Sahibzada is available for hire
Hire SahibzadaSahibzada Ali Haider
Verified Expert in Engineering
Network Security Engineer and Developer
Barcelona, Spain
Toptal member since February 14, 2025
Bio
Sahibzada is an expert network security engineer with extensive experience designing, implementing, and managing secure network infrastructures. Specializing in threat analysis, firewall management, intrusion detection, and risk mitigation, he ensures that organizations remain protected against evolving cybersecurity threats. Delivering robust, scalable, and compliant security solutions that align with business needs, Sahibzada also ensures operational continuity and peace of mind.
Portfolio
SEIDOR
Palo Alto Panorama, Fortinet Firewall Configuration, Aruba, ASA Firewalls...
Tai Solutions
ICT Training, RFPs, RFQs, ITTs, Responses, Proposals & Quotes, SANs
Corvit Networks
ICT Training, Project Planning, IT Audits, Network Design...
Experience
- Routing and Switching Protocols - 20 years
- Network Design - 20 years
- Customer Relationship Management (CRM) - 20 years
- ICT Training - 15 years
- Wireless Network Design - 15 years
- ASA Firewalls - 10 years
- Fortinet - 5 years
- Palo Alto Panorama - 5 years
Availability
Full-time
Preferred Environment
Network Management Stations (NMS), Routing and Switching Protocols, Windows Server, VMware, ASA Firewalls, Palo Alto Panorama, Fortinet, Checkpoints, Aruba, Cisco Meraki
The most amazing...
...thing I've done as a top-tier network security engineer is build and fortify resilient, next-generation infrastructures against advanced cyber threats.
Work Experience
Senior Network Security & Network Operations Center Engineer
2021 - 2024
SEIDOR
- Led the design, implementation, and management of the company's network and security infrastructure. Developed and enforced security policies and procedures to ensure compliance with industry regulations and standards.
- Configured and managed firewalls, routers, switches, and other network devices to ensure optimal performance and security. Monitored network traffic and performance using tools like Wireshark, SolarWinds, and Nagios, making adjustments as necessary.
- Oversaw the implementation and maintenance of VPNs and remote access solutions to support a distributed workforce. Responded to security incidents and breaches, conducted root cause analysis, and implemented corrective actions.
- Collaborated with IT and security teams to develop and enforce security policies and procedures. Created and maintained detailed documentation for network configurations, security protocols, and incident procedures.
- Troubleshooted complex issues rapidly. Mentored and trained junior engineers on best practices in network and security management.
Technologies: Palo Alto Panorama, Fortinet Firewall Configuration, Aruba, ASA Firewalls, Checkpoints, Cisco Meraki, FortiAnalyzer, Nexus, Routing and Switching Protocols
Technical Manager | Huawei Authorized Technology Trainer
2020 - 2021
Tai Solutions
- Led a team of pre-sales engineers, providing guidance and support in developing technical solutions for clients. Collaborated with sales teams to identify customer needs and propose tailored solutions that align with business objectives.
- Delivered technical presentations, product demonstrations, and proof-of-concept engagements to showcase the value of solutions. Developed and maintained strong relationships with key stakeholders, including clients, partners, and internal teams.
- Oversaw the creation of detailed technical proposals and responses to RFPs, ensuring accuracy and alignment with customer requirements.
- Conducted HCIA-Storage training for corporate clients. Delivered Huawei Storage technologies, including Cloud, OceanStor versions 4-6, and All-Flash Storage.
- Installed, configured, and troubleshooted network-attached storage (NAS), network file systems (NFS), and storage area networks (SANs) in NetApp, Dell, Huawei, and Pure Storage. Managed storage infrastructure with NetApp ONTAP.
- Stayed updated on industry trends, competitor products, and emerging technologies to provide strategic insights and recommendations.
Technologies: ICT Training, RFPs, RFQs, ITTs, Responses, Proposals & Quotes, SANs
Senior Technical Manager | Senior ICT Trainer | Lead IT Auditor
2018 - 2020
Corvit Networks
- Developed curriculum and training materials for various ICT courses, ensuring content was up-to-date with current industry standards and best practices.
- Conducted training on cybersecurity, networking, cloud computing, and IT management.
- Oversaw project management activities, delivering projects on time and within scope and budget. Assessed training needs and customized programs to meet the specific requirements of diverse audiences.
- Evaluated the effectiveness of training programs through feedback, assessments, and performance metrics.
- Delivered one-on-one coaching and support to participants, enhancing their technical skills and knowledge.
- Created and executed strategic plans to align technology initiatives with business goals and objectives.
