08/17/2026 updated
100 % available
Senior Network Security Engineer
Rome, Italy
Worldwide
CCNP R&S (2016)ServiceNow Security OperationsAmazon Web ServicesCisco Certified Entry Networking TechnicianCisco Certified Internetwork ExpertCisco Certified Internetwork ProfessionalCisco Certified Network AssociateCisco Certified Network ProfessionalCisco Certified Security ProfessionalCertified Wireless Network AdministratorCisco PIXCisco HardwaresCisco IOSCisco RoutersCisco Systems VPN ClientCloud Engineering
Firewall & Network Security
Extensive expertise in firewall and network security technologies including Cisco Firepower, ASA, ISE, Umbrella, Meraki, Fortinet FortiGate, FortiWeb, FortiAnalyzer, Juniper SRX, Palo Alto, Sophos, F5 ASM/LTM, VPN, SD-WAN, and HA configurations across enterprise, banking, government, and industrial environments.
Cloud & Edge Infrastructure Security
Hands-on experience designing and operating security architecture across AWS environments (VPC, IAM, CloudTrail, GuardDuty, EC2, S3, ECS, EKS) and Cloudflare (ZTNA, WAF, CDN, DNS), securing both cloud and on-premises workloads with edge protection and vulnerability management.
Network Architecture & Access Control
Deep knowledge of L2/L3 network design, routing, switching, VLAN segmentation, 802.1X, DACL, port security, site-to-site VPN, remote access VPN, and Zero Trust access architectures to improve control of enterprise traffic flows.
Network Security Monitoring
Proficiency in Wazuh (custom decoders, detection rules), IDS/IPS solutions (Snort, Suricata), and packet analysis tools (Wireshark, tcpdump, Zeek) for monitoring and improving visibility into platform-specific attack patterns.
SOC 2 Audit Support & Compliance
Experience supporting SOC 2 Type II renewals through evidence collection, control mapping, technical remediation, and audit support documentation including HLD, LLD, AS-IS, AS-Built deliverables.
Vulnerability Management
Established vulnerability management across infrastructure, containers, and web applications using Nessus, OpenVAS, Trivy, ZAP, Acunetix, and SonarQube, with ticket-based remediation tracking.
VMware & Cisco UCS Virtualization
Support for Cisco UCS and VMware vSphere environments as part of secure infrastructure deployments, including mentoring junior engineers on firewall and segmentation practices.
DNS-Layer Security & Threat Defense Integration
Deployment of Cisco Umbrella DNS-layer security integrated with Cisco Firepower Threat Defense to strengthen enforcement across DNS, web, and network layers.
Extensive expertise in firewall and network security technologies including Cisco Firepower, ASA, ISE, Umbrella, Meraki, Fortinet FortiGate, FortiWeb, FortiAnalyzer, Juniper SRX, Palo Alto, Sophos, F5 ASM/LTM, VPN, SD-WAN, and HA configurations across enterprise, banking, government, and industrial environments.
Cloud & Edge Infrastructure Security
Hands-on experience designing and operating security architecture across AWS environments (VPC, IAM, CloudTrail, GuardDuty, EC2, S3, ECS, EKS) and Cloudflare (ZTNA, WAF, CDN, DNS), securing both cloud and on-premises workloads with edge protection and vulnerability management.
Network Architecture & Access Control
Deep knowledge of L2/L3 network design, routing, switching, VLAN segmentation, 802.1X, DACL, port security, site-to-site VPN, remote access VPN, and Zero Trust access architectures to improve control of enterprise traffic flows.
Network Security Monitoring
Proficiency in Wazuh (custom decoders, detection rules), IDS/IPS solutions (Snort, Suricata), and packet analysis tools (Wireshark, tcpdump, Zeek) for monitoring and improving visibility into platform-specific attack patterns.
SOC 2 Audit Support & Compliance
Experience supporting SOC 2 Type II renewals through evidence collection, control mapping, technical remediation, and audit support documentation including HLD, LLD, AS-IS, AS-Built deliverables.
Vulnerability Management
Established vulnerability management across infrastructure, containers, and web applications using Nessus, OpenVAS, Trivy, ZAP, Acunetix, and SonarQube, with ticket-based remediation tracking.
VMware & Cisco UCS Virtualization
Support for Cisco UCS and VMware vSphere environments as part of secure infrastructure deployments, including mentoring junior engineers on firewall and segmentation practices.
DNS-Layer Security & Threat Defense Integration
Deployment of Cisco Umbrella DNS-layer security integrated with Cisco Firepower Threat Defense to strengthen enforcement across DNS, web, and network layers.
Experience
Professional experience10+ years
Freelancer since2026
Languages
EnglishFluentPersianNative speaker
Project history
Led security and infrastructure work across a 6-person engineering team, coordinating security standards, architecture reviews, and hands-on implementation across network, cloud, monitoring, and platform security. Designed and operated security architecture across 4 AWS environments using Cloudflare ZTNA, WAF, and CDN. Operated Wazuh security monitoring with custom decoders and detection rules. Deployed Cisco Umbrella DNS-layer security integrated with Cisco Firepower Threat Defense. Established vulnerability management using Nessus, OpenVAS, Trivy, ZAP, Acunetix, and SonarQube. Supported 2 consecutive SOC 2 Type II renewals.
Served as principal technical contact for enterprise network security projects covering scoping, design validation, LOM approval, implementation, and handover. Led a 4-engineer team across firewall, routing, switching, and security infrastructure projects. Designed and executed Juniper SSG to Juniper SRX firewall migrations using JUNOS. Delivered L2/L3 redesign and firewall architecture for Iran Ports & Maritime Organization using Cisco Firepower 4120. Implemented clustered Cisco Firepower 9300 with FTD module for a national broadcasting environment. Redesigned Tejarat Bank internet banking security using 3-tier isolation with Juniper SRX, Cisco Firepower, Fortinet, FortiWeb, FortiAnalyzer, and Cisco routing/switching.
Promoted from Network Administrator to Senior Network & Security Engineer and led a 3-engineer team on firewall, routing, switching, wireless, virtualization, and network security projects. Delivered 16+ projects across banking, manufacturing, energy, government, academic, and industrial environments using Cisco, Fortinet, Juniper, Palo Alto, F5, Sophos, and MikroTik. Designed L2/L3 networks, segmentation models, VPN connectivity, firewall policies, and secure access architectures. Implemented Cisco ISE 802.1X, DACL, switch hardening, port security, and network access controls. Supported Cisco UCS and VMware vSphere environments.