Chigozie Ejeofobiri
Verified Expert in Engineering
Security Architect and Developer
London, United Kingdom
Toptal member since November 18, 2022
Chigozie is a network security consultant with over 14 years of experience working with organizations to use technology to support and drive business goals. He has extensive knowledge of network perimeter security, defense-in-depth architectures, zero-trust designs, security operations, system security risk analysis and assessment, and project management. Chigozie is also highly experienced in perimeter security implementation of on-premise and cloud firewalls.
Portfolio
Experience
- Network Security - 8 years
- Network Segmentation - 8 years
- Network Architecture - 8 years
- Infrastructure Security - 8 years
- Fortinet Firewall Configuration - 6 years
- Azure Virtual Networks - 5 years
- Amazon Web Services (AWS) - 5 years
- Zero Trust - 5 years
Preferred Environment
Palo Alto Networks, Check Point, Amazon Web Services (AWS), Azure, Zero Trust, IDS/IPS, Fortinet Firewall Configuration, Cisco, Palo Alto Panorama, Secure Access Service Edge (SASE)
The most amazing...
...project I've done involved migrating cross-vendor firewalls such as Fortinet, Cisco, Check Point, and Palo Alto Networks on-premise and to the cloud.
Work Experience
Senior Technical Consultant (Network Security)
Freelance Clients
- Created technical solution design, planning, implementations, support, and upgrades across multi-vendor next-generation firewalls from Fortinet, Check Point, Palo Alto, and Cisco, from simple structures to datacenter firewalls for multiple clients.
- Redesigned perimeter security solutions from traditional models to involve proper segmentation, zero-trust, and next-generation firewall features—threat prevention, URL filtering, and content inspection for multiple clients.
- Remodeled security solutions that required cross-vendor firewall migrations between vendor devices based on the client's business requirements and preferences; ensured migration activity was adequately planned, securing successful migrations.
- Worked with clients to set up a hybrid cloud network environment involving on-premise and cloud services.
- Created configuration scripts for repeated daily tasks and activities. Performed backups and upgrades of software images.
Senior Security Engineer
InfoGuardian Solutions
- Involved in multiple technical solution planning, design, implementation, support, and upgrades of network security solutions for different clients based on their business requirements.
- Assisted in business-as-usual third-level troubleshooting supports for different system issues, collaborating with internal customers and outside vendors to resolve complex problems and restore services within agreed SLAs (service level agreements).
- Collaborated with cross-functional teams, project teams, and internal and external partners to ensure technology solutions were designed, implemented, and maintained per security best practices and organizational and regulatory requirements.
- Performed audits and assessments on client's firewalls configurations and provided recommendations to improve the security posture of the firewalls.
Network Security Architect
NSC Global
- Engaged in day-to-day technical solution planning, design, implementations, and support and upgrades of on-premise and cloud network security solutions for multi-vendor firewalls, network devices, servers, security, and the cloud.
- Designed and maintained network security policies, performed audits on the client's existing firewalls, provided remediation configurations, and implemented device hardening on network devices.
- Wrote technical proposals for new clients' solutions and demonstrated products' proof of concept involving perimeter firewall solutions.
- Provided technical leadership and mentorship to junior security engineers.
Network Security Architect
Infoprive Services
- Provided advisory knowledge on network security architecture and designs using approved validated design standards to create secure technical solutions that ensured organizations met regulatory compliance and industry standards.
- Engaged in enterprise system security design, engineering, and systems integration for various customer environments.
- Configured and managed security devices: network firewalls, intrusion detection systems (IDS) and intrusion prevention systems (IPS) devices, and security information and event management (SIEM) solutions.
Network Engineer
Telnet
- Aided in implementing, managing, and maintaining security technologies—firewalls, VPNs, data loss prevention (DLP), SEIM, antivirus—and managed services.
- Supported information security architects in designing and managing secure network infrastructure.
- Assisted in proactively conducting periodic checks and quarterly maintenance, network devices patching, software upgrades, etc.
