Senior Network Security Engineer and Zero Trust Architect with over 6 years of enterprise experience designing, securing, and optimizing hybrid-cloud and multi-cloud environments across U.S. financial services, healthcare, and public utilities sectors, including Visa, CommonSpirit Health, and Essential utilities
I specialize in performing comprehensive architecture reviews, identifying hidden attack paths, optimizing next-generation firewall policies, and mitigating real-time configuration risks across on-premises and public cloud platforms. My focus is balancing maximum security compliance with high network availability and operational uptime.
Core Expertise & Technical Stack
(Optimized for Upwork Search Indexing & Algorithms)
Network Security & Firewalls: Palo Alto NGFW, Fortinet FortiGate, Cisco ASA, Next-Generation Firewall Policy Design, Policy Review & Optimization, IPS/IDS Configuration, Threat Prevention Controls.
Architecture & Encryption: Zero Trust Architecture, Secure Infrastructure Configuration, Network Segmentation, Micro-Segmentation, SASE, VPN (SSL/IPSec), Network Encryption Standards, PKI & Certificate Management.
Multi-Cloud Security: AWS Security, Microsoft Azure Security, Google Cloud Platform (GCP), Secure VPC/VNet Architecture, AWS Security Groups, Azure Network Security Groups (NSG), Cloud Security Posture Management (CSPM), IAM & RBAC.
Automation & DevSecOps: Python, Ansible, Terraform, Infrastructure as Code (IaC), Security Configuration Auditing, Technical Security Documentation.
SecOps & Incident Response: Incident Response Lifecycle, Threat Investigation, Security Event Analysis, Root Cause Analysis, Splunk, Microsoft Sentinel, Microsoft Defender for Cloud/Endpoint, Wireshark Packet Analysis.
Experience supporting mission-critical enterprise environments, including Equinix Fabric connectivity, hybrid cloud interconnects, Azure networking, network migrations, production cutovers, high-availability designs, and cross-functional collaboration with cloud, infrastructure, application, and security engineering teams.
Compliance & Governance: NIST Cybersecurity Framework (CSF), ISO 27001, CIS Controls, Security Risk Assessment, Change Management Procedures.
Selected Enterprise Case Studies
Essential Utilities (Critical Infrastructure): Architected enterprise Zero Trust security infrastructure by redesigning firewall policies, segmentation strategies, and IPS controls across Palo Alto NGFW, Cisco ASA, and Fortinet platforms. Automated OT/SCADA security configuration workflows using Python and Ansible, reducing manual deployment efforts by 40%. Coordinated threat containment and incident investigations using Microsoft Sentinel, Splunk, and firewall log analysis.
CommonSpirit Health (Healthcare Network): Designed and deployed secure SD-WAN architecture across 12 healthcare facilities, improving network redundancy to 99.99%. Managed enterprise monitoring and resolved complex security incidents using Splunk, Wireshark, SolarWinds, and Gigamon TAP visibility solutions. Enforced endpoint security and vulnerability remediation via Microsoft Defender for Endpoint integration.
Visa (Financial Services):
Supported enterprise infrastructure by optimizing firewall policies and secure network access controls within a highly regulated financial environment. Executed 50+ Cisco IOS/NX-OS migrations and enterprise hardware upgrades with zero unplanned downtime. Validated multi-cloud security configurations across AWS, Azure, and Google Cloud environments against rigid compliance standards.
Certifications & Credentials
CCNP — Cisco Certified Network Professional
AWS Certified Solutions Architect — Associate
Digital Forensic Investigation Certificate
Education:
Bachelor of Science in Computer and Network Security — Wilmington University, Delaware, USA
Languages:
English (IELTS Band 8 — Fluent professional written and verbal communication)
VPN
Amazon EC2
Amazon Web Services
Cloud Computing
C#
Palo Alto Firewalls
Cisco Certified Design Expert
Network Traffic Analysis
Cisco Certified Network Associate
Cisco WLC
Firewall
Network Security
Network Design
Cybersecurity Tool
Zero Trust Architecture
Computer Network
FortiGate Firewall
Office 365
Ehtisham A.
Islamabad, Pakistan
$20/hr
5.0
6 jobs
I am a Cloud Engineer, Azure Engineer, and Cloud Administrator with 6+ years of (MSP) hands-on experience designing, securing, and managing Microsoft cloud and hybrid infrastructures. I have successfully delivered projects for 60+ organizations across the United States, United Kingdom, Ireland, Germany, Italy, Australia, UAE, Saudi Arabia, Egypt, Bulgaria, and Pakistan.
