CISSP-certified Network Security Consultant with expertise in designing, implementing, and securing enterprise network infrastructures. Strong background in security architecture, firewalls, VPNs, segmentation, access control, and infrastructure hardening, aligned with industry standards and security frameworks. Experienced in building networks from scratch and developing strong technical documentation, including HLDs, LLDs, standards, and procedures.
Overview
12
12
years of professional experience
6
6
years of post-secondary education
1
1
Certification
Work history
Network Security Consultant
Red Sea Global
Riyadh, Saudi Arabia
2026.03 - Current
Acting as SME for network security, driving enhancement and modernization of RSG HQ security architecture.
Managing end-to-end migration of network infrastructure from RSG modular data centers in Umluj and all remote sites to new data center facilities.
Leading the enhancement of RSG existing network and security architecture in line with industry best practices.
Senior Network Security Engineer
2P - العرض المتقن للخدمات التجارية
Riyadh, Saudi Arabia
2022.03 - 2026.03
Managed and supported enterprise network security, application security, identity and access management, SOC, endpoint security, email security, and monitoring solutions across 2P and managed services customer environments. i.e, ADC, WAF, GTM, PKI, FortiGate, Palo Alto, Check Point, Email Security, DNS Security Forcepoint DLP, BeyondTrust PAM, Forti MFA, FortiSIEM, Tenable, EPP, IPS, SDN, VPNs.
Conducted network security, compliance, and risk posture assessments for multiple managed services customers, developed as-is assessment reports, and led security enhancement roadmaps to improve compliance and overall security maturity.
Led successful design, migration, and deployment of 2P HQ data center to new location, including firewalls, F5 LTM, PKI, application hosting, IPsec tunnels, Exchange, Global DNS, SMS services, and SIP trunk integrations.
Delivered disaster recovery (DR) implementation, technical consultancy, operational support, compliance alignment, and technical documentation for 2P DR.
Senior Network Security and System Engineer
Gaminations
Lahore, Pakistan
2019.09 - 2022.01
Configured and maintained Cisco ASA (cluster), Palo Alto, Sophos XG, Watch Guard Firewalls, routers, and switches.
Performed LAN, DMZ, and internet facing security scanning of mission critical devices on corporate and guest network for potential vulnerabilities, malicious programs and recommended appropriate actions.
SAS and physical infrastructure architecture, design, and operational support.
Configuration for Load Balancer BigIP F5, Kemp Load balancer.
Reviewed and recommended secure system configuration for workstations and laptops, and provided security recommendations
Manage SSL PKI for various clients
Manager internal CA for clients for various applications
Health and Availability Management of all Client servers, routers and switches
Research new solutions and makes recommendations on go forward Cloud and infrastructure strategies
Creation and updates of technical documentation and diagrams as appropriate
Applying update to the system with security and important patches
Coordinate with multiple vendor teams, significant projects and develops standards around which others will operate
Design and contribute heavily to network security architecture including firewalls, WAFs, network segmentation, VPC, and VPNs.
Executive Engineer NOC
Wateen Telecom
Lahore, Pakistan
2015.08 - 2019.08
T-Shooting of Cisco Switches, Routers and firewalls.
Implementing security policies using ACL, ASA Firewall.
Evaluated bandwidth requirements and implemented required network updates.
Replacement, patching of Router, Switches, Firewall.
Working on Remedy ticketing system to address customers Network related issues IP management.
IPsec Site to Site VPN Configuration.
Installation, Configuration, and Monitoring of DNS, Active Directory, DHCP, FTP, SMTP, Web Server IIS, Apache.
Amazon and Azure Cloud Services.
Installation of Java applications Tomcat Apache, Web Logic Server.
Daily support with customers on all levels to help resolve
IT, and security issues, and provide answers on time in
both Manage Engine and on-call and maintain SLAs.
VMWare and Hyper-V 2012, 2008R2 server installation, auditing and updating virtual servers.
Management of Public key infrastructure PKI for certificates distributions and secure communication (Digital Certificates).
Network Engineer (Team Lead)
Diamond Foam Pvt Ltd.
Lahore, Pakistan
2014.02 - 2015.03
Deployed and managed CISCO Switches and Routers for Diamond Foam new Head Office Lahore
VLAN, EtherChannel implementation from Scratch
Providing high availability among VLANs (HSRP for VLAN interfaces in core Switches)
Implementing security policies using Fortinet Firewall
Replacing branch hardware with new 2851 routers and 2960 switches
Implementing Switch Network Security Solutions like port security, Dynamic ARP inspection
IPsec Site to Site VPN Configuration
Installation, Configuration and Monitoring of DNS, Active Directory, DHCP, SMTP, Backup & Recovery
Education
Bachelor of Engineering -
Computer System Engineering
2009.08 - 2013.08
Master of Engineering -
Telecommunication Engineering
2017.09 - 2019.09
Skills
WAF, ADC, NGFW (Multi Vendors)
PAM, MFA, ZTNA, EPP, DLP
Email Security,
DNS, GTM, PKI
Vulnerability Scanning
Security architecture designing
Incident response management
Risk analysis
Compliance auditing
Business continuity planning
Certification
ISC2 CISSP Certified
BIG-IP LTM Specialist: Architect, Setup and Deploy (301a) Certified
Senior Network Infrastructure Security (Team Lead) at Sahara international petrochemical companySenior Network Infrastructure Security (Team Lead) at Sahara international petrochemical company