- Collaborated with cross-functional teams to identify technology needs and recommend solutions to improve operational efficiency.
- Managed vendor relationships, negotiated contracts, and ensured the delivery of high-quality services and products.
- Provided technical guidance and mentorship to team members, fostering a culture of continuous learning and professional development.
- Performed comprehensive IT audits to evaluate the effectiveness of internal controls, security measures, and compliance with regulatory requirements. Ensured compliance with industry standards such as ISO, PCI-DSS, GDPR, and NIST.
Technologies: ICT Training, Project Planning, IT Audits, Network Design, Customer Service Management (CSM), Customer Relationship Management (CRM)
IT Manager, Pre-sales
2017 - 2018
Nasma Telecommunications
- Led a team of pre-sales engineers in developing tailored IT solutions to meet client needs. Collaborated with sales teams to identify customer requirements and propose innovative technical solutions.
- Showcased the value of proposed solutions through technical presentations, demonstrations, and proof-of-concept engagements.
- Oversaw the preparation of detailed technical proposals, RFP responses, and solution documentation. Developed and maintained strong relationships with key stakeholders, including clients, partners, and internal teams.
- Provided technical guidance and mentorship to pre-sales engineers—fostering a culture of continuous learning and improvement. Delivered compelling product demonstrations and presentations highlighting key features and benefits to prospective clients.
- Stayed updated on industry trends, competitor products, and emerging technologies to provide strategic insights and recommendations.
- Assisted in developing sales strategies and go-to-market plans, contributing to business growth and revenue targets.
- Participated in industry events, conferences, and webinars to promote company solutions and network with potential customers.
- Conducted technical workshops and training sessions for clients, partners, and internal teams.
Technologies: RFPs, RFQs, ITTs, Responses, Proposals & Quotes, Customer Relationship Management (CRM), Project Planning, Implementation, Vendor Management, Vendors & Suppliers
ICT Manager
2015 - 2017
Corvit Networks
- Developed and implemented strategic IT plans and initiatives to align with business goals and enhance operational efficiency. Coordinated with vendors and service providers to procure, install, and maintain IT equipment and software.
- Implemented cybersecurity measures and conducted regular audits to safeguard company data and systems. Developed and managed IT budgets, ensuring cost-effective solutions and adherence to financial constraints.
- Drove disaster recovery planning and business continuity efforts to minimize downtime and data loss. Managed multiple IT projects from inception to completion, ensuring timely delivery within scope and budget.
- Created detailed project plans, schedules, and resource allocation strategies. Coordinated cross-functional teams, providing direction and support to ensure project success.
- Monitored project progress, identified potential risks, and implemented mitigation strategies. Conducted post-implementation reviews to assess project outcomes and identify areas for improvement.
- Provided training and support to end-users, ensuring seamless adoption of new systems and technologies.
- Oversaw the daily operations of the ICT department, ensuring the effective delivery of IT services and support.
Technologies: Routing and Switching Protocols, IT Audits, Network Design, Wireless Network Design, IT Security, ICT Training, Project Planning, Vendors & Suppliers, Network Troubleshooting, Solution Design
ICT Manager
2013 - 2015
Ooredoo
- Provided clients with strategic IT consulting services, including IT assessments, strategy development, and roadmap planning.
- Designed and implemented IT infrastructure solutions, ensuring alignment with business goals and industry best practices.
- Led system integration and migration projects, minimizing downtime and ensuring seamless transitions. Developed and implemented cybersecurity strategies to protect client data and systems from threats.
- Conducted IT audits and assessments, identifying areas for improvement and recommending actionable solutions.
- Collaborated with cross-functional teams to deliver tailored IT solutions that enhance operational efficiency and productivity.
- Managed vendor relationships, negotiated contracts, and oversaw the delivery of IT services and products.
- Delivered training and support to clients, ensuring effective use and maintenance of IT systems.
Technologies: IT Assessments, Strategy Development, Roadmap planning, IT Infrastructure, IT System Integration, Cybersecurity Strategies, IT Audits
Network Engineer
2011 - 2012
Alalza Sistemas
- Administered Windows Server networks, domains, roles and services, and exchange servers. Troubleshooted and maintained Active Directory, DNS, and DHCP.
- Contributed to the design, implementation, and ongoing management of the corporate network. Interfaced with customer teams to design and continuously deliver security-related enhancements.
- Analyzed data and defined network capacity models and performance metrics. Developed automated methods to mitigate and remediate network events and minimize operational complexity.
