’d still love to hear why you think you’d be a great addition to our team.