Security Engineer Network

Yasser Ali Ahmed

Network Security Engineer

སཧ **029004 㔐㔑㔒㔓㔔 ******.****@*****.*** ะั linkedin.com/in/yasser-ali-320640107 ᅏᅐᅑ Kuwait

Professional Summary

Experienced Network Security Engineer with a strong background in designing, deploying, and managing enterprise-grade security and network infrastructures. Skilled in Cisco ASA, FMC, FTD, ISE, Fortinet, Palo Alto, F5 ASM/LTM, Microsoft Defender, and Cortex XDR. Proven ability to secure complex hybrid environments through firewall configuration, VPN technologies, endpoint protection, and access control. Adept at identifying vulnerabilities, implementing mitigation strategies, and ensuring compliance with security best practices. Recognized for delivering reliable, scalable, and compliant solutions across enterprise and government sectors.

Core Skills

• Network & Security Platforms: Cisco ASA, Firepower NGFW, FMC, ISE, Fortinet, Palo Alto, F5 ASM/LTM, VPN (IPSec/SSL), NAT, ACLs.

• Endpoint & Threat Protection: Microsoft Defender, Cortex XDR, EDR/XDR Policy Management, Endpoint Hardening, Incident Response.

• Access Control & Compliance: Cisco ISE, AAA, 802.1X, RADIUS/TACACS+, Zero Trust, DACLs, Security Policy Enforcement.

• Networking & Protocols: BGP, OSPF, EIGRP, TCP/IP, SSL/TLS, SNMP, DNS, DHCP.

• Monitoring & Tools: FMC, Wireshark, Splunk, SolarWinds, FortiManager, Panorama, PRTG. Education

B.Sc. in Engineering & Technology – Computer Engineering Modern Academy, Cairo, Egypt May 2011

Professional Experience

Solutions by STC – Kuwait

Network & Security Engineer — 2016 – Present

Based on my current role with Solutions by STC, I have been responsible for the design, deployment, and support of multi-vendor network and security solutions across critical government and enterprise infrastructures in Kuwait.

• Design, implement, and manage Cisco security infrastructure including ASA, Firepower NGFW/FTD, FMC, ISE, and AnyConnect VPN.

• Conduct firewall rule reviews, VPN configurations, and access control policy enforcement across Cisco, Palo Alto, Fortinet, and F5 platforms.

• Plan and design tailored network and security solutions; prepare detailed HLDs, LLDs, and implementation documents.

• Evaluate and test new network and hardware solutions for enterprise and government customers.

• Manage and support a portfolio of 100 major enterprise and government customers under strict SLA agreements, providing high-priority incident response, operational maintenance, and proactive network and security support.

• Provide secure connectivity, high availability, and compliance for large-scale oil sector projects (KOC, KNPC, KIPIC).

• Configure and maintain F5 ASM/LTM for web application security, SSL offloading, and traffic management.

• Perform network troubleshooting, capacity planning, and maintain detailed technical documentation.

• Collaborate with Cisco, Fortinet, Palo Alto, and F5 vendors for escalations and solution optimization.

ZAK Solutions / Quantum Co. – Kuwait:

IT Engineer – Service Support — 2014 – 2016

• Resident Engineer for MOE Project and Kuwait University Project, providing on-site technical support and ensuring stable network operations.

• Delivered network support and troubleshooting for the nationwide Ministry of Education

(MOE) network.

• Assisted in deployment, configuration, and maintenance of network infrastructure

(switches, routers, wireless).

• Monitored performance, identified bottlenecks, and implemented corrective actions to maintain optimal service.

• Conducted preventive maintenance and ensured proper implementation of security and configuration baselines.

• Maintained network documentation, device inventories, and topology diagrams.

• Provided daily operational support, reporting network status and incidents to the central NOC.

Selected Projects

• The Shared Electronic and Banking Services (KNET) Project: Achieved 99.9% network availability through optimized design, capacity planning, and robust security configurations ensuring compliance with banking standards.

• KNPC Project: Deployed a high-performance WAN connecting +200 KNPC sites using Huawei DSVPN, achieving 99.9% uptime and full redundancy with centralized monitoring via eSight.

• KNPC Petrol Stations Project: Established a WAN connecting KNPC oil stations via Cisco MPLS and QualityNet Cloud, achieving 99.9% uptime and secure connectivity via AAA authentication.

• Ministry of Justice – New Building Project: Designed and implemented a high-performance Huawei-based LAN, deploying core, distribution, and access switches for 99.9% availability.

• American International University Project: Led WLAN implementation across AIU campus using Aruba 7210 controllers and 400+ APs, achieving 99.9% uptime and full coverage.

• Ministry of Social Affairs Project: Implemented Huawei AC6605-based WLAN with 200+ access points, ensuring full coverage and high user density support.

• 360 Mall Project: Designed and deployed Cisco and Alcatel network infrastructure, improving capacity by 40% and reducing downtime by 50%.

• Ministry of Public Works – Data Center Upgrade Project: Modernized the Ministry’s data center using Huawei and Fortinet solutions, improving scalability and reliability.

• US Camps Project: Supervised installation and support of MPLS, DWDM, and SDH technologies for US bases in Kuwait, ensuring secure, high-availability connectivity.

• KOC SD-WAN Project: Designed and deployed Fortinet SD-WAN across 25+ branches, enhancing performance, segmentation, and threat protection. Certifications

• Cisco CCIE Security (Written) — Implementing and Operating Cisco Security Core Technologies

• Cisco CCNP Enterprise Cisco CCNP Security CCNA (R&S & Security)

• Fortinet NSE4 Network Security Professional NSE5 Network Security Analyst

• Huawei HCIE-Routing & Switching (Written) V3.0 (H12-261) Huawei HCNP (Routing & Switching)

Key Achievements

• Delivered 10+ nationwide network security projects with 99.9% uptime.

• Designed and implemented secure architectures for major oil and government clients.

• Reduced incident resolution time by 40% through proactive monitoring and automation.

• Consistently recognized for customer satisfaction and zero critical security incidents.

Contact this candidate