Currently serving as the Cloud Lead, where I design secure Azure environments, manage enterprise Microsoft 365 tenants, implement Zero Trust security, and support mission-critical cloud infrastructure.
I hold Microsoft's highest cybersecurity certification (SC-100 Cybersecurity Architect Expert) along with AZ-500, AZ-104, MS-102, MD-102, and Cisco CCNA. I don't just hold these certifications; I apply them daily across production environments.
Cloud Engineer | Cloud Administrator | Azure Administrator
I help businesses build, migrate, optimize, and secure Microsoft Azure environments.
Services include:
• Azure cloud deployment and administration
• Azure Virtual Desktop (AVD)
• Azure AD / Microsoft Entra ID
• Hybrid identity with Azure AD Connect
• Azure Backup & Azure Site Recovery
• Azure Policy & Governance
• Network Security Groups (NSG)
• Azure Firewall configuration
• Cost optimization
• Cloud migrations from on-premises to Azure
• High availability and disaster recovery
Microsoft 365 Administrator | M365 Engineer
Complete Microsoft 365 administration for SMBs, enterprises, and MSPs.
Expertise includes:
• Exchange Online
• SharePoint Online
• Microsoft Teams
• OneDrive for Business
• Microsoft Purview
• Data Loss Prevention (DLP)
• Email security & anti-phishing
• Microsoft Defender for Office 365
• Tenant-to-tenant migration
• Licensing and identity management
System Administrator | Server Admin | Windows Server
Extensive experience managing Windows Server environments.
Technologies include:
• Windows Server 2016/2019/2022
• Active Directory
• Group Policy (GPO)
• DNS & DHCP
• File Server & DFS
• Hyper-V
• VMware ESXi/vSphere
• Remote Desktop Services (RDS)
• Azure AD Connect
• Multi-site Active Directory environments
Intune Engineer | Endpoint Administrator
Modern endpoint management using Microsoft Intune.
• Windows Autopilot
• Microsoft Intune (MDM/MAM)
• Compliance Policies
• Configuration Profiles
• App Protection Policies
• BitLocker
• Windows Update for Business
• iOS & Android management
• Endpoint security baselines
Successfully managed and secured hundreds of corporate endpoints across multiple organizations.
Azure Security | Security Engineer | Microsoft Defender
Helping organizations improve security posture through Microsoft's security ecosystem.
Specializations include:
• Microsoft Defender for Endpoint
• Microsoft Defender for Identity
• Microsoft Defender for Office 365
• Microsoft Sentinel (SIEM/SOAR)
• Microsoft Defender XDR
• KQL threat hunting
• Logic Apps automation
• Conditional Access
• Multi-Factor Authentication (MFA)
• Privileged Identity Management (PIM)
• RBAC
• Zero Trust Architecture
• Secure Score improvement
• Identity Protection
I have helped organizations increase their Microsoft Secure Score from below 40% to over 97-98%.
IT Support
I also provide reliable Tier 1, Tier 2, and Tier 3 IT support for businesses of all sizes.
• Remote IT Support
• Microsoft 365 support
• Azure administration
• Windows troubleshooting
• Server administration
• User onboarding/offboarding
• Identity and access management
• Documentation and knowledge transfer
Networking & Backup
• Cisco CCNA
• Fortinet Firewalls
• Sophos Firewalls
• Huawei Networking
• VPN (IPsec/L2TP)
• VLANs
• Wi-Fi deployment
• PRTG Monitoring
• Wireshark
• Datto BCDR
• Veeam Backup
• Acronis Cyber Protect
• Azure Site Recovery
Certifications
✔ SC-100 – Microsoft Cybersecurity Architect Expert
✔ AZ-500 – Azure Security Engineer Associate
✔ AZ-104 – Azure Administrator Associate
✔ MS-102 – Microsoft 365 Administrator Expert
✔ MD-102 – Endpoint Administrator Associate
✔ SC-900 – Security, Compliance, and Identity Fundamentals
✔ SC-200 – Security Operations Analyst
✔ Google IT Support Professional
✔ Cisco CCNA (200-301)
✔ Huawei HCIA Security & Cloud Computing
✔ EC-Council Ethical Hacking Essentials
If you're looking for a Cloud Engineer, Cloud Administrator, Azure Engineer, Azure Administrator, System Administrator, Windows Server Administrator, Microsoft 365 Administrator, Intune Engineer, Endpoint Administrator, Azure Security Engineer, Microsoft Defender Expert, or IT Support Specialist, I can help you deliver secure, scalable, and well-documented solutions with minimal downtime and clear communication.
