Hire the Best Network Security Engineers
in Canada

Network Consultant | TAC Engineer | Routing, MPLS, VPLS | Network Security Specialist I am a Network Consultant and former TAC Engineer with a Master of Engineering in Internetworking from Dalhousie University, bringing strong hands-on experience in designing, deploying, and troubleshooting complex network infrastructures. I currently work at Ciena delivering advanced network solutions in routing, switching, and service provider environments. Previously, I worked at Fortinet as a TAC Engineer, where I handled critical network security cases across enterprise and service provider customers. I specialize in building networks that are not just functional, but scalable, resilient, and production-ready. What sets me apart is field experience. I actively work on real network deployments, not just lab simulations. I understand how designs behave under real traffic, failures, and operational constraints, and I bring that insight into every project. I also have extensive experience building multiple network projects in GNS3 and Packet Tracer, simulating real-world topologies for design validation, troubleshooting, and training purposes. Services Offered Network Design and Simulation End-to-end network design using GNS3 and Cisco Packet Tracer Realistic lab environments for testing, validation, and training HLD and LLD Documentation Professional High-Level and Low-Level Design documents Visio diagrams with deployment-ready configurations Routing and Switching Solutions Design, implementation, and optimization of core and edge networks Advanced troubleshooting for production issues VPN and Security Solutions Secure VPN deployments and troubleshooting End-to-end security policy design and implementation NAT and Traffic Engineering Advanced NAT design and troubleshooting for complex environments Network Troubleshooting and Analysis Deep packet analysis using Wireshark Root cause analysis for complex network issues Training and Visual Learning CCNA and networking training with a strong hands-on approach Step-by-step lab guidance using GNS3 and Packet Tracer Visual learning using diagrams, topology breakdowns, and real traffic flow explanations Concept simplification using practical scenarios instead of theory-heavy teaching Interview preparation and real-world troubleshooting mindset I bring a consulting mindset to every engagement. I do not just fix issues, I design solutions that prevent them. Whether you need help with a lab, production network, troubleshooting, training, or full-scale design, I deliver results that are practical, efficient, and aligned with real-world operations. If you are looking for someone who understands both theory and production networks, let’s connect.

