Network Security & Cloud Consultant

TARIQ MALIK

Banks, OR *** ** (*** ) ***-** ** *****.*.*******@*****.*** US Citizen

CERTIFICATIONS & LICENSES

TECHNICAL CORE COMPETENCIES

PROFESSIONAL EXPERIENCE

Network Security & Cloud Consultant (Sub-contractor)

KendraCyber Fremont, CA

May 2026 – Aug 2026

•Secure Cloud Integration & AWS Architecture: Partnered with engineering teams to integrate secure, pre-established AWS Direct Connect environments with a new regional site, ensuring compliant hybrid cloud connectivity for Controlled Unclassified Information (CUI) workloads.

•Application Server Enclave Architecture: Designed and deployed a dedicated, high-security application enclave bounded by next-generation firewalls to process CUI/sensitive traffic, enforcing strict inspection parameters and isolating backend app servers from public/untrusted network tiers.

•Macro & Micro-Segmentation: Designed and deployed multi-tier segmentation utilizing VRFs to isolate routing tables, Palo Alto zone-based firewall policies, and Security Group Tagging (SGT) at ingress to control east-west traffic and isolate sensitive data enclaves.

•Zero-Trust Network Access (ZTNA) & Identity Enforcement: Collaborated with security teams to deploy Cisco Identity Services Engine (ISE), enforcing 802.1 X EAP authentication, Active Directory/Azure AD credential/certificate validation, and continuous user/device authorization.

•Control & Management Plane Hardening: Secured network infrastructure against broadcast storms and DoS attacks, disabling clear-text protocols (Telnet, SNMPv1 /v2) in favor of SSHv2, SNMPv3, TACACS+, and dedicated out-of-band management.

•Centralized Logging & Compliance (NIST 800-171 ): Configured real-time log streaming of administrative actions, RADIUS attempts, firewall connections, and system changes via TLS to a central SIEM (Splunk) to satisfy rigorous audit and accountability controls.

•Documentation & System Security Plans: Authored detailed network topologies, IP schemas, and firewall rule-sets matching production identically to support compliance runbooks and assessment artifacts.

Principal Network Consultant / Enterprise Solutions Architect March 2025 – February 2026

MultiService Networks — Remote / Client Sites

•NayaTel Core Infrastructure Transformation: Architected a highly scalable, hierarchical Dynamic Multipoint VPN (DMVPN) topology overlaid across a multi-area OSPFv3 environment, engineering dual-stack underlay/overlay routing for seamless IPv4/IPv6 line-rate traffic on Cisco ASR 1 000 Series routers to achieve 99.999% uptime.

•PTC Infrastructure Optimization & Traffic Engineering: Modernized legacy enterprise architecture by integrating EIGRP for IPv6, deploying EIGRP Stub routing and aggressive address summarization across Cisco Catalyst 9000 switches, and utilizing Front-Door VRFs (FVRF) for secure Internet/WAN edge isolation.

•Advanced Traffic Engineering & Load Balancing: Designed and optimized resilient multi-path topologies utilizing redundant links across enterprise data centers, implementing intelligent load balancing to maximize throughput, prevent bottlenecks, and ensure seamless failover across core and distribution layers.

•Data Center Security & Firewall Segmentation: Engineered robust on-premises data center security domains by segregating core, distribution, and access tiers using high-performance next-generation firewalls to inspect inter-zone traffic and isolate critical assets.

•Control & Management Plane Hardening: Implemented rigorous infrastructure hardening standards across network elements—protecting routing protocol control planes, neutralizing potential DoS vectors, and strictly isolating management traffic to out-of-band networks via encrypted protocols (SSHv2, SNMPv3, and TACACS+).

•Enterprise Perimeter Security & PKI Management: Deployed and managed Palo Alto Networks NGFWs for deep packet inspection and edge policy enforcement; established high-availability IPsec VPN tunnels for distributed workforces and managed end-to-end PKI root/identity certificate lifecycles across Cisco Nexus platforms.

Sr. Network Engineer January 2022 – December 2024

Inacom / Computown — San Francisco, CA

•Provided enterprise IT consulting to higher education and state government institutions, executing migrations from legacy EIGRP topologies to multi-area OSPFv2 architectures.

•Architected and executed complex edge environments integrating firewalls, DMVPNs, IP VRF-Lite, and advanced routing/switching solutions across Cisco Systems infrastructure.

•Led Proof-of-Concept (POC) testing for Cisco SD-WAN solutions, deploying redundant vSmart controllers and vEdge/cEdge routers to ensure seamless routing between HQ, remote branches, and cloud facilities.

•Built Linux and Cisco-based PKI Certificate Authorities (CA) to sign, generate, and manage root/identity digital certificates for enterprise network elements.

Sr. Network Consultant January 2016 – October 2021

Multi-Service Networks — Fremont, CA

•Led pre-sales engineering, solution design, and architectural implementations for enterprise clients; designed spine-leaf topologies using Cisco Nexus (3000, 5000, 9000) and Arista switches.

•Deployed EVPN/VxLAN for inter-data center connectivity; configured vPC and mLAG for high availability;

orchestrated MPLS L3VPN and EVPN route redistribution.

Deployed Viptela SD-WAN solutions, ensuring failover redundancy in dual-controller deployments with multi-provider uplinks.

Sr. Network Consultant August 2013 – November 2015

Dell Technologies — Austin, TX

•Partnered with enterprise corporations and universities on network cloud migrations using virtual Port Channels (vPC) and OSPF routing.

•Participated in Microsoft's cloud implementation initiatives in Redmond, WA, and resolved complex network performance bottlenecks for Samsung (Austin).

Sr. Network Consultant (Freelance) November 2003 – June 2013

San Francisco Bay Area, CA

•Delivered end-to-end network architecture, legacy migrations, and tier-3 support to enterprise and ISP clients across the Bay Area. Successfully achieved CCIE certification (#1 4955).

Sr. Sales Engineer January 2001 – October 2003

Juniper Networks — Sunnyvale, CA

•Delivered technical pre-sales and architecture advisory services for Global Crossing; conducted live feature demonstrations and technical workshops for service provider MPLS, SSL, and IPsec VPN technologies.

Senior Systems Engineer October 1999 – December 2000

International Network Services / Lucent — San Francisco, CA

•Engineered Quality of Service (QoS) for VoIP transport over Cisco infrastructure; engineered IP Multicast designs (MSDP/MBGP) for MSN and EarthLink.

Sr. Network Engineer / Network Engineer January 1991 – November 1998

Ingress Network Solutions & Inacom — San Francisco, CA

•Provided network architecture consulting for corporate clients including Toshiba and Chevron; modernized LAN/WAN infrastructure and Novell/IBM mainframe integrations.

EDUCATION

Bachelor of Science in Computer Science

Hawaii Pacific University — Honolulu, HI

June 1987 – December 1990

LANGUAGES

Fluent: English, Urdu, Punjabi

Contact this candidate