Sufiyan Salim Shaikh
Abu Dhabi
Summary
A network and security professional with extensive expertise in Palo Alto Firewalls, cloud technologies including AWS, Azure, and GCP, and OT/IT Network & Security. Demonstrates proficiency in Cisco SDN ACI Fabric, Cisco Software Define Access (SDA), and Cisco Catalyst Centre, alongside a strong command of network architecture and solutions. Skilled in information security practices such as content analysis, log monitoring, SIEM, threat analysis, and vulnerability assessment. Adept at managing network security through Panorama, Strata Cloud Manager, Juniper & FortiGate systems. Career goals include advancing innovative IT/OT design solutions while enhancing cybersecurity measures across diverse environments.
Overview
16
16
years of professional experience
Work history
Network Security Architect & Project Lead
Apha Data PLC Abu Dhabi
Abu Dhabi
2025.12 - 2026.05
- Design, implement, and manage network security solutions & Cloud like (Firewalls, Network appliances, F5 & Cloud load-balancers, Wireless, AWS, AZURE, GCP, ACI, SDA, SD-WAN)
- Provide Technical Leadership across projects and operations, ensuring alignment with business and network security objectives.
- Implement ZTNA security models across cloud environments.
- Handles Complex Network Security related issues.
- Implement micro-segmentation and security policy through Illumio.
- Lead project planning, execution, tracking, and delivery, ensuring timelines, scope, and quality are met
- Manage stakeholder communication, expectations, and reporting across internal and external teams.
- Built scalable, solution-based architectures tailored to customer business and security needs.
- Lead high-performance technical teams, driving execution of strategic initiatives using modern technologies.
- Lead Tech debt refresh and migration programs, replacing end-of-life appliances with minimal business disruption.
- Lead Data Center Projects and DC movement from Onprem to Cloud (AWS, AZURE, GCP)
- Own and manage escalations, including resolution of critical incidents within agreed SLA.
- Support Merger & Acquisitions of organization.
- Implemented cybersecurity strategies for improved system integrity.
- Enhanced network security with regular system updates and patches.
- Coordinated cross-functional teams to meet project deadlines.
- Implemented risk management strategies for successful project completion.
- Reduced downtime with effective scheduling and resourcing.
Group Technical Manager
HCL AMERICA INC
Hartford, Connecticut
2024.09 - 2025.11
- Responsible for defining and enhancing enterprise-wide network architecture to improve operational efficiency and resilience.
- Implemented and supported security appliances including Palo Alto (Edge & Data Center firewalls), FortiGate & Cisco Firepower.
- Troubleshot network & security OT/IT related issues and provided rapid solutions to limit downtime.
- Designed, implemented, and troubleshoot Cisco ACI (SDN) fabrics and endpoints.
- Implemented OT Network segmentation policies through Elastic.
- Configuring and securing Industrial protocol such as Modbus, DNP3.
- Designed, implemented new OT Sites and PLCs.
- Designed, implemented, and troubleshoot Cisco SDA Fabric.
- Managed and monitored security using Palo Alto Panorama
- Conducted Root Cause Analysis (RCA) and implemented long-term problem management solutions.
- Ensure adherence to security policies, standards, and best practice.
- Configure and manage SD-WAN and Palo Alto Prisma.
- Review security incidents reports, logs through Panorama and SIEM platforms to identify vulnerabilities and analyse security flows.
- Managed LWAPs, Controller, Cisco Catalyst Canter.
- Ensured strict compliance with change management processes, including pre-post changes validations.
- Coordinated with vendors during hardware procurement process ensuring timely project completion.
- Configured routers, switches and firewalls to deploy and support LAN, WAN and wireless networks.
- Project: Stanley Black & Decker
Group Technical Manager
HCL United Kingdom LTD
London
2023.10 - 2024.08
- Lead end-to-end project planning, design, implementation, and troubleshooting across network security, wireless, and cloud infrastructure (AWS, Azure, GCP, VMware Cloud).
- Designed enterprise and cloud network security architectures, aligned with both IT and OT infrastructure requirements.