• Over 10 years of experience in network administration and security. • Languages: English, French, Spanish, Mandarin. • Master’s Degree in Electronics and Communication Engineering. • Advanced diploma in cybersecurity from Polytechnic Montreal. • Cisco CCNA Routing and Switching certified. • CompTIA Security+ certified. • CompTIA CySA+ certified. • CompTIA CSAP certified. • (ISC)2 Certified in Cybersecurity. • CEH (Certified Ethical Hacker) in progress. • AWS Cloud Practitioner in progress. • Fortinet NSE 1,2,3,4,5,7 certified. • Expertise in various security tools (IPS, Firewalls, IDS, SIEM, SOAR, EDR, Antivirus, Antimalware …) • Ability to work in a fast-paced environment and under pressure. • Experience handling multiple tasks and maintaining comprehensive documentation. • Excellent customer relations and communication skills. • Self-motivated, self-starter, innovative and creative. • Strong team player with the ability to work independently with little or no supervision. • Flexible and available to work shifts and hours. TECHNICAL SKILLS ------------------------- Expert level in Fortinet products: Fortigate, Fortianalyzer, Fortimanager, Fortiswitch, FortiAP, FortiAuthenticator, Forticlient. ▪ IDS, IPS. ▪ Suricata, Security Onion, Snort, Bro, Kibana. ▪ SIEM/FIM, UTM. ▪ Vulnerability scanning (OpenVas, Nessus). ▪ Port Scan with Nmap. ▪ OS Hardening. ▪ Security industry standard (NIST, COBIT, CIS, OWASP, MITRE ATT&CK). ▪ NAC, Mobile device management (MDM). ▪ Wireshark and SolarWinds. ▪ Microsoft Active Directory. ▪ DHCP and DNS. ▪ Routing and switching. ▪ Incident Management. ▪ Cyber investigation using tools like XL-parser, XL-Whois, XL-Tools. ▪ Networking, TCP/IP and OSI protocols stacks, EIGRP, OSPF RIP, static routing, BGP, SD-WAN, SNMP. ▪ Microsoft outlook. ▪ VMWare and VirtualBox. ▪ Microsoft office suite (word, excel, PowerPoint). ▪ VPN IPSEC, remote VPN, SSL VPN, VLAN. ▪ Antivirus and Anti-malware. ▪ McAfee live safe: key escrow, virus scan, remote wipe, host protection. ▪ Open PGP: secure email, PKI, digital signature. ▪ ELK (Elasticsearch, Logstash, Kibana) · Incident response (on Firewall): a) Contain the attack: isolation; removal; segmentation b) Identify the attack and create appropriate customized IPS rules and signatures to stop it c) In case of DOS attack, create appropriate DOS policy to block the attack on the firewall d) Edit antivirus signatures to thwart the attack e) In case of brute force attacks, implement 2 factor authentication with password and token for increased security f) Monitor the network after the attack is blocked · Assist with new network architecture implementation and building fortigate firewall from scratch: customer provides the desired architecture, and I assist with setting it up and improving it if needed, with customer's approval. · Set up and troubleshoot for customers: a) IPS rules and signatures b) VPN (remote access, site to site) c) Firewall rules d) High availability and redundancies e) Link monitoring on firewall (monitoring link and devices failures) f) DOS policies g) Access points and switches h) Authentication: Radius, LDAP, 2FA or MFA i) Single sign on technologies j) SAML k) BGP, OSPF, static routing l) Web filtering, application control, SSL inspection m) SD WAN n) Certificate installs o) Remote logging p) Assist with PCI DSS compliance scanning q) And much more · Provide customers advice regarding new, future, and existing network and security architecture, to harden it and make it as secure as possible.

I have experience in handling/escalating varying cyber incidents, security threats, regulating data access, security related policies, vulnerability assessments, conducting of vulnerability assessment of API, Infrastructure, web and mobile apps, reviewing security logs, configuration of security devices, facilitated the external and internal audits (ISO series, GDPR, HIPAA, SOC level 1 & 2, COBIT, PCI, NIST and other frameworks ), writing policies for the mentioned frameworks, provide security guidelines for new business projects according to security best practices and leading various security task forces at my current/previous employers. I have also experience in securing public cloud (AWS & Azure), threat modeling, application security, vulnerability management, financial industry and experience in change management. I am confident I will be an asset to you for these very reasons. Key Skills: Vulnerability Assessments : API, Infrastructure, Mobile Apps, Websites, Codelevel (vulnerabilities, impact and recommendations to fix) GRC : Risk Assessment, Policy writing, Gap Analysis & Recommendations for ISO (27001,27002, 27017, 27018), SOC(Level 1 & 2), GDPR, HIPAA, NIST, COBIT, PCI, CIS, HITRUST etc and much more. Configuration: Infrastructure Monitoring, Security Monitoring, Security Logs, Correlations, Security Device at hardware and software level. SOC : Threat Mitigation, Attack Analysis, Remediation, Threat Hunting, Threat Modeling, Anti Malware etc. Cloud: AWS, Azure

Jasim is an accomplished Network Engineer with 11 years of experience in designing and managing network infrastructure with the best planning to consistently achieve high availability, security and performance. He is a highly motivated and energetic professional with more than six year of experience in implementing, securing and operating enterprise IT infrastructure. Additionally, he has extensive hands-on experience with the design, implementation and operation of complex enterprise networks and advanced security solutions. Jasim has a strong grip on implementation of various networking and security technologies. He has deployed many large scale projects which involve integration of Cisco, Palo Alto, Fortinet, HP and various other networking and security solutions. His skillset includes the documentation of solution including Low level Design, high Level Design, Network Diagrams, SOW’s and more.

