J. Galloway

F5 Security Engineer

I design, secure and run F5 BIG-IP platforms in large enterprise and financial environments, and have for more than ten years.

Most of my work is load balancing, global DNS, remote access and application security: planning the architecture, migrating hardware, tuning WAF policy and being the person who gets called when traffic stops flowing. Day to day, BIG-IP operations run on automation rather than hand-typed changes, from onboarding a new device to deploying a new application in a few minutes.

Focus

Platforms
F5OS-A on rSeries, tenants and BIG-IP VE. Led the migration of end-of-life iSeries HA pairs to rSeries, from design through decommissioning
Automation
Fully automated daily BIG-IP tasks, upgrades and deployments with Ansible, Declarative Onboarding and AS3, integrated with BlueCat for DNS and Keyfactor for SSL certificate lifecycle
Application security
Advanced WAF with bot defense and API protection, AFM network firewall and DDoS protection, TLS hardening and cipher policy
Access Policy Manager
SSL VPN, OAuth, SAML and Kerberos single sign-on, certificate-based authentication
Traffic & DNS
LTM, BIG-IP DNS (GTM) and iRules, including modernizing older iRules into native LTM policies
Operations
BIG-IQ application self-service, Telemetry Streaming and Grafana dashboards, and vulnerability response across the fleet

Background