Muhammad Ismail

Cybersecurity Engineer
10years of work
7years in Cybersecurity
5years with Nessus
5projects

Overview

Network and security consultant with 9+ years of hands-on experience designing and deploying enterprise network and security architectures in regulated environments. Specialized in SASE and cloud security solutions, and has led multi-vendor deployments involving next-generation firewalls, DNS security, and content/email security components. Experience includes technical leadership for end-to-end security architecture reviews and complex migrations across KSA, UAE, Qatar and Pakistan.
Phone

Timeline

Senior Network Security Consultant · Senior
HelpAG · Full-Time
Nov 2021 to Present 5 Years In office
Led the implementation of Netskope SASE capabilities including SWG, CASB, DLP, ZTNA, endpoint DLP and SMTP proxy for multiple government and commercial customers. Deployed and tuned FortiGate and Palo Alto firewalls across on-prem and Microsoft Azure environments in KSA, UAE and Qatar. Implemented Infoblox DNS Security and OPSWAT MetaDefender components and carried out security configuration reviews for firewalls and Windows/Linux systems using manual methods and vulnerability scans.
FortiGate
Palo Alto NGFW
Azure
Nessus
Linux
Windows
Senior Network and Security Engineer · Senior
Qatar Datamation Systems · Full-Time
Jun 2019 to Oct 2021 2 Years 4 Months In office
Designed and optimized enterprise networks using Cisco, Aruba, Palo Alto, Fortinet, Juniper and KEMP technologies for government and commercial clients. Deployed and operated FortiGate firewalls with high availability and Azure deployments, managed Palo Alto NGFWs with Panorama, and supported Aruba wireless with controllers and ClearPass. Delivered migration work including Juniper SRX to FortiGate and produced high- and low-level design documentation, including routing, VPN and security architecture support.
FortiGate
Palo Alto NGFW
Azure
Senior Network Engineer · Senior
DWP Technologies · Full-Time
Aug 2016 to Apr 2019 2 Years 8 Months In office
Implemented large-scale enterprise routing, switching, wireless and firewall solutions for Cisco and Huawei environments, including USG firewall deployments and wireless controller/access point setups. Led the Pakistan Smart & Safe University initiative covering Huawei firewall and wireless components, along with NMS and centralized controller configuration. Designed and deployed IP/MPLS and L2/L3 VPNs and produced HLD/LLD documentation with post-implementation support.
Middlesex University
Master's Degree · Telecommunication Engineering
2011–2012 London, England

Projects

Pakistan Smart & Safe University (Huawei wireless and surveillance)
Served as team lead and technology architect for a large Huawei wireless and surveillance program. Covered design and deployment of Huawei firewalls, wireless LAN controllers, and supporting NMS and centralized controller components. Ensured integration readiness and provided knowledge transfer for operational teams.
Azure FortiGate and Palo Alto firewall deployments (Confidential, Dubai)
Delivered a multi-site Azure rollout including FortiGate with FortiManager and Palo Alto NGFW with centralized Panorama management. Coordinated configuration and central management to support consistent policy handling. Supported the deployment across multiple FortiGate and Palo Alto instances within the customer environment.
Security configuration and data center architecture reviews (Riyadh)
Performed configuration reviews for firewalls, WAF, routers and switches, and validated related settings for Windows and Linux systems. Conducted end-to-end security architecture assessments for enterprise data centers. Delivered structured outputs covering architecture findings and remediation direction.
Infoblox DDI deployment (Multiple Govt., Riyadh)
Deployed Infoblox DDI with core DNS and DHCP capabilities and enabled reporting and analytics. Set up network discovery functions to support visibility and operational monitoring. Coordinated implementation activities needed for service readiness in the production environment.
Netskope SASE deployment (Multiple Govt., Riyadh)
Implemented Netskope SASE capabilities across SWG, CASB, DLP, and ZTNA, including endpoint DLP and SMTP proxy. Configured required integrations and policies as part of the broader SASE rollout. Supported Cloud Exchange setup to enable service connectivity within the customer environment.

Technical skills

DevOps
Azure
Linux
Windows
DHCP
DNS
BGP
MPLS
OSPF
Cybersecurity
Palo Alto NGFW
FortiGate
Nessus
DLP
Prisma Cloud
Zscaler
Sophos
Kaspersky

Job preferences

Work permits
United States
Open to AI agents: they read this profile and start a dialog through Alionalion.io/@muhammad-ismail/mcp
Alion · People, companies and AI agents in one graphalion.io/@muhammad-ismail