Six years of experience designing, securing, and automating enterprise network infrastructure — from FortiGate and BGP to self-built SOC platforms.
A short introduction to my background, expertise, and the kind of work I love doing.
In this short video I walk through my background in enterprise network security, the tools I use daily, and how I approach complex infrastructure challenges — from FortiGate firewall migrations to ISP-level BGP routing.
As a network and cybersecurity engineer with 6+ years of experience, I specialize in designing, securing, and optimizing complex IT infrastructures across enterprise environments, with expertise in network architecture (LAN/WAN), VPN technologies, and advanced security implementations including Fortinet FortiGate, Sophos UTM, and Palo Alto firewalls. I bring strong proficiency in routing and switching (Cisco, BGP, OSPF, MPLS) and system administration across Windows Server, Linux, and Unix platforms, while actively developing VPN protocol automation scripts (Singbox, Hysteria2) using Bash to support scalable infrastructure operations.
A core part of my recent work has been architecting SENTINEL, an internal security monitoring platform I built independently — featuring cross-platform agents, file-integrity monitoring, USB DLP, secret-egress detection, GitHub secret scanning, malware scanning, and real-time SOC alerting. I have also developed fleet-scale automation pipelines for DNS integrity monitoring, VPN egress validation, and leak/performance detection across globally distributed server infrastructure.
I lead ISO/IEC 27001 implementation and compliance maintenance, covering policy development, audit readiness, and security governance, alongside experience in data center networking, performance optimization, patch management, and proactive threat mitigation. Having resolved 1,200+ technical cases, I focus on improving system reliability, strengthening security posture, and driving operational efficiency through automation and best practices.
From network administration to enterprise security engineering — a 6-year progression through Bangladesh's leading technology firms.
Industry-recognized credentials in firewall engineering, network security, and system administration.
Fortinet
FortiOS 7.2 certified. Covers FortiGate firewall management, VPN, IPS, web filtering, and advanced threat protection.
Fortinet
Foundation-level understanding of the cybersecurity threat landscape and Fortinet's core security products and solutions.
Microsoft
Exam 70-740: Installation, Storage & Compute with Windows Server 2016. Achieved a distinction-level score of 933.
Cisco / Creative IT Institute
Network fundamentals, routing & switching, IP connectivity, VLANs, STP, security fundamentals, and network automation.
ICSI, United Kingdom
Modern network security covering encryption, firewalls, IDS/IPS, VPN architecture, vulnerability assessment, and threat intelligence.
Mile2
Security awareness fundamentals: social engineering, phishing defense, password best practices, and organizational incident response.
BYLC
In 2017, I have participated and successfully completed BBLT’17. Building Bridges through Leadership Training (BBLT) is Bangladesh Youth Leadership Center’s 10-week long signature leadership training program.
Real-world firewall deployments, ISP network configs, VPN setups, and homelab security builds.
SENTINEL by Kolpolok — Watch, detect, and respond across every company device. One console for endpoint visibility, data-loss prevention, and…
Automation as a Security Control — A family of unattended monitoring pipelines covering DNS resolution integrity, in-memory datastore health, and…
Continuous Control Validation for a Global VPN Fleet — Every server, every night: connect, verify no leak, measure performance, probe…
Acceptable-Use Enforcement at the Tunnel Layer — Real-time P2P detection on a multi-tenant ocserv fleet, with progressive enforcement: immediate egress…
Meet Hisabio — Smart Budget Planner That Keeps Your Money (and Your Sanity) Intact. Tired of wondering where your paycheck…
Project Summary ISO 27001:2022 implementation was the core focus of my role in 2024, where I served as an ISMS…
Server Room Setup Design & Deployment: Secure, Scalable for an Edu-Tech Company Project Overview Client BacBon Ltd (Edu-Tech Company) Location…
Overview This project involved a full-scale enterprise firewall migration and fresh deployment for one of the largest vehicle manufacturers in…
CISCO Routing & ISP Project Overview Client Internet Service Provider (ISP) — Confidential Location Moghbazar, Dhaka, Bangladesh Date September 2021…
Firewall configs, network writeups, lab builds, and field notes from enterprise security work.
Walkthrough
Wazuh installation on Ubuntu 22.04 is a straightforward process when you follow a structured, step‑by‑step approach. In this guide, you’ll learn how…
Tutorial
Creating a reliable and scalable network diagram is one of the most critical tasks for any network security engineer. Before touching a…
Available for security consulting, network architecture projects, and full-time opportunities.
Whether you need a firewall migration, network security audit, or want to discuss a new role — I'm ready to talk.