Certified Network and Information Security Professional with extensive expertise in network infrastructure, cybersecurity, and IT solutions. Proficient in managing diverse server and client platforms (Windows, macOS, Linux) and advanced technologies such as Fortinet, Cisco, VMware, and Microsoft 365. Dedicated to delivering secure, scalable, and innovative IT solutions tailored to meet client needs while ensuring compliance with industry standards and best practices. I thrive in dynamic, fast-paced environments where I can apply my strong problem-solving, analytical, and communication skills to resolve complex technical challenges. My excellent verbal, written, and interpersonal communication abilities enable me to build trust with clients and collaborate effectively with teams to achieve project goals. Keen attention to detail ensures every solution I deliver meets the highest standards of quality and reliability. With a proven track record in client-facing roles, I excel at identifying innovative alternatives and opportunities to address complex challenges. I am skilled in efficient planning and organizing, enabling me to deliver results that exceed client expectations while optimizing resources and time. TECHNICAL EXPERTISE: • Network Infrastructure & Security: Proficient in Cisco LAN/WLAN (WLC, Meraki), Fortinet Security Fabric (FortiGate, FortiAnalyzer, FortiManager), and security frameworks (NIST, ISO 27001, CVE). Skilled in configuring VPNs, firewalls, IDS/IPS, ACLs, and security policies. • Governance, Risk, and Compliance (GRC): Experienced in conducting security audits, implementing GRC frameworks (NIST CSF, COBIT, ISO 27001/27002), and developing risk mitigation strategies to ensure regulatory compliance and protect critical assets. • Systems & Virtualization: Extensive experience with VMware, EVE-NG, and Active Directory management, including Group Policy and User Provisioning as well as utilizing PowerShell. • Programming & Scripting: Skilled in Python, Bash, and network automation using Ansible. • Operating Systems & Endpoints: Proficient in managing Windows, macOS, and Linux environments. Experienced with MDM solutions for iOS and Android. • Cybersecurity & Threat Management: Expertise in vulnerability testing (Nessus, OWASP), endpoint detection (McAfee EDR, Sophos DLP), and leveraging frameworks like MITRE ATT&CK and the Cyber Kill Chain to enhance security posture. • Technical Support & Troubleshooting: Expertise in diagnostic tools (Wireshark, Packet Tracer) for network and voice traffic analysis. Cloud & Collaboration: Skilled in Microsoft 365 applications (Outlook, Teams, SharePoint) and database management (SQL). ADDITIONAL PROFICIENCIES: • Security Audits & Compliance: Conducting internal and external audits, creating detailed audit reports, and implementing controls to address identified vulnerabilities. • IoT Solutions: Hands-on experience with IoT platforms (ESP32, Arduino, Raspberry Pi). • Project Management: Experienced in project planning, execution, and team mentoring to deliver high-quality results efficiently. I bring a unique combination of technical expertise and soft skills to every project. Whether working independently or collaboratively, I am dedicated to meeting business needs with precision, innovation, and professionalism. Let’s work together to secure and optimize your IT environment! :-)

Cybersecurity professional with 3+ years of experience across privileged access management, security operations, and network security in banking, financial services, and IT environments. Privileged Access Management (PAM): Currently PAM Analyst at one of Canada's top 5 banks — managing CyberArk end-to-end Platform and safe configuration, account onboarding, credential rotation, compliance alignment Hands-on with CPM, PVWA, PSM Previously administered CyberArk PAS (CPM, PVWA, PTA, PSM, PSMP) for 10+ banks across LDAP, Windows, UNIX, and iSeries environments Security Operations & Forensics: Investigated financial crime cases using CrowdStrike, Splunk, Autopsy, and FTK Imager Experience with SIEM, IPS, EDR, and vulnerability tools (Nessus, Wazuh) Network & System Administration: Next-Gen Firewalls (Palo Alto, Fortinet) Active Directory, Group Policy, VMware ESX Windows and Linux server environments Certifications: CyberArk Defender – PAM (PAM-DEF) CyberArk Defender Azure Fundamentals (AZ-900) Palo Alto Certified Network Security Administrator Fortinet Cybersecurity Associate