- Worked with global operations teams to identify and remedy issues with new sites while minimizing the impact on employees on-site.
- Assisted senior management with any project work and any technical or logistical requirements as deemed necessary.
Technologies: Routing and Switching Protocols, Firewalls, Servers, Hardware Testing, Networking, Active Directory (AD), DNS, Network Troubleshooting, Hardware Troubleshooting, Incident Management
Senior Executive Engineer
2003 - 2011
Corvit Networks
- Designed, deployed, and managed the organization's network infrastructure, ensuring optimal performance and security. Configured and maintained routers, switches, firewalls, and other network devices.
- Implemented and managed VPN solutions for secure remote access. Monitored network performance, identified issues, and performed troubleshooting to resolve connectivity problems.
- Carried out regular network security assessments and implemented necessary measures to protect against threats. Collaborated with cross-functional teams to support business operations and ensure network reliability.
- Documented high- and low-level designs, network configurations, processes, and procedures for reference and compliance purposes. Provided technical support and training to end-users and junior network staff.
- Assisted in the design and implementation of network solutions, including LAN/WAN, VoIP, and wireless networks.
- Performed network maintenance and upgrades, ensuring minimal downtime and disruption to operations.
- Configured and managed network security devices, including firewalls and intrusion detection and prevention systems.
- Conducted network performance analysis and optimization, improving overall efficiency and speed. Provided technical support for network-related issues, resolving incidents promptly and effectively.
- Participated in disaster recovery planning and testing to ensure business continuity.
Technologies: Network Troubleshooting, Hardware Troubleshooting, Routing and Switching Protocols, Firewalls, Network Design, Wireless Network Design, Solutioning, IT Security, System Implementation, Incident Management, LAN & Wireless LAN Surveys, Active Directory (AD), Servers
Experience
WAN & SD-WAN Data Networks
Replaced the installed base of equipment, migrated the hardware platform, deployed to the service provider location, and provided a comprehensive managed service for 36 months.
KEY ACTIVITIES
• Installed the primary FortiGate Firewall 601E with redundant power supply in the sCloud data processing center (CPD).
• Installed the secondary FortiGate Firewall 601E with redundant power supply in the Colt Telecom sCloud CPD.
• Handled the initial setup of the primary firewall by configuring the name, administrator password, NTP, and OOB interface for remote access.
• Updated the latest firmware and activated licenses in both firewalls.
• Terminated and configured Verizon internet and SD-WAN router in the firewalls.
• Configured a 20-gigabit-per-second port channel between firewalls and sCloud switches in both CPDs.
• Created virtual interfaces for Mitel phone systems.
• Configured high availability between firewalls in active and passive mode.
• Configured static routes, addresses, NAT, SSL VPN, IPSec VPN, policies, and BGP.
• Migrated and implemented the current platform's configuration to the new platform through professional services to migrate corporate internet browsing security services.
KEY ACTIVITIES
• Installed the primary FortiGate Firewall 601E with redundant power supply in the sCloud data processing center (CPD).
• Installed the secondary FortiGate Firewall 601E with redundant power supply in the Colt Telecom sCloud CPD.
• Handled the initial setup of the primary firewall by configuring the name, administrator password, NTP, and OOB interface for remote access.
• Updated the latest firmware and activated licenses in both firewalls.
• Terminated and configured Verizon internet and SD-WAN router in the firewalls.
• Configured a 20-gigabit-per-second port channel between firewalls and sCloud switches in both CPDs.
• Created virtual interfaces for Mitel phone systems.
• Configured high availability between firewalls in active and passive mode.
• Configured static routes, addresses, NAT, SSL VPN, IPSec VPN, policies, and BGP.
• Migrated and implemented the current platform's configuration to the new platform through professional services to migrate corporate internet browsing security services.
Aruba WiFi Network Survey, Renewal, & Maintenance
Deployed a process transforming wifi services for its entire internal service network to maximize the functionalities of the wireless connectivity service for its employees, visitors, teachers, and students. This solution includes the deployment of Aruba Central in its IT infrastructure and the replacement of 136 Cisco access points with Aruba AP-515.
KEY ACTIVITIES
• Renewed maintenance and necessary professional services to accompany the university in updating the above-mentioned environment.
• Defined the scope of professional services necessary to update the wifi connectivity environment, consolidated in the Aruba Central solution and the 136-access-point Aruba AP-515 installation and provisioning.
The new wifi connectivity infrastructure must be connected to access the Eduroam service through the RADIUS Eduroam/xyz university authentication hierarchy for university users.
