> Markdown version of [/jobs/ext/4031833-akamai-sme-application-security-architect](https://www.wearedevelopers.com/jobs/ext/4031833-akamai-sme-application-security-architect). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Akamai SME / Application Security Architect - **Company:** Intersources Inc. - **Location:** Elk Grove Village, IL, United States - **Experience:** Experienced - **Contract:** Permanent contract - **Skills:** Kona Site Defender, Application Programming Interfaces (APIs), Application Firewall, Software as a Service, Cloud Computing Security, Cyber Security, System Configuration, DDoS Mitigation, Virtual Private Networks (VPN), Network Security, Network Architecture, Network Segmentation, Open Web Application Security, Performance Tuning, Release Management, Cloud Services, Akamai, Zero Trust Network Access, Web Application Security, SQL Injection, Systems Integration, Traffic Analysis, Management of Software Versions, Web Applications, Web Traffics, Enterprise Software Applications, Computer Network Technologies, Software Security, Cybercrime, Search Engines - **Published:** October 30, 2026 - **Apply:** https://www.juju.com/job/15_3be1297d ## About the Role Industry experience needed?: Cyber Networking Security In depth knowledge of Akamai Tool Years of experience needed: 5 they want hands-on proficiency in configuring, managing, and monitoring Akamai's cloud security portfolio to protect web applications, APIs, and enterprise infrastructure from cyber threats. 1. Edge & Application Security (WAF/API), Akamai Security Toolset (5 years): Hands-on expertise in the Akamai Console managing edge security policies, version releases, and rule sets. Bot Management (4 years): Deep experience reviewing Custom Bot Categories, building custom conditions, and managing client lists. Traffic Analysis & Troubleshooting: Proven capability to independently evaluate complex web traffic patterns and deploy appropriate allow/deny responses without third-party vendor oversight. Application Security (4-6 years): Advanced enterprise-level application security (P3 level equivalent) and networking knowledge. NICE-TO-HAVES Experience working within Accenture or similar enterprise-grade systems integration environments. Structured technical documentation and training/upskilling experience for engineering teams. Akamai certifications or formal application security credentials. DISQUALIFIERS Candidates requiring hands-on direction or vendor guidance to interpret Akamai traffic patterns and implement deny rules. Candidates with only basic perimeter networking experience who lack direct, hands-on administration of the Akamai Console. Inability or unwillingness to train and mentor internal team members, * Akamai Web Security Suite (5 years): Deep, hands-on experience in the Akamai Console managing traffic policies, bot management, client lists, and configuration version promotion. * Application Security (4-6 years): Advanced proficiency in threat analysis, edge security controls, and traffic inspection. * Bot Management & Traffic Policy Design (4 years): Demonstrated experience configuring Custom Bot Categories and fine-tuning granular Allow/Deny rules. * Cybersecurity & Network Infrastructure (5 years): Solid foundation in edge architecture, web application firewall (WAF) concepts, and HTTP/S traffic diagnostics. ADDITIONAL DESIRED SKILLS * Edge security configuration versioning, release validation, and lifecycle promotion. * Knowledge transfer, technical mentoring, and creation of Non-Prod training sandboxes. * Enterprise systems integration and multi-environment (Dev/Stage/Prod) configuration mirroring. ## Description * App & API Protector: Tuning Web Application Firewall (WAF) rulesets to block OWASP Top 10 vulnerabilities (SQL injections, Cross-Site Scripting) without causing false positives. * API Security: Discovering shadow APIs, monitoring API traffic behaviors, and mitigating API-specific exploits. 2. Traffic Control & Threat Mitigation * Bot Manager: Analyzing behavioral signatures to distinguish between good bots (like search engines), malicious credential stuffing bots, and automated scraping tools. * DDoS Protection (Kona Site Defender / Prolexic): Managing rate controls, setting threshold alerts, and routing traffic during high-volume Distributed Denial of Service attacks to keep services online. 3. Zero Trust & Network Security * Guardicore Segmentation: Setting up micro-segmentation policies, mapping asset dependencies, and isolating critical cloud workloads to contain ransomware threats. * Enterprise Application Access (EAA): Configuring identity-aware proxy access to eliminate the need for traditional enterprise VPNs. Reason for opening: Critical business need to transition away from dependency on external Akamai SaaS vendor support; requires an expert to take immediate ownership of traffic analysis, bot policies, and Non-Prod configurations. Project Scope & Core Deliverables: Complete ownership of Akamai traffic evaluations, creation of custom bot categories, mirroring production rules to lower environments, creating security configuration versions, and successfully promoting them to Production. Team Enablement: The resource is directly expected to coach and upskill existing team members on Akamai console management and policy tuning., We are seeking an experienced Akamai SME / Security Architect to lead application security traffic analysis and rule configuration within our enterprise environments. In this role, you will analyze network and bot traffic patterns, transition from vendor-assisted evaluations to autonomous rule-making, and implement granular allow/deny policies across Non-Prod and Production environments. You will also serve as a technical mentor, empowering the broader cybersecurity team to master Akamai toolsets and configuration lifecycle management., * Review traffic evaluations conducted by Akamai SaaS personnel and provide technical feedback on analysis and deny policy implementation in Non-Prod environments. * Independently analyze Non-Prod traffic patterns, assess anomalies, and execute configuration changes without relying on vendor assistance. * Evaluate existing Custom Bot Categories and configure custom allowed/denied bot-traffic conditions within the Akamai Console. * Audit current production settings and accurately mirror Allow/Deny policies and rule sets into Non-Prod environments where appropriate. * Build, maintain, and update custom client lists within the Akamai Console to manage access controls. * Create, test, and promote new security configuration versions across Non-Prod and Production pipelines. * Upskill internal cybersecurity team members by providing hands-on training and mentorship within the Non-Prod Akamai environment., * Lead independent evaluations of web and bot traffic, identifying anomalies and configuring precise allow/deny rules within Non-Prod and Production environments. * Configure Custom Bot Categories, design custom conditions, and maintain client lists inside the Akamai Console. * Audit production rules and mirror configurations accurately within lower testing environments. * Create, validate, and promote security configuration versions from Non-Prod through to Production release. * Train and upskill internal security engineering colleagues on Akamai administration, best practices, and policy adjustments.