Microsoft Azure Administration
System Administration
Microsoft Intune
Office 365
Microsoft SharePoint Administration
Windows Server
ISO 27001
NIST Cybersecurity Framework
Cloud Security
Backup & Migration
IT Consultation
IT Project Management
IT Support
Microsoft Hyper-V Server
Microsoft Active Directory
Zero Trust Architecture
VMware vSphere
Network Security
Veeam
Email Deliverability
Bijay G.
Kathmandu, Nepal
$30/hr
4.1
26 jobs
Fortinet Certified Solution Specialist (FCSS) with hands-on troubleshooting skills in a broad range of Fortinet products such as FortiGate, FortiSASE, FortiClient EMS, FortiSwitch, FortiAP, FortiAnalyzer and FortiManager, etc.
I've worked at Fortinet Master Distributor. Currently, working as Network Security Engineer. My day-to-day role is to provide technical ticket TAC break & fix support to the Fortinet customers.
Provide administrative support to security concern customers like banks by aligning with the industry best practices and compliance requirements, such as
- Zero Trust Network Access (ZTNA) Orchestration,
- Center for Internet Security (CIS) Benchmarks,
- Secure LAN and SD-WAN Orchestration,
- Network Micro-segmentation,
- Vulnerability & Patch Management,
- Centralized quarantine management,
- Rogue Wireless AP suppression,
- Host and Application-based segmentation,
- ZTA (Zero Trust Access) and Endpoint protection etc.
Border Gateway Protocol
OSPF
Network Security
Zero Trust Architecture
User Authentication
Firewall
Cloud Security Framework
Security Infrastructure
Multiprotocol BGP
Fortinet
FortiGate Firewall
Network Architecture
Network Design
Network Analysis
VPN
Cleverson P.
Matinhos, Brazil
$25/hr
5.0
4 jobs
I help businesses secure and optimize Linux infrastructure, firewalls, VPNs and virtualization environments.
Specialized in:
Network & Security: OPNsense | pfSense | Wazuh SIEM
Wireless & Infrastructure: Ubiquiti UniFi Ecosystem
Virtualization & Backup: Proxmox VE | Proxmox Backup Server
VPN & Connectivity: WireGuard | OpenVPN | Cloudflare Tunnel
SysAdmin & DevOps: Linux Servers | Docker | Reverse Proxy
Core Services: Network Troubleshooting | Infrastructure Hardening
I work mainly with:
VPN issues
Firewall configuration
Secure remote access
Reverse proxy problems
Linux server deployments
Monitoring and log analysis
High availability environments
I focus on fast troubleshooting, security best practices and stable infrastructure delivery.
If you need someone to solve infrastructure and security problems quickly and professionally, let’s talk.
Information Security
DevOps
Linux System Administration
Proxmox VE
Zabbix
PfSense
VPN
OpenVPN
Docker
NGINX
Apache HTTP Server
Ubiquiti
Zero Trust Architecture
DNS
Cloudflare
Virtualization
Cybersecurity Monitoring
Security Infrastructure
Prabitra B.
Kolkata, India
$35/hr
4.9
369 jobs
CCSE, ITILv3 , Fortinet NSE4
CCNP R&S,CCNP Security.
In the last 15 years, I have been working on various network products and have gained comprehensive experience in Cisco, Fortinet, SonicWall, Checkpoint, HP, F5, Trellix (McAfee) ENS/EDR technologies. I have been involved in the design, configuration, and troubleshooting of Network products.
Firewalls:
Cisco ASA & Cisco Firepower
Fortigate UTM Firewalls
Checkpoint management servers & Security Gateways.
SonicWall TZ & NSA UTM Firewalls
Pfsense Firewall
ZTNA
FortiClient ZTNA & FortiClient EMS.
Load Balancers:
F5 BIG-IP Application Delivery Controllers
Radware Application Delivery Controllers
Array Application Delivery Controllers
Fortinet Application Delivery Controllers.
Routers:
Cisco, Arista, HP
Switches:
Cisco Catalyst
Cisco Nexus N5K & N9K
HP Switches
Wireless Controller & Access Points:
Cisco WLC,
Aruba WLC
Unify WLC
Meraki
Endpoint Security
Trellis (McAfee) ENS & EDR
VPN
Cisco Meraki
Network Security
Check Point
Load Balancing
Cisco Certified Network Professional
Cisco ASA
Web Proxy
Zero Trust Architecture
FortiGate Firewall
Cisco Firepower Threat Defense
SonicWall
Firewall
Cisco Router
Warda F.
