Sultan Alhajri

* Designing, implementing, and optimizing network security architectures aligned with security requirements and organizational objectives. * Engineering and managing firewalls, VPNs, network segmentation, access control, and advanced network security solutions. * Designing and implementing Web Application Firewall (WAF) solutions to protect web applications against application-layer threats. * Implementing and managing Load Balancing solutions to ensure application availability, scalability, traffic distribution, and service resilience. * Designing and implementing Network Access Control (NAC) solutions for secure endpoint authentication, authorization, access enforcement, and network segmentation. * Contributing to the architecture, design, and implementation of new technology and infrastructure projects, ensuring security is integrated from the early stages of project development. * Supporting security assessments, risk analysis, vulnerability remediation, and security hardening across network environments. * Supporting security incident investigation, response, and root-cause analysis across network environments. * Implementing defense-in-depth and network segmentation strategies to reduce attack surfaces and mitigate lateral movement. * Collaborating with cybersecurity, infrastructure, and engineering teams to deliver secure and resilient enterprise solutions. * Contributing to network security standards, architecture patterns, technical documentation, and engineering best practices. * Continuously developing expertise in network security and cybersecurity technologies. * Contribute to digital transformation initiatives by establishing and standardizing IT Network and Network Security architectures, standards, policies, and technical guidelines, ensuring alignment with cybersecurity and international best practices, organizational requirements, and scalable digital transformation objectives.

* Designed, implemented, and maintained enterprise network and security infrastructures, ensuring high availability, performance, scalability, and compliance with organizational security standards. * Led the deployment, administration, and optimization of Palo Alto Networks Firewalls, including security policies and advanced security controls. * Managed and engineered F5 BIG-IP solutions, including LTM, SSL offloading, load balancing, high-availability configurations, traffic optimization, and application delivery services for mission-critical systems. * Implemented and supported Fortinet security solutions, including FortiGate Firewalls, FortiAuthenticator, and FortiClient EMS, enabling secure authentication, endpoint visibility, certificate-based access, and centralized endpoint management. * Architected and maintained secure network segmentation to reduce attack surfaces and enhance network resilience. Administered enterprise Cisco Systems switching and routing environments, including VLAN design, Layer 2/Layer 3 technologies, routing protocols, redundancy mechanisms, and network performance optimization. * Designed and managed Cisco Identity Services Engine (ISE) deployments, delivering 802.1X authentication, Network Access Control (NAC), device profiling, posture assessment, guest access services, and integration with Active Directory and security platforms. * Supported and optimized enterprise wireless infrastructures, including wireless LAN controllers, access points, and user experience improvements. * Led troubleshooting and root-cause analysis of complex network and security incidents, minimizing downtime and ensuring rapid service restoration. * Collaborated with infrastructure, cybersecurity, application, and cloud teams to implement secure connectivity solutions and support business-critical initiatives. * Participated in security assessments, risk mitigation initiatives, vulnerability remediation efforts, and infrastructure modernization projects.

Network engineering specialist responsible of 1- Change Request planning and implementation. 2- Cisco Network Devices configuration and implementation. 3-Network Active Devices requirement. 4-BOQ’s of Network Active Devices for new projects. 5- Troubleshooting Cisco Devices (L3 Switches, APs, WiFi Controllers). 6- Fortinet’s SD-Branch Solutions configuration and troubleshooting. 7- FortiGate configuration and troubleshooting. 8- upgrading Firewalls (FortiNet, PaloAlto) and migration. 9-Updgrading Network devices(FortiNet, Cisco) and migration. 10- Migration to FortiNet SD-Branch. 11- network segregation. 12-IP Scheme.

IT Specialist , doing support for Outlook, network connectivity, application support and installation. Network infrastructure work such as switch configuration, ip schema management, designing and implementing new networks.

Network Engineer At The Royal Commission of AlUla -Switch configuration, implementation -Routers configuration, implementation Firewall Management