Network and Security Engineer
I design, deploy and defend enterprise network infrastructure. I hold overall responsibility for the network across 31 IMARAT facilities nationwide, from large offices carrying 600 concurrent users down to small sites of 50, built on FortiGate, Palo Alto, Cisco and Huawei with Zabbix and Wazuh for monitoring and threat detection. I also build the systems I support: my visitor management platform runs at reception every day.
Facilities nationwide
31Network infrastructure I own
Peak concurrent users
600At the largest sites
Availability
99.9%Sustained across sites
Mean time to resolve
45 minReduced from 4 hours
Targeting
I work where the network, the servers and the application meet. That is why an outage rarely stays a mystery for long.
Overall responsibility for the estate across 31 IMARAT facilities: FortiGate and Palo Alto perimeter policy, Cisco and Huawei switching and routing, VLAN segmentation, and site to site VPN interconnect with QoS shaped links.
A Zabbix NMS polling SNMP and syslog across the estate, alerting into Microsoft Teams, with Wazuh providing centralised security monitoring. Mean time to resolution fell from 4 hours to 45 minutes.
When an infrastructure problem needs software, I write it. The visitor platform running at reception is mine end to end: schema, API, front ends, hardening, deployment and tests.
Microsoft Certified: Azure Administrator Associate
MicrosoftSeptember 2023
Google Cybersecurity Professional Certificate
GoogleDecember 2024
Google IT Support Professional Certificate
GoogleNovember 2024
Fortinet Network Security Expert (NSE 1, 2, 3)
FortinetAugust 2023
Bachelor of Science, Computer Science
University of Agriculture
Peshawar, KPK · Nov 2021 to Jun 2025
Cyber Security
Network Security, Ethical Hacking, Threat Detection, Risk Management
Mar 2024 to Jun 2024
Cloud Computing
AWS, Azure, Windows Server Administration, VMware vSphere
May 2023 to Dec 2023
Networking
CCNA, CCNP Routing and Switching
May 2023 to Sep 2023
The current role in full. Earlier roles open if you want them.
IMARAT · Islamabad, ICT
Hold overall responsibility for the network across 31 IMARAT facilities nationwide, from firewall policy and routing through monitoring, virtualisation and identity.
Earlier
Four products in production and the infrastructure programmes behind them. Open any card for the stack and the detail.
Self hosted visitor sign in, pre registration and reporting for 31 office locations
A visitor platform covering desk sign in and sign out, pre registration with emailed QR passes, post visit feedback and management reporting. Built end to end on Node.js and Express over PostgreSQL, deployed to Ubuntu as a systemd service behind nginx with TLS.
Sales leads that name a decision maker, with a source behind every field
A B2B lead platform that returns the named owner behind a real business together with their role, their company and the business contact that company publishes. Every field links to where it came from, and a value that was never published stays an empty cell rather than becoming a guess. Findings carry a confidence label and a relevance score out of 100.
Independent network, infrastructure and security engineering practice
The service practice I run directly: network design, monitoring, segmentation, disaster recovery and the deep dive troubleshooting that other tiers could not close. One engineer end to end, remote worldwide, attending in person when the fault is physical. Vendor neutral, with no hardware resale and no referral arrangements.
Open source intelligence lookups where every finding carries its provenance
An investigation tool that accepts an email address, username, domain, IP address, URL, autonomous system number, certificate fingerprint or cryptocurrency address, and returns what public sources actually say about it. Every finding states its source and how far it can be trusted, using four fixed confidence labels rather than presenting everything as equally certain.
Routed and segmented network across 31 IMARAT facilities nationwide
Overall responsibility for the network estate across 31 facilities nationwide, from large offices carrying 600 concurrent users to small sites of 50: FortiGate and Palo Alto perimeter policy, Cisco and Huawei switching and routing, VLAN segmentation, and site to site IPsec and SSL VPN interconnect with QoS shaped links.
Also delivered
Zabbix NMS with Teams alerting, plus Wazuh for centralised security monitoring
Built the observability layer for the IMARAT network. Zabbix polls SNMP and ingests syslog across the estate and pushes actionable alerts into Microsoft Teams. Wazuh provides centralised host level security monitoring, log analysis and threat detection.
Proxmox and Hyper V workloads with Microsoft 365 identity management
Run internal server workloads on Proxmox and Hyper V across Ubuntu Server and Windows Server guests, and administer organisation wide identity and collaboration through Exchange Online, SharePoint and Entra ID.
Greenfield network deployment for a new national registration facility
Deployed and configured the network infrastructure for a new NADRA facility from empty racks to full connectivity, then held it at target uptime through proactive testing and troubleshooting.
A visitor platform for 31 offices, built and run single handed. Sign in at the desk, pre registration by emailed QR pass, and management reporting.
Eight areas covering the network, the systems beneath it, the tooling that watches it, and the people work that surrounds it. Everything listed comes from work actually done.
Perimeter and edge policy on next generation firewalls, plus the detection layer behind it.
Perimeter and edge policy on next generation firewalls, plus the detection layer behind it.
If you are hiring for network, infrastructure or security engineering, I would be glad to talk through what I have built.
Direct