Lahore, Pakistan
$10/hr
5.0
34 jobs
40+ Hours Available Per Week
I help startups and businesses launch reliable web, mobile, SaaS, and AI applications by identifying critical bugs before they reach production. From onboarding and authentication to payment gateways, APIs, dashboards, integrations, and AI workflows, I help reduce release risks and deliver a seamless user experience.
As a Top Rated QA Engineer with 4+ years of Software Quality Assurance experience, I've tested 100+ web, mobile, SaaS, and AI applications, uncovered 1,000+ production-impacting bugs, validated 20+ AI-powered products, completed 18+ projects, and worked 500+ hours on Upwork. I collaborate closely with founders, product managers, and development teams to improve software quality, accelerate releases, and reduce production risk.
I test applications across 3G, 4G, 5G, Wi-Fi, and low-bandwidth network conditions to ensure consistent performance, usability, and reliability in real-world environments.
➤ 𝗞𝗲𝘆 𝗔𝗰𝗵𝗶𝗲𝘃𝗲𝗺𝗲𝗻𝘁𝘀
🏆 Top Rated Freelancer
⭐ 18+ Positive Client Reviews
📌 Tested 100+ Web, Mobile, SaaS & AI Applications
🐞 1,000+ Bugs Uncovered Before Production Releases
🤖 Validated 20+ AI-Powered Applications
⏰ 500+ Hours Worked on Upwork
🚀 4+ Years of Professional QA Experience
➤ 𝗪𝗵𝘆 𝗖𝗹𝗶𝗲𝗻𝘁𝘀 𝗪𝗼𝗿𝗸 𝗪𝗶𝘁𝗵 𝗠𝗲
✔️ Tested 100+ Web, Mobile, SaaS & AI Applications
✔️ Uncovered 1,000+ Bugs Before Production Releases
✔️ Validated 20+ AI-Powered Applications
✔️ Specialized in Testing High-Risk User Journeys & Business-Critical Workflows
✔️ Clear, Developer-Friendly Bug Reports with Screenshots & Screen Recordings
✔️ Cross-Browser, Cross-Device & Network Condition Testing
✔️ Proactive Communication Throughout the QA Process
✔️ Release Readiness Recommendations for Confident Production Launches
➤ 𝗤𝗔 𝗦𝗲𝗿𝘃𝗶𝗰𝗲𝘀
🌐 Web Application Testing
• Functional Testing
• Regression Testing
• Exploratory Testing
• Cross-Browser Testing
• Responsive Testing
• UI/UX Testing
📱 Mobile Application Testing
• Android Testing
• iOS Testing
• Tablet Testing
• Device Compatibility Testing
• Installation & Upgrade Testing
• App Stability Testing
🧪 SaaS Testing
• User Onboarding Testing
• Authentication & Login Testing
• Subscription & Billing Validation
• Dashboard & Admin Panel Testing
• Role & Permission Testing
• Integration Testing
🤖 AI Testing
• AI Chatbot Testing
• Prompt & Response Validation
• AI Workflow & LLM Testing
• Hallucination & Edge Case Testing
• Context Retention Testing
• LLM User Experience Validation
🔌 API Testing
• API Functional Testing
• Postman Testing
• Swagger Validation
• Request & Response Verification
➤ 𝗠𝘆 𝗧𝗲𝘀𝘁𝗶𝗻𝗴 𝗣𝗿𝗼𝗰𝗲𝘀𝘀
• Understand Your Product Goals & Critical User Journeys
• Identify High-Risk Areas & Edge Cases
• Perform Functional, Exploratory & Regression Testing
• Test Across Browsers, Devices, Operating Systems & Network Conditions
• Document Issues with Clear Reproduction Steps, Screenshots & Screen Recordings
• Verify Bug Fixes Through Regression Testing
• Share Release Readiness Feedback Before Production
➤ 𝗧𝗼𝗼𝗹𝘀
JIRA • ClickUp • Trello • Asana • TestRail • BrowserStack • Postman • Swagger • JMeter • Cypress • Playwright
➤ 𝗗𝗲𝘃𝗶𝗰𝗲𝘀 𝗔𝘃𝗮𝗶𝗹𝗮𝗯𝗹𝗲 𝗳𝗼𝗿 𝗧𝗲𝘀𝘁𝗶𝗻𝗴
Mobile: iPhone 13 • iPhone 16 • Samsung Galaxy • Xiaomi/Redmi • OnePlus • Infinix
Tablet: TECNO MEGAPAD 10
Desktop: Mac Mini • HP Core i7 • Lenovo Core i5
➤ 𝗜𝗻𝗱𝘂𝘀𝘁𝗿𝘆 𝗘𝘅𝗽𝗲𝗿𝗶𝗲𝗻𝗰𝗲
SaaS • AI • Fintech • Ecommerce • Healthcare • Education • B2B Platforms • Mobile Apps • Gaming
➤ 𝗪𝗵𝗮𝘁 𝗬𝗼𝘂'𝗹𝗹 𝗚𝗲𝘁
✅ Reproducible bug reports developers can fix quickly
✅ Coverage of critical user journeys, edge cases, and business-critical workflows
✅ Faster release cycles with fewer production defects
✅ Clear release readiness recommendations before deployment
Planning your next release? Send me an invite, and let's ensure your web, mobile, SaaS, or AI application is stable, reliable, and ready for production.
