Network Security Operations Analyst

EDRIS HAMRAZ

Security Operations Analyst Network Security Engineer Firewall and Threat Detection Columbus, OH +1-317-***-**** *******.***@*****.*** PROFESSIONAL SUMMARY

Security Operations and Network Security professional with 10+ years of experience supporting enterprise networks, data center operations, firewall administration, incident response, and infrastructure hardening across healthcare, technology, education, and nonprofit environments. Hands-on with Microsoft security operations concepts, Palo Alto, Fortinet, Cisco ASA/Firepower, Check Point, VPN, IDS/IPS, SIEM log analysis, vulnerability remediation, routing/switching, Linux, Windows Server, and Active Directory. Known for troubleshooting complex Tier 2/3 incidents, improving network availability, documenting secure configurations, and aligning controls with NIST-based security practices.

TECHNICAL SKILLS

Security Operations: SIEM monitoring, alert triage, incident response, threat detection, log review, packet analysis, vulnerability assessment, risk mitigation Firewall and VPN: Palo Alto, Fortinet, Cisco ASA, Cisco Firepower, Check Point, Sophos, Cyberoam, pfSense, IPsec VPN, SSL VPN, NAT, ACLs

Network Engineering: LAN/WAN, data center networks, BGP, OSPF, EIGRP, TCP/IP, DNS, DHCP, VLAN, STP, EtherChannel, QoS, SD-WAN

Tools and Monitoring: Wireshark, Nmap, FortiAnalyzer, Cisco Prime, OTDR, light meters, network monitoring, performance reporting, ticketing workflows

Systems and Cloud: Linux, Windows Server, Active Directory, server hardware, UPS, PDU, HVAC/CRAC coordination, Microsoft security operations

Automation and Scripting: Python, Ansible, Bash, PowerShell fundamentals, configuration documentation, operational runbooks

Frameworks and Compliance: NIST, access control, secure configuration, change management, system auditing, security policies, documentation standards

PROFESSIONAL EXPERIENCE

Data Center Network Technician Google USA July 2024 - Present

● Operate and troubleshoot data center network infrastructure across fiber, switching, server, and facility support workflows, helping sustain 99.9%+ service availability for production environments.

● Test and validate fiber optic links using OTDR, light meters, labeling standards, and structured cabling procedures, reducing repeat physical-layer troubleshooting by 25% across assigned work orders.

● Support Tier 2 diagnostics for server hardware, Linux-based systems, switches, routers, power components, and cabling paths, resolving 30+ infrastructure tickets monthly within SLA targets.

● Automate recurring provisioning and maintenance checks with Python and Ansible concepts, improving repeat task consistency and cutting manual validation effort by roughly 20%.

● Document rack layouts, port mappings, configuration changes, maintenance activity, and incident notes to improve handoff accuracy for network, facilities, and customer support teams.

● Coordinate preventive maintenance with lead technicians and contractors for UPS, PDU, HVAC, CRAC/CRAH, and generator dependencies to reduce infrastructure risk during service windows. Network Security Engineer Norton Healthcare USA May 2023 - May 2024

● Designed and maintained NGFW, VPN, IDS/IPS, NAC, ACL, and segmentation controls across healthcare network zones, strengthening secure access for 1,000+ users and clinical systems.

● Analyzed firewall, FortiAnalyzer, SIEM, and packet-capture data to triage Tier 2/3 security incidents, reducing average investigation time by 30% through clearer log correlation and escalation notes.

● Hardened external-facing services and critical internal network devices by coordinating patching, secure configuration baselines, and vulnerability remediation for 150+ assets.

● Collaborated with infrastructure architects to embed Zero Trust principles into network deployments, cloud connectivity, remote access, and privileged access workflows.

● Created and refreshed network security diagrams, firewall rule documentation, VPN standards, and SOPs, improving audit readiness and reducing policy review rework by 20%.

● Implemented risk mitigation plans aligned with healthcare security requirements, NIST practices, and business tolerance for patient-care system uptime.

Network Engineer Aunalytics USA Dec 2021 - Dec 2022

● Architected and supported secure LAN, WAN, WLAN, and data center network services using Cisco Nexus, Catalyst, ISR/ASR, Meraki, VPN, VLAN, QoS, HSRP, and VRRP technologies.

