As a Senior Application Security Engineer, you will provide hands-on technical delivery for the migration of Web Application Firewall (WAF) capabilities to Cloudflare and/or Akamai. You will work closely with architecture, security, network, and application teams to execute migration waves, onboard applications, implement security policies, and support successful cutovers.
🏢 About Capco
Capco is a global consulting firm that delivers high-impact technology solutions for Tier 1 financial institutions. We work in a collaborative, flat, and entrepreneurial consulting culture, providing continuous learning, training, and industry certifications. Our team shapes the future of digital financial services and helps shape the future of digital transformation across FS & Energy.
🎯 The Role
You will play a key role in validating functionality, security, and performance, resolving technical issues, and supporting post-migration stabilization across complex enterprise environments.
✅ Key Responsibilities
Deliver end-to-end WAF migrations to Cloudflare and/or Akamai, including configuration, application onboarding, and deployment.
Implement and tune WAF security policies, rules, and controls in line with application and security requirements.
Execute DNS and traffic-routing changes and support integrations required for successful application migration.
Perform testing, troubleshooting, and validation to confirm functionality, security, and performance throughout migration waves.
Partner with architecture, security, network, and application teams to support cutover activities, resolve technical issues, and stabilize services following migration.
📌 Required Qualifications
10+ years of relevant experience in network security, application security, infrastructure engineering, or related technical roles, with substantial hands-on WAF experience.
Practical knowledge of DNS, HTTP/HTTPS, TLS, traffic routing, application delivery, and web security concepts.
Experience implementing and tuning WAF policies and security rules, troubleshooting application traffic, and resolving migration or production issues.
Demonstrated experience working collaboratively with architecture, security, network, and application teams to deliver complex technical changes.
⭐ Desirable Experience
Experience delivering large-scale WAF migration or modernization programs across complex enterprise environments.
Knowledge of Cloudflare and Akamai security, application delivery, and traffic management capabilities.
Experience supporting phased application migration waves, production cutovers, and post-deployment stabilization.
Familiarity with automation, scripting, APIs, or infrastructure-as-code approaches used to support security or infrastructure deployments.
Experience delivering security technology within financial services or another highly regulated environment.
🎁 Benefits
Comprehensive Benefits Coverage – 100% company-paid health, life, and disability insurance effective from Day 1 of employment
Retirement Savings Program – Registered Retirement Savings Plan (RRSP) with the option of receiving a matching employer contribution
Virtual Health Care – Company-paid program available to all employees and their dependents/partners
Employee & Family Assistance Program (EFAP) – Company-paid support services for employees and their dependents/partners
Parental Leave Top-Up – Enhanced parental leave benefits available from Day 1 of employment
New Parent Gift – A company-sponsored gift to celebrate the arrival of a new child
Wellness Support – Fitness reimbursement benefit to promote health and well-being
Business Coach from Day 1 – Personalized one-on-one coaching to support career growth, accelerate development, and help achieve your professional goals at Capco.
🛂 Visa & Eligibility
We’re committed to making our recruitment process accessible and straightforward for everyone. If you need any adjustments at any stage, just let us know – we’ll be happy to help. We value each person’s unique perspective and contribution. At Capco, we believe that being yourself is your greatest strength. Our #BeYourselfAtWork culture encourages individuality and collaboration – a mindset that shapes how we work with clients and each other every day.
