Hammad Halim
Senior Network Security Engineer
Islamabad,IS
Summary
A Network Specialist with Over 11 years experience in the field of Information Technology, Network, System & Security. Extensive experience of designing, deploying, Integrating Networks, Network Operations, Maintenance, Troubleshooting and Hardware, Software Support. Major expertise lie in the Network Security, Routing and Switching.
Overview
12
12
years of professional experience
6
6
years of post-secondary education
Work History
Senior Network Security Engineer
Beginning Solutions IT KSA
09.2022 - Current
- As Senior Network Security Engineer my responsibility is to design, implement, and manage organization's computer networks to ensure optimal performance, security, and reliability. This role involves collaborating with cross-functional teams to identify network and system requirements, planning and implementing network and system solutions, troubleshooting network issues, and maintaining network documentation.
- Key Responsibilities and Projects:
- Migration of Sophos XG Firewall to Fortinet 200F Firewall
- Installation, Configuration and deployment of Symantec Endpoint Security solution for customer.
- Configuring SDWAN and managing routing in multihoming scenario using policy-based routing in Fortinet firewall.
- Providing support for all-cisco environment management, configuration of Cisco Routers, Switches, FMC, FTD, ISE.
- Providing ongoing support for configuration of Windows Server 2019 Active Directory, DNS, DHCP, SMB.
- Providing support for management and configuration of Microsoft Office 365, Outlook, Teams, Exchange Online.
- Performed regular audits of network devices, ensuring compliance with industry standards and regulatory requirements
- Established secure remote connectivity options for employees, enabling secure access while working remotely or traveling abroad
- Developed and maintained company-wide endpoint security solutions
- Managed company Bring Your Own Device program, onboarding employee devices and verifying absence of inherent security threats
Sr. Engineer/Security Operations & Maintenance
Etisalat UAE
05.2015 - 04.2022
- As “Sr. Engineer/Security Operations & Maintenance” in Etisalat major responsibility is to ensure Network and Cloud Security of Etisalat UAE. Coordinating with the Security Planning and SOC for Network Security Analysis, Network architecture & Design of different Projects and Infrastructure, Management of Security Appliances, Incident response to network security threats, ensure adherence to Info. Security policies and procedures.
- Key Responsibilities and Projects:
- Providing ongoing L2 Support for timely resolution of tickets related to security incidents raised by different section of Etisalat.
- Providing ongoing support for configuration of Policies, IPSEC VPNs, SSL VPNs, IPS, Application control, Web filter on Fortinet and and Juniper firewalls.
- Providing on going support for Configuring, Securing, deploying, troubleshooting on Azure cloud Infrastructure.
- Regularly upgrading firmware by applying patches to Juniper and Fortinet Firewalls in order to keep security updated.
- Migration of EOL Juniper SRX 3600 firewalls to SRX 5400 firewalls.
- Migration of EOL Foritnet 600C firewalls to Fortinet 600 E firewalls.
- Mentored junior engineers, providing guidance in best practices and fostering professional growth opportunities
- Developed technical documentation for seamless communication of complex engineering concepts among team members and stakeholders
- Collaborated with stakeholders to define project requirements, establish goals, and develop actionable strategies for success
- Evaluated vendor proposals to select the most suitable partners based on cost-effectiveness, capabilities, delivery schedules, and overall value proposition
- Reduced production downtime by developing comprehensive maintenance plans and training staff on preventive measures
Network Engineer
Askari Bank
01.2012 - 01.2014
- As network engineer responsibility is to provide nationwide network support to 300 + Askari Branches/Sub-Branches/Business units. To ensure installation, configuration and maintenance network equipment at Branches and its integration to centralized infrastructure. Contributing to Standard Operation Procedures (SOPs), Work Plans and change control forms.
- Key Responsibilities and Projects:
- Answer all trouble calls/emails/TAC registered cases.
- Coordination with service providers to configure and troubleshoot WAN Links.
- Monitoring connectivity of all circuits, network devices and ATMs through NMS ( Solar Wind Orion, CA Spectrum) and MRTG. And taking appropriate actions against down communication links from NMS and following up with relevant service provider.
- Trouble shooting Network related issues in Core consisting of Juniper(SRX3600, ISG2000, SSG550, EX8208, EX4200)
- Designed and deployed scalable network infrastructure for increased efficiency and reliability
Education
Master of Science - Electronics Engineering
Muhammad Ali Jinnah University
Islamabad, Pakistan 08.2008 - 10.2010
Bachelor of Science - Telecommunication Engineering
NUCES-FAST
Lahore, Punjab, Pakistan 08.2003 - 07.2007
Skills
Firewall Management
Intrusion Detection
Network Troubleshooting
Network Security Management
Security Information and Event Management
Endpoint Protection
Security Incident Response
Secure Network Architecture
Patch management
Competence Overview
- Extensive Hands-on Experience with various multi-vendor Security Solutions such as Next Generation Firewalls, IPS, DDoS Solutions, VPN Gateways, SIEM & Audit Tools.
- In Depth experience in planning, designing, developing & implementing Secure LAN/WAN Networks & IT Systems in Large Scale Data Center, Enterprise & Telecom Core and cloud Infrastructure.
- Special Interest in Security Architecture, Infrastructure Security & Security Operations.
- Accomplished track record of Building SOPs, Security Hardening Guidelines, ensuring Compliance with Industry Standards, drafting Best Practices & Procedures documents involving Change Management, Incident & Problem Management and Disaster Recovery.
Hands On Experience
- Juniper SRX Series (3600, 5400)
- Juniper EX Series Switches (8200 Series and 4200 Series)
- Fortinet (fortigate 40F, 601E, Azure Virtual Appliance)
- Fortianalyzer and Fortimanager
- Palo Alto (PA850, PA820)
- Cisco ASA, FTD, FMC
- Cisco ISE
- Azure Virtual Network, Firewall, Security Group
- Windows Server 2019 (DNS, DHCP, Active Directory, SMB)
- Microsoft Office 365
Technologies And Techniques
- Network Security (IDP, UTM , IPSEC VPN, NAT, Antivirus, DoS protection, Web filtering, Application control)
- Network protocols OSPF, BGP
- Network Security groups, role based access control and network appliance in Azure cloud
- IP Network Configurations, O & M and Troubleshooting
- High Availability Protocols VRRP, Chassis clustering
- Managing the Windows Server enviornment
- Configuring managing and operating Microsoft 365 suite
Education Training Qualifications
- MS Electornics Engineering (2010)
- BS Telecommunication Engineer (2007)
- CCNP Security Certified (2023)
- JNCIP Security Certified (2020)
- Microsoft Azure Fundamentals (AZ-900) Certified (2020)
- Fortinet NSE4 Certified (2020)
Personal Qualities
Enthusiastic, with an eye for details, communicative, result oriented, adaptable.
Languages
English (spoken and written)
Timeline
Senior Network Security Engineer
Beginning Solutions IT KSA
09.2022 - Current
Sr. Engineer/Security Operations & Maintenance
Etisalat UAE
05.2015 - 04.2022
Network Engineer
Askari Bank
01.2012 - 01.2014
Master of Science - Electronics Engineering
Muhammad Ali Jinnah University
08.2008 - 10.2010
Bachelor of Science - Telecommunication Engineering
NUCES-FAST
08.2003 - 07.2007