KEY ACTIVITIES
• Renewed maintenance and necessary professional services to accompany the university in updating the above-mentioned environment.
• Defined the scope of professional services necessary to update the wifi connectivity environment, consolidated in the Aruba Central solution and the 136-access-point Aruba AP-515 installation and provisioning.
The new wifi connectivity infrastructure must be connected to access the Eduroam service through the RADIUS Eduroam/xyz university authentication hierarchy for university users.
Professional Services Nagios XI
Delivered the on-site deployment and parameterization of Nagios XI.
KEY ACTIVITIES
• Uploaded the firmware and license.
• Supported and implemented the Nagios XI solution.
• Parameterized network systems.
• Obtained platform operation and performance reports.
• Reviewed and proposed aspects for improvement.
• Performed testing and troubleshooting.
• Ensured knowledge transfer.
KEY ACTIVITIES
• Uploaded the firmware and license.
• Supported and implemented the Nagios XI solution.
• Parameterized network systems.
• Obtained platform operation and performance reports.
• Reviewed and proposed aspects for improvement.
• Performed testing and troubleshooting.
• Ensured knowledge transfer.
Communications Infrastructure Renewal, Support, & Maintenance
Installed and configured two new next-generation firewalls—Cisco Firepower 1140 and NGFW-K9—with the associated services necessary to minimize the risks of attack and with high availability to avoid service interruptions.
The core is composed of two Cisco Catalyst 9300 24T-A, stacked or connected with high availability to function as a backup of each other, and with enough 10-gigabit ports each to accommodate half of the connections with the access switches, Cisco Catalyst 9200L-48T-4X-E server switches, and firewalls.
The core is composed of two Cisco Catalyst 9300 24T-A, stacked or connected with high availability to function as a backup of each other, and with enough 10-gigabit ports each to accommodate half of the connections with the access switches, Cisco Catalyst 9200L-48T-4X-E server switches, and firewalls.
Checkpoint Firewall 80.20 to 80.40 Upgrade
KEY ACTIVITIES
• Analysis phase: Conducted a version pre-assessment check for hardware compatibility.
• Design phase: Defined the upgrade migration path plan and timetable.
• Upgrade phase: Performed a pre-upgrade validation test for each key component, upgraded and stabilized the environment, and conducted post-upgrade validation tests for each key component.
• Closing phase: Delivered detailed documentation and proper handover.
• Analysis phase: Conducted a version pre-assessment check for hardware compatibility.
• Design phase: Defined the upgrade migration path plan and timetable.
• Upgrade phase: Performed a pre-upgrade validation test for each key component, upgraded and stabilized the environment, and conducted post-upgrade validation tests for each key component.
• Closing phase: Delivered detailed documentation and proper handover.
Unified Communications & Collaboration Assessment
The key target was to remove all desktop phones and reduce the physical infrastructure and maintenance of gadgets, which could be replaced with software installed on the devices.
The challenge was to perform this mindset change smoothly and with the least impact possible on the actual service environment. I used Microsoft Teams with the Phone System add-on to achieve company goals.
The challenge was to perform this mindset change smoothly and with the least impact possible on the actual service environment. I used Microsoft Teams with the Phone System add-on to achieve company goals.
Splunk Data Migration Project
Migrated Splunk professional services to a new host.
ANALYSIS PHASE
• Gathered environment and architecture information.
• Analyzed migration requirements and version considerations.
• Validated Windows Server 2019 configuration, including rights and permissions for file systems and accounts.
MIGRATION PHASE
• Stopped Splunk Enterprise services.
• Installed Splunk on the new host.
• Migrated data content.
• Verified index configurations.
• Confirmed that data was intact by performing a search.
• Updated the documentation.
ANALYSIS PHASE
• Gathered environment and architecture information.
• Analyzed migration requirements and version considerations.
• Validated Windows Server 2019 configuration, including rights and permissions for file systems and accounts.
MIGRATION PHASE
• Stopped Splunk Enterprise services.
• Installed Splunk on the new host.
• Migrated data content.
• Verified index configurations.
• Confirmed that data was intact by performing a search.
• Updated the documentation.
Education
2022 - 2024
Master's Degree in Information Technology
Superior University - Lahore, Punjab, Pakistan
Certifications
FEBRUARY 2021 - FEBRUARY 2026
Cisco Certified Specialist - Security Core
Cisco
FEBRUARY 2021 - FEBRUARY 2026
Cisco Certified Network Professional Security (CCNP Security)
Cisco
AUGUST 2020 - AUGUST 2023
Huawei Certified ICT Associate-Security (HCIA-Security)
Huawei Technologies Co., Ltd.
