About
Results-driven Security Architect with 9.8+ years of experience architecting, deploying, and optimizing enterprise-grade network security infrastructures. Expertise in Zero Trust Architecture (Zscaler ZIA, ZPA, ZCC), Next-Generation Firewall Palo Alto. Proven track record of reducing organizational risk, leading cross-functional teams, and delivering security enhancements with minimal operational downtime.
Skills & Expertise (22)
Work Experience
Manager, Security Architect
Vodafone Global Services Pvt. Ltd.
May 2020 - Present
Architected and deployed Zero Trust Network Access (ZTNA) using Zscaler ZIA and ZPA, securing access for thousands of global users across 20+ organizational locations, reducing attack surface by eliminating traditional VPN dependency. Engineered ZIA global security policies encompassing malware protection, Advanced Threat Protection (ATP), and cloud sandboxing — achieving consistent policy enforcement across all ingress/egress traffic and reducing malware incidents by an estimated 40%. Configured and optimized ZPA App Connectors in Azure environments, enabling least-privilege, identity-based access to 100+ internal applications with zero implicit trust to the network layer. Standardized ZCC client lifecycle management, enforcing group-based upgrade policies and posture compliance checks across endpoints — reducing client-related security exceptions by streamlining patch adherence. Deployed and managed Palo Alto NGFW in Active-Passive HA environments, implementing Threat & Vulnerability Management profiles (WildFire, Anti-Spyware, File Blocking), and executing complex PAN-OS upgrades with near-zero downtime. Deployed and managed Panorama Centralized Security Management, Device Group Template Stack Management. Implemented URL Filtering, Application Control policies in Palo Alto, aligning network access with business requirements and regulatory compliance standards. Led incident triage and resolution workflows across Priority 1–3 tickets, ensuring SLA adherence and coordinating with application owners and service lines for rapid root-cause resolution.
Security Specialist
Mphasis Limited
May 2019 - May 2020
Administered and maintained multi-vendor firewall platforms (Cisco ASA, Palo Alto, FortiGate), performing ACL reviews, NAT modifications, and security posture hardening across the enterprise network. Designed and implemented IPsec Site-to-Site VPN tunnels, enabling secure inter-site connectivity and supporting hybrid-cloud communication for enterprise clients. Led a 6-member security monitoring team, delegating incident monitoring tasks, enforcing SLA targets, and elevating team performance through structured knowledge-base documentation. Executed medium-to-complex firmware upgrades and security patches for compliance correction, minimizing CVE exposure across production firewall fleet. Resolved complex proxy integration and SSL/TLS authentication issues, reducing Mean Time to Resolution (MTTR) and improving end-user productivity.
Network Operations Engineer (L0/L1)
Mindtree Ltd.
Mar 2016 - Jun 2018
Administered Cisco Switches and Routers in a 24/7 NOC environment, performing IOS backups, firmware upgrades, and coordinating outage restoration within defined SLA windows. Escalated and collaborated with L2 Network Services team to resolve complex routing/switching incidents, building foundational expertise in enterprise network operations.
Senior Network Security Engineer
Vodafone Global Services Pvt. Ltd. (via Magna Infotech)
Aug 2018 - May 2019
Implemented and enforced enterprise-wide security policies, including Websense/proxy Internet access controls and firewall rule optimization in collaboration with internal security teams and client stakeholders. Maintained network availability and QoS metrics through proactive performance monitoring, consistently meeting SLA targets for uptime and incident resolution. Resolved VPN, switching, and routing incidents, reducing operational disruptions and contributing to a stable network environment for global clients.
Education
Master of Technology (M.Tech) — Power Systems Engineering - Vignan University
2012 - 2014 · Afghanistan
Bachelor of Technology (B.Tech) — EEE - JNTU Ananthapur
2008 - 2012 · Afghanistan
Certifications
No certifications added yet
Interested in this developer?
Profile Score Breakdown
Profile Overview
Skills (22)
Click a skill to find developers with the same skill