● Configured and managed Cisco ASA/Firepower, Palo Alto, Fortinet, and Check Point firewall policies to enforce perimeter controls, segmentation, URL filtering, IDS/IPS, and secure remote access.

● Provided Tier 2/3 escalation support for routing, switching, wireless, VPN, and firewall incidents, improving first-pass resolution by 28% through structured diagnostics and documented runbooks.

● Monitored performance and security posture with Cisco Prime, Wireshark, SIEM alerts, and device telemetry, proactively identifying bottlenecks and reducing recurring incidents by 22%.

● Executed vulnerability assessments, maintenance windows, hotfixes, ACL reviews, and configuration hardening for 200+ network devices across client environments.

● Produced topology diagrams, change records, and operational standards that improved implementation consistency for network upgrades and security remediation projects. Network Engineer NDS Afghanistan Jan 2021 - Aug 2021

● Administered Cisco routing, switching, firewall, workstation, server, and endpoint security operations for a distributed office network supporting 300+ users.

● Improved network performance by monitoring availability, utilization, throughput, latency, and outage patterns, reducing repeat connectivity issues by 25% within six months.

● Implemented secure LAN standards, device configuration baselines, patching routines, Windows updates, antivirus updates, and access controls to reduce endpoint and network risk.

● Built and maintained documentation for IP addressing, device inventory, risk findings, troubleshooting steps, and upgrade schedules to support faster incident response.

● Supported third-party applications, server hardware, network devices, and client systems while escalating high-risk issues and recommending mitigation plans to leadership. IT Assistant American University of Afghanistan Afghanistan May 2015 - May 2018

● Supported enterprise IT operations across Cisco switches, routers, firewalls, Cyberoam, UniFi wireless, NVR systems, Windows workstations, and user access services.

● Managed Active Directory users, computers, password resets, group policy application, and endpoint troubleshooting for 500+ faculty, staff, and student users.

● Configured wireless, point-to-point, UBNT, Rocket M5, and Cisco infrastructure, improving campus connectivity coverage and reducing recurring support requests by 20%.

● Tracked incidents, vendor escalations, system changes, and weekly/monthly reporting to improve service visibility and technical support accountability.

IT Officer OPMERCY Afghanistan Sep 2013 - May 2015

● Administered network infrastructure, firewall environments, wireless access points, switches, routers, backups, capacity planning, upgrades, and security procedures across regional sites.

● Designed and enforced network configuration standards, security policies, and monitoring routines that improved uptime and reduced preventable outages by 18%.

● Installed, configured, patched, and troubleshot software, hardware, network devices, and security tools while supporting NOC operations and regional connectivity.

● Maintained backup systems, device inventory, configuration records, and operational documentation to support continuity, compliance, and faster troubleshooting. ADDITIONAL EXPERIENCE

Adjunct Professor, American University of Afghanistan Jan 2019 - May 2020: Taught networking, cybersecurity, cloud computing, and protocol concepts to roughly 60 students. Associate Registrar, American University of Afghanistan May 2018 - Jul 2020: Managed academic operations, reporting, records, scheduling, policy support, and accreditation coordination. EDUCATION

Master Degree of Computer Science in Information Technology, Bakhtar University 2015 - 2017 Bachelor Degree of Computer Science in Information Technology, Kabul University 2010 - 2013 CERTIFICATIONS AND TRAINING

Microsoft Certified SC-200 Security Operations Analyst; Cisco Certified Specialist Enterprise Core, CCNP ENCOR; Cisco Certified Network Associate, CCNA; CEH Training Completed; CISSP, In Progress PUBLICATIONS

Cloud Computing & QoS: “Optimal Allocation of QoS and Web Services in Cloud Computing,” American Journal of Information Systems, 2018.

Cloud Security & Privacy: Introduction to Security and Privacy in Cloud Computing, 2019. Cloud Security Analytics: “Computational and Statistical Analysis of Security and Privacy Parameters of Cloud Computing in Information Technology,” Journal of Computer Science, 2020.

.

Contact this candidate