Mohamed S.

I secure networks so teams can work without downtime or risk. I am a network security engineer with 14+ years of hands-on experience designing, deploying, and hardening firewalls, VPN, and enterprise routing for SMBs and service providers. I focus on practical, rollback-safe changes that deliver measurable results and clear documentation. Core strengths and skills • Firewall platforms: Palo Alto (PAN-OS), FortiGate (FortiOS), MikroTik RouterOS, Cisco ASA/FTD • VPNs: GlobalProtect, AnyConnect, IPSec, WireGuard, site-to-site, and remote access designs • Services: firewall configuration, migrations, policy optimization, security audits, HA, UTM tuning, SSL decryption, NAT, and ACL design • Networking: VLANs, DHCP, QoS, routing, CAPsMAN, backup/restore, and performance tuning • Tools & practices: config management, change rollback, test checklists, runbooks, secure remote access, troubleshooting with packet capture and logs Selected outcomes • Typical results include large reductions in outages and faster recovery times, measurable cut in cloud costs from optimized routing/policies, and substantial threat blocking from properly tuned policies and App-ID/UTM. • completed multi-site Mikrotik VPN rollouts, FortiGate HA deployments, and Palo Alto migrations with zero-downtime cutovers. Certifications • CCNP Security • CCIE Security • Palo Alto Networks Certified Network Security Engineer (PCNSE) • Fortinet NSE Expert (FCX) • Certified Ethical Hacker (CEH) How I work I start with a short discovery and a safe remote audit to assess risk. Deliverables always include a backup, step-by-step change plan, verification checklist, and PDF documentation. I communicate, meet deadlines, and provide post-deployment support when required. If you need a quick audit, migration plan, or full firewall deployment, message me with your environment (device model, OS version, and main goals). I’ll propose a concise plan and timeline. Let’s secure your infrastructure and keep your business running.