AUGUST 2020 - AUGUST 2022
Fortinet NSE7: Network Security Architect
Fortinet Training Institute
AUGUST 2020 - AUGUST 2022
Fortinet NSE4: Network Security Professional
Fortinet Training Institute
APRIL 2020 - APRIL 2023
Huawei Certified ICT Associate-Storage (HCIA-Storage)
Huawei Technologies Co., Ltd.
MARCH 2020 - PRESENT
ITIL 4 Specialist: Create, Deliver and Support
Axelos Ltd.
AUGUST 2019 - AUGUST 2022
Certified Ethical Hacker (CEH)
EC-Council
JULY 2019 - PRESENT
ITIL 4 Foundation - IT Service Management
Axelos Ltd.
NOVEMBER 2017 - NOVEMBER 2026
Cisco Certified Network Associate (CCNA)
Cisco
OCTOBER 2017 - FEBRUARY 2020
Cisco Certified Design Associate (CCDA)
Cisco
JUNE 2016 - JUNE 2018
VMware Certified Professional 6 - Data Center Virtualization (VCP6-DCV)
VMware, Inc.
DECEMBER 2000 - PRESENT
Microsoft Certified Systems Engineer (MCSE)
Microsoft
Skills
Libraries/APIs
RADIUS
Tools
VMware, Palo Alto Panorama, Cisco Meraki, ConfigServer Security & Firewall (CSF), VMware vSphere
Platforms
Windows Server, Microsoft, Nexus
Storage
Microsoft Exchange Server
Languages
Python
Paradigms
Automation, Management, Testing
Industry Expertise
Cybersecurity
Other
Fortinet, IP Networks, Fortinet Firewall Configuration, ICT Training, Network Design, Customer Service Management (CSM), Customer Relationship Management (CRM), Implementation, Vendor Management, Vendors & Suppliers, Wireless Network Design, Solution Design, IT Networking, Cisco Networking, Network Engineering, System Administration, Exchange 2016, Microsoft 2010, Microsoft 365, Migration, Microsft Training, Network Management Stations (NMS), Routing and Switching Protocols, Checkpoints, Aruba, Cybersecurity Operations, FortiAnalyzer, RFPs, RFQs, ITTs, Responses, Proposals & Quotes, SANs, Project Planning, IT Audits, IT Security, IT Assessments, Firewalls, ASA Firewalls, Network Troubleshooting, Strategy Development, Roadmap planning, IT Infrastructure, IT System Integration, Cybersecurity Strategies, Servers, Hardware Testing, Networking, Active Directory (AD), DNS, Hardware Troubleshooting, Incident Management, Solutioning, System Implementation, LAN & Wireless LAN Surveys, Software-defined WAN (SDWAN), IP Routing, Network Switching, Enterprise Cybersecurity, Forensic Analysis, Cisco, Cyber Threat Hunting, Ethical Hacking, Change Enablement, Strategic Management, Communication, IT Asset Management (ITAM), IT Service Management (ITSM), ITIL Continual Service Improvement (CSI), IT Operations Management (ITOM), Routing, SD-WAN, Virtual DOM, Layer Switching, IPsec, High Availability (HA), Web Proxy, Network Diagnostics, Fortinet Auto Discovery VPN (ADVPN), Border Gateway Protocol (BGP), Hub-and-spoke IPsec, Virtual Domain (VDOM), Troubleshooting, Server Management, TACACS+, Group Policy, User Management, Domain Migration, Certificate Authority (CA) Server Management, Storage, Content Filtering, URL Filtering, Rules and Policies, Vulnerability Remediation, Wireless Security, Access Points, WLAN Controllers, Wireless Controller for Cloud, Network Monitoring, Network Security Monitoring, Firewall Protection, Malware Protection, Signature-based Threat Detection, Intrusion Prevention Systems (IPS), Intrusion Detection Systems (IDS), Server Security, Client-side Security, Application Control, Upgrades, IP Telephony, Incident Response, Threat Intelligence, Juniper
Collaboration That Works
How to Work with Toptal
Toptal matches you directly with global industry experts from our network in hours—not weeks or months.
1
Share your needs
Discuss your requirements and refine your scope in a call with a Toptal domain expert.
2
Choose your talent
Get a short list of expertly matched talent within 24 hours to review, interview, and choose from.
3
Start your risk-free talent trial
Work with your chosen talent on a trial basis for up to two weeks. Pay only if you decide to hire them.
Top talent is in high demand.
Start hiring