--------------------------------------------------------------------------------------------------------
➤ 𝗞𝗲𝘆𝘄𝗼𝗿𝗱𝘀
QA Engineer, QA Tester, Manual QA, Manual Testing, Software Tester, Software Testing, Software Quality Assurance, Web Application Testing, Web Testing, Mobile App Testing, Mobile App QA, Android Testing, iOS Testing, SaaS QA, SaaS Testing, AI Testing, AI QA, AI Apps Testing, Chatbot Testing, Conversational AI, LLM Testing, Prompt Testing, Functional Testing, Regression Testing, Exploratory Testing, End-to-End Testing (E2E), User Acceptance Testing (UAT), Cross-Browser Testing, Responsive Testing, API Testing, Postman, Swagger, BrowserStack, Cypress, Playwright, JMeter, Test Case Design, Bug Reporting, Defect Tracking, User Flow Testing, Payment Testing, UI/UX Testing.
Regression Testing
Beta Testing
Functional Testing
Manual Testing
QA Testing
Web Testing
User Acceptance Testing
Software QA
Software Testing
Quality Assurance
Mobile QA
Mobile App Testing
Usability Testing
Bug Reports
Jira
iOS
Cross Browser & Device Compatibility
QA Engineering
Exploratory Testing
API Testing
How it works
Post a job for freePost a job
Tell us what you need. Create your own job post or generate one with AI then filter talent matches.
Hire top talent fast
Consult, interview, and hire quickly, so you can meet the freelancers you're excited about.
Collaborate easily
Use Upwork to chat or video call, share files, and track project progress right from the app.
Payment simplified
Manage payments in one place with flexible billing options. Only pay for approved work, hourly or by milestone.
Don't just take our word for it
“Upwork provides an umbrella-level of security. I can see a talent’s work history and ratings. I can hold payments in escrow. I can communicate through Upwork Messages instead of working through my email address.”
KD
Kim Darling
Emerald Tiger
“Upwork is the best platform to hire skilled professionals when we're not looking for a full-time employee. All the companies in our portfolio use Upwork to find talent across a wide range of fields.”
DM
David Merry
Kinetic Investments
“Our very specific requirements can be a challenge—With Upwork, we’re able to access a bigger community to ensure the success of our projects.”
KK
Katja Krohn
Summa Linguae
How do I hire a Trust Engineer on Upwork?
You can hire a Trust Engineer on Upwork in four simple steps:
Create a job post tailored to your Trust Engineer project scope. We’ll walk you through the process step by step.
Browse top Trust Engineer talent on Upwork and invite them to your project.
Once the proposals start flowing in, create a shortlist of top Trust Engineer profiles and interview.
Hire the right Trust Engineer for your project from Upwork, the world’s largest work marketplace.
At Upwork, we believe talent staffing should be easy.
How much does it cost to hire a Trust Engineer?
Rates charged by Trust Engineers on Upwork can vary with a number of factors including experience, location, and market conditions. See hourly rates for in-demand skills on Upwork.
Why hire a Trust Engineer on Upwork?
As the world’s work marketplace, we connect highly-skilled freelance Trust Engineers and businesses and help them build trusted, long-term relationships so they can achieve more together. Let us help you build the dream Trust Engineer team you need to succeed.
Can I hire a Trust Engineer within 24 hours on Upwork?
Depending on availability and the quality of your job post, it’s entirely possible to sign up for Upwork and receive Trust Engineer proposals within 24 hours of posting a job description.