Network Engineer
BETA Computer Services
- Worked on security solution designs to securely provision and apply technical controls by configuring security policies, access control, firewalls, remote access VPNs, site-to-site VPN, URL and content filtering, etc.
- Installed, optimized, and supported network security infrastructure to meet data protection and system resiliency requirements while preserving end user experience.
- Assisted network operations teams with developing secure system baseline configurations.
Experience
Data Center Migration
As a senior security consultant, I was involved in the initial discovery of the existing data centers, creating high-level design documents, the bill of materials, the low-level design, and the data center migration activity.
Infrastructure Security Engineer
This project focused on the design, deployment, and implementation of Netskope's Secure Service Edge (SSE) and Secure Access Service Edge (SASE) solutions to enhance Mambu's cloud-native security posture and connectivity. As a leading SaaS banking platform, Mambu required a robust, scalable, and secure framework to protect its data, enable seamless access, and ensure compliance with industry regulations. Netskope's advanced solutions provided Mambu with comprehensive visibility, data protection, and secure access across its cloud infrastructure and distributed workforce.
The project's key deliverables included a comprehensive assessment report and implementation roadmap, the deployment and configuration of Netskope SSE and SASE solutions, integrated policies for DLP, SWG, ZTNA, and threat protection, and detailed documentation of configurations, workflows, and operational procedures. Additionally, training materials and sessions were provided to Mambu's IT and security teams.
Education
Master's Degree in Information Security and Digital Forensics
University of East London - London, England
Bachelor's Degree in Electrical Electronic Engineering
Madonna University, Nigeria - Nigeria
Certifications
Palo Alto Networks Certified Network Security Engineer (PCNSE)
Palo Alto Networks
Prisma Access SASE Security: Design and Operation
Palo Alto and Red Education
AWS Advanced Network Specialty
AWS
Azure Network Engineer Associate
Microsoft
NSE 7 Network Security Architect
Fortinet
Check Point Certified Security Expert
Check Point Software Technologies
Azure Security Engineer Associate
Microsoft
AWS Certified Security – Specialty
Amazon Web Services
Certified Information Systems Security Professional
(ISC)²
Cisco Certified Internetwork Expert - CCIE Security
Cisco
Cisco Certified Network Professional
Cisco
Cisco Certified Network Associate
Cisco
Skills
Tools
VPN, Cisco Meraki, Amazon Firewall, Sophos Firewall, AWS ELB, AWS IAM, Palo Alto Panorama
Languages
Python 3
Platforms
Windows, Amazon Web Services (AWS), Azure, Azure IaaS, AWS NLB
Industry Expertise
Cybersecurity
Storage
Azure Active Directory
Other
CCIE, DMZ Networks, Firewalls, Fortinet Firewall Configuration, CCNP Security, Networking, Unified Threat Management (UTM), Security, Network Access Control, Network Security, Infrastructure Security, Network Architecture, Fortinet, TCP/IP, IT Security, Network Infrastructure, Local Networking, LAN, WAN, Azure Virtual Networks, Palo Alto Networks, Check Point, Risk Management, SecOps, Cloud Security, Network Engineering, Vulnerability Management, System Administration, Secure Access Service Edge (SASE), Intrusion Prevention Systems (IPS), Routing, Computer Networking, Routing and Switching Protocols, ASA Firewalls, IP Networks, FortiGate, Cloud, Cisco, CISSP, Threat Modeling, Threat Analytics, URL Filtering, Content, Networks, IPv4, Cisco Routers, Cisco Switches, Engineering, Security Audits, Zero Trust, Network Segmentation, PCI DSS, Auditing, Multiprotocol Label Switching (MPLS), Border Gateway Protocol (BGP), Open Shortest Path First (OSPF), Information Security, IDS/IPS, ASA, Cloud Infrastructure, AWS VPN, Cloud Computing, Intrusion Detection Systems (IDS)
How to Work with Toptal
Toptal matches you directly with global industry experts from our network in hours—not weeks or months.
Share your needs
Choose your talent
Start your risk-free talent trial
Top talent is in high demand.
Start hiring