Muhammad Salik Shoaib
Riyadh,Saudi Arabia
Summary
Senior Network Security Engineer with a master's degree in
telecommunications, and relevant certifications. Purely hands-on
approach and a technical mindset for designing and implementing
complex Network Security solutions, including Firewall, WAF, EGW, EPP, ADC, DNS, SIEM, and DLP, among others.
Overview
11
11
years of professional experience
6
6
years of post-secondary education
Work History
Senior Network Security Engineer
2P - العرض المتقن للخدمات التجاریة
Riyadh, Saudi Arabia
03.2022 - Current
- Managing F5 LTM implementations, operations and troubleshooting for 2P and 2P managed services customers.
- Managing application security F5 ASM, Imperva.
- Managing 2P PKI and application hosting infrastructure.
- Responsible for deployment and operations for data security: Forcepoint DLP
- Identity: Beyond Trust PAM, Forti MFA.
- SOC: Forti SIEM, Tenable.
- EPP and EDR: Kaspersky
- Firewalls: FortiGate, PaloAlto, Checkpoint.
- Email Security: Fortimail.
- Designed and migrated 2P HQ datacenter to new location, that includes above security equipments, IPSEC tunnels with all customers, 2P SMS services. Exchange, Global DNS, SIP trunks for 2P Contact center etc.
- Deployed, configured, and operationalized DR site for 2P within a single day, that includes FG1101 FW, F5-LTM, Forti mail.
Providing consultency and technical support for managed services
customers. - Managing compliance and frameworks like NIST and ISO27001.
- Managing 2P compliance and technical documentation.
- Supervising health check fpr all SOC equipments.
Senior Network Security and System Engineer,
Gaminations
Lahore, Pakistan
09.2019 - 01.2022
- Configured and maintained Cisco ASA (cluster), Palo Alto, Sophos XG, Watch Guard Firewalls, routers, and switches.
- Performed LAN, DMZ, and internet facing security scanning of mission critical devices on corporate and guest network for potential
vulnerabilities, malicious programs and recommended appropriate
actions. - SAS and physical infrastructure architecture, design, and operational
support. - Configuration for Load Balancer BigIP F5
- Reviewed and recommended secure system configuration for
workstations and laptops, and provided security recommendations - Manage SSL PKI for various clients
- Manage internal CA for clients for various applications
- Health and Availability Management of all Client servers, routers and switches
- Creation and updates of technical documentation and diagrams as
appropriate - Applying update to the system with security and important patches
- Coordinate with multiple vendor teams, significant projects and
develops standards around which others will operate - Design and contribute heavily to network security architecture
including firewalls, WAFs, network segmentation, VPC, and VPNs.
Executive Engineer NOC
Wateen Telecom
Lahore, Pakistan
08.2015 - 08.2019
- T-Shooting of Cisco Switches, Routers and firewalls.
- Implementing security policies using ACL, ASA Firewall.
- Replacement, patching of Router, Switches, Firewall.
- VLAN management, VTP, STP, PVSTP, Ether channel, MLS, Inter-VLAN routing.
- Working on Remedy ticketing system to address customers Network
related issues IP management. - IPsec Site to Site VPN Configuration.
- Installation, Configuration, and Monitoring of DNS, Active Directory,
DHCP, FTP, SMTP, Web Server IIS, Apache. - Installation of Java applications Tomcat Apache, Web Logic Server.
- Daily support with customers on all levels to help resolve IT, and security issues, and provide answers on time in both Manage Engine and on-call and maintain SLAs.
- VMWare and Hyper-V 2012, 2008R2 server installation, auditing and updating the virtual servers.
- Management of Public key infrastructure PKI for certificates
Network Engineer
Diamond Foam Pvt Ltd
Lahore, Pakistan
02.2014 - 03.2015
- Deployed and managed CISCO Switches and Routers for Diamond Foam new Head Office Lahore
- VLAN, EtherChannel implementation • from Scratch
Providing high availability among VLANs (HSRP for VLAN interfaces in core Switches) - Implementing security policies using Fortinet Firewall.
- Replacing branch hardware with new 2851 routers and 2960 switches.
- Implementing Switch Network Security Solutions like port security,
Dynamic ARP inspection - IPsec Site to Site VPN Configuration
- Installation, Configuration and Monitoring of DNS, Active Directory,
DHCP, SMTP, Backup & Recovery
Education
Master of Engineering - Telecommunication Engineering
University of Lahore
Lahore-Pakistan 09.2017 - 09.2019
Bachelor of Engineering - Computer System Engineering
BZU Multan
Multan-Pakistan 08.2009 - 08.2013
Skills
- WAF(Imperva,F5 ASM
- ADC (F5-LTM)
- NGFW (FortiGate, Check Point, Palo Alto)
- EPP (Kaspersky)
- PAM (Arcon and Beyond Trust)
- MFA (Forti Authenticator)
- Email Security (Forti Mail)
- DLP (Force Point DLP)
- VPN (GRE VPN, IPSEC VPN, SSL VPN)
- DNS (Appliansys DNS, BIGIP-DNS)
- Patch Management (ManageEngine)
- Vulnerability Scanner (Tenable)
- SIEM (Forti SIEM)
- PKI
CERTIFICATION AND TRAININGS
- BIG-IP ASM Specialist (303) Certified
- BIG-IP LTM Specialist: Maintain and Troubleshoot (301b) Certified
- BIG-IP LTM Specialist: Architect, Setup and Deploy (301a) Certified
- BIG-IP LTM – TMOS Administration (201) Certified
- BIG-IP LTM Application Delivery Fundamentals (101) Certified
- CISCO-CCNP-SCOR Certified
- Fortinet NSE 1, 2 and 3 Security Associate Certified
- Fortinet NSE 4 – Network Security Professional Certified
- Fortinet NSE 7 – Enterprise Firewall 7.0 Certified
- Palo Alto PCNSE Certified
- ACFE Omni Switch LAN Certified
- CCNA (Route and Switch) Certified
- CCIE Security Boot Camp (Training)
- Aruba Certified Clearpass Assosiate (Training)
IMPLEMENTED PROJECTS
- Implimentation of BIGIP-LTM for 2P HQ and its customers.
- Implimentation of Fortigate Firewalls (FG1101, FG200, Forti-Manager) Paloalto Firewalls (PA-3250, 800, 500) and Barracuda Firewall
- Arcon PAM Deployment
- Fortianalyzer, Fortimail, Forti SIEM
- BIGIP-DNS r2600
- 2P new DR site deployment
- Migration 2P HQ DC from KHZ to QIR site
- MFA deployment
- Endpoint security (kaspersky)
Timeline
Senior Network Security Engineer
2P - العرض المتقن للخدمات التجاریة
03.2022 - Current
Senior Network Security and System Engineer,
Gaminations
09.2019 - 01.2022
Master of Engineering - Telecommunication Engineering
University of Lahore
09.2017 - 09.2019
Executive Engineer NOC
Wateen Telecom
08.2015 - 08.2019
Network Engineer
Diamond Foam Pvt Ltd
02.2014 - 03.2015
Bachelor of Engineering - Computer System Engineering
BZU Multan
08.2009 - 08.2013
Similar Profiles
Lance WinterLance Winter
Travelling SEA at -Travelling SEA at -
Paula Andra MateiPaula Andra Matei
Maternity leave at -Maternity leave at -
Collin GravesCollin Graves
CEO/Owner Construction Business at -CEO/Owner Construction Business at -