Hossein Arbabi

I’m currently working as part of the Network Engineering team, supporting the design, operation, and optimization of our global office network infrastructure. My work includes managing office networks (Wi-Fi, internet, IoT, and interoffice connectivity), integrating new locations, deploying new technologies, and ensuring reliable and secure communication across all sites. I also collaborate closely with other network engineers worldwide on various strategic projects — focusing on network performance, automation, and security. This role requires effective coordination, real-time communication, and a strong hands-on approach in a dynamic global environment. Technologies & skills involved: Palo Alto, Fortinet, HPE Aruba, Extreme Networks, TCP/IP, BGP, IPSec, SD-WAN, Ansible, Python, PRTG, Wireshark.

• Installed and configured firewalls (ASA, Firepower, Fortigate, Palo Alto, Juniper). • Reduced network downtime by 65% through upgrading network infrastructure devices. • Added value by designing and implementing Cisco ISE services, including dot1x for LAN, WLAN, and VPN users. • Conducted regular audits and assessments of IT security systems, including firewalls, UTM, proxy, IPS, VPN, and SIEM, to enhance overall security posture. • Routing optimization: Designed and implemented advanced routing protocols (BGP and OSPF), improving network efficiency by 35% and significantly reducing latency during peak load times. • Network resilience: Developed and implemented a redundancy strategy using HSRP and VRRP, achieving 99.9% network availability over two years. • Monitored network performance and security, analyzed logs and metrics to identify and mitigate potential threats. • Achieved an 80% budget saving by designing and upgrading Cisco FTD and FMC, Fortigate, Juniper SRX, and Palo Alto firewalls, with a 30% increase in security through the upgrade. • Led a project to redesign firewall policies, reducing additional configuration by 60%. • Assisted in the design and implementation of network security solutions, ensuring compliance with industry standards. • Led the implementation of more than 50 security projects, ensuring all agreements were met. • Successfully provided technical consulting to over 40 clients, improving their security posture and satisfaction rates. • Built strong relationships with clients by understanding their security needs, acting as a trusted advisor, and delivering tailored solutions.

• Install and configure Firepower 2110 to protect LAN and Server farms against the untrusted zone. • Implementation and Administrator of Cisco ISE to protect the wireless network. • Designing and implementing of whole company network (HQ office and branch offices) • Install VMware ESX on HP servers and install monthly paths on them. • Create an automatic backup schedule for virtualization environments (VM) • Implementation and configuration of DMVPN for establishing connections between Depoint branches.

• Achieved 30% savings in the IT budget by implementing "DMVPN" using existing network resources instead of purchasing new devices. • Optimized the switching infrastructure with Cisco devices by upgrading all IOS versions. • Freed up 20% of internet bandwidth by configuring the IPS module to block unnecessary product updates. • Introduced a culture of documenting experiences from retirees, leading to significant benefits: • Significantly reduced error rates, improving the performance of IT experts. • Accelerated the onboarding of new employees by 10%. • Achieved 40% savings in the cabling budget by designing and implementing the Cisco wireless solution. • Minimized security vulnerabilities by implementing the wireless TLS authentication method. • Added value by installing and configuring the Veeam Backup solution, leading to a 60% improvement in incomplete backups and failed restores through the use of automation tools. • Increased network transparency by configuring and securing Cisco routers, L3 switches, and L2 devices using route redistribution, filtering, and encryption/authentication across 5 enterprise data centers. • Protected 100% of the budget with a cost-free "Disaster Recovery Strategy" by mass collecting all unused devices.