Aiman T.

Senior Network Engineer | Firewall, Security & VoIP Specialist | SD-WAN & Cloud Networking Senior network engineer and cybersecurity consultant supporting enterprise, ISP, carrier, and data center networks. I handle outages, firewall/VPN issues, routing problems, security hardening, migrations, and full infrastructure builds as a fast responder for urgent fires or a long-term technical owner for ongoing projects. Network Architecture & Routing Network design, HLD/LLD, network diagrams, assessments/audits, LAN/WAN/MAN/WLAN, data center networking. Routing: BGP (eBGP/iBGP/MP-BGP), OSPFv2/v3, IS-IS, EIGRP, RIP, PBR, route redistribution/filtering, route maps, prefix lists, BGP communities, ECMP Switching: VLAN, QinQ, VXLAN, EVPN, STP/RSTP/MSTP, LACP, EtherChannel, MLAG/VPC, Layer 2/3, inter-VLAN routing Service Provider: MPLS, L3VPN, L2VPN, VRF/VRF-Lite, PE/P/CE architecture IPv4/IPv6, IPv6 migration, subnetting, DHCP, DNS, NAT/PAT High Availability: HSRP/VRRP/GLBP, redundancy, failover, load balancing, disaster recovery Firewalls & Network Security Platforms: FortiGate, FortiManager, FortiAnalyzer, Palo Alto/PAN-OS, Cisco ASA, Firepower/FTD, Meraki MX, pfSense, OPNsense, Sophos XG, WatchGuard, SonicWall, Zyxel/ZyWALL Firewall architecture, deployment, migration, policy design, rule cleanup/optimization NAT/PAT, SNAT/DNAT, VIPs, port forwarding, IPS/IDS, app control, web/DNS filtering, SSL/TLS inspection DMZ design, VLAN segmentation, microsegmentation, Zero Trust (ZTNA) Security monitoring, log review, vulnerability remediation, patch management Compliance: ITGC, GRC, ISO 27001, NIST CSF, COBIT, SOC 2, PCI DSS, HIPAA, GDPR technical controls VPN & SD-WAN IPsec, SSL VPN, OpenVPN, WireGuard, GRE/GRE-over-IPsec, L2TP/IPsec, DMVPN Site-to-site, remote-access, hub-and-spoke, full-mesh topologies SD-WAN / Secure SD-WAN (SASE), multi-WAN failover, SLA-based path selection, app-aware routing Hybrid WAN across Internet, MPLS, LTE/5G; branch-to-HQ, branch-to-branch, cloud connectivity Linux, Systems & Virtualization Linux administration (Ubuntu, Debian, CentOS/RHEL) via SSH and Bash DNS, DHCP, NTP, HTTP/HTTPS, SFTP/FTP, iptables/nftables VMware ESXi/vSphere, Hyper-V, Proxmox, virtual switching Windows Server infrastructure and cross-platform troubleshooting VoIP & Unified Communications SIP, RTP, NAT traversal, QoS/DSCP, SIP trunks, PBX/IP-PBX, IVR, dial plans Platforms: 3CX, Asterisk, FreePBX, Vicidial Call-quality troubleshooting: latency, jitter, packet loss across VPN/MPLS/SD-WAN Cloud & Hybrid Networking AWS, Azure, Google Cloud, Vultr — VPCs/VNets, subnets, route tables, gateways, security groups Site-to-cloud VPN, on-prem/cloud hybrid architecture Basic Docker/Kubernetes networking Monitoring, IPAM & Automation SNMP, Syslog, phpIPAM, LibreNMS, PRTG, Zabbix, Nagios, Grafana Bash, Python, Ansible fundamentals for automation and documentation Wireless Ruckus, Aruba, Ubiquiti UniFi, Cisco/Meraki wireless SSID/VLAN design, guest Wi-Fi, 802.1X, RF planning, roaming issues Multi-Vendor Experience Cisco (IOS/IOS-XE/IOS-XR, NX-OS, Catalyst, Nexus, ASR/ISR, ASA, Firepower, Meraki, DNA Center, ISE) • Juniper (Junos, MX, SRX, EX, QFX, ACX) • Fortinet • Palo Alto • MikroTik • Arista • Aruba • HPE • Dell Certifications CCNP • CCDP • NSE4 (Fortinet) • HyCl • RCWA • RCNI What I Help Clients Solve Outages, packet loss, latency and connectivity failures Firewall, VPN, NAT and security-policy issues BGP, OSPF, IS-IS, MPLS, VRF and routing problems VLAN, STP, switching and Layer 2/3 issues SD-WAN, WAN failover and multi-site connectivity Security hardening and segmentation Linux servers, DNS, DHCP and network services VoIP, SIP, PBX and call-quality issues Cloud and hybrid connectivity Network, firewall and server migrations Monitoring, IPAM and infrastructure visibility Architecture and security reviews Senior escalation and NOC support