- Experience in OT/IOT integrations.
- Implement OT Network across Stanley Black & Decker Sites.
- Implemented Zero Trust security models across cloud environments.
- Implemented and supported security appliances including Palo Alto (Edge & Data Center firewalls), Cisco Firepower, Cisco ASA, and Juniper SRX / Net Screen.
- Designed, implemented, and troubleshoot Cisco ACI (SDN) fabrics and endpoints.
- Managed and monitored security using Palo Alto Panorama and Juniper NSM.
- Configured security and NAT policies in line with customer security standards.
- Implemented Palo Alto UTM features including Web Filtering, File Blocking, Anti-Virus, Wildfire, and Anti-Spam.
- Monitored logs via Panorama and SIEM platforms to identify vulnerabilities and analyze security flows.
- Designed and managed cloud networking and security architectures in AWS, Azure, and GCP.
- Project: Stanley Black & Decker
Technology Specialist
Yash Technologies Pvt LTD
2018.01 - 2020.08
- Requirements gathering through Bill of Materials (BOM) creation, cost proposals, business case development, and deployment planning.
- Designed, planned, and implemented Data Center network infrastructure aligned with business and technical requirements.
- Configured and troubleshot IPsec VPN, SD-WAN, and enterprise routing protocols including BGP and OSPF.
- Configured and resolved issues related to Layer 2 / Layer 3 VLANs and HSRP high-availability setups.
- Ensured strict adherence to change management processes for all production changes.
- Reviewed and validated technical design documents (TDDs) and solution architectures.
- Engaged and coordinated with global stakeholders, ensuring alignment across regions and teams.
- Negotiated costs and managed multiple vendors for Data Center requirements including electrical systems, structured cabling, CCTV, access control systems, wireless site surveys, and UPS solutions.
- Managed project lifecycle end-to-end — planning, execution, delivery, service transition, and closure.
- Collaborated on technology strategy planning, aligning IT with business goals.
- Monitored network performance, identifying issues before escalated.
- Project: Stanley Black & Decker
Senior Security Analyst
Tech Mahindra LTD
2016.07 - 2018.01
- Worked as a key member of the Security Implementation Team supporting the Credit Suisse account.
- Managed end-to-end network security projects, including planning, network design, configuration, and deployment based on user and business requirements.
- Delivered projects within defined timelines while adhering to enterprise security and compliance standards.
- Administered and maintained network and security devices across the environment.
- Troubleshoot complex network and security incidents to ensure service stability and availability.
- Handled change requests in accordance with formal change management processes, ensuring risk assessment, approvals, and smooth implementation.
- Project: Credit Suisse
Engineer- Network Security Management
Orange Business Services
2013.09 - 2016.07
- Worked in a 24×7 Network Security Operations Centre, supporting multiple enterprise customers.
- Monitored, handled, and troubleshot network and security incidents to ensure high availability and minimal service disruption.
- Investigated alerts, performed root cause analysis, and resolved security and connectivity issues across customer environments.
- Implemented approved change requests in line with defined change management processes.
- Coordinated with internal teams and customers to ensure timely incident resolution and service restoration.
Network Administrator
Allied Digital Services LTD
2013.03 - 2013.09
- Worked as part of TCS Network Team supporting TATA Power account.
- Monitored network infrastructure across 100+ sites using SolarWinds, ensuring availability and performance.
- Identified, analyzed, and resolved Layer 2 (L2) network incidents to minimize downtime.
- Coordinated with internal teams and site personnel to restore services efficiently.
- Maintained incident documentation and followed operational support processes.
- Project: Tata Power
Network Engineer
DSM INFOCOM PVT LTD
2011.08 - 2012.10
- Monitored and supported network appliances, switches, and routers in banking NOC environment, troubleshooting network issues and ensuring service stability.
Trainee Network Engineer
Allied Digital Services LTD
2010.11 - 2011.08
- Worked on Raymond project, Responsible to monitor and perform link testing whenever site goes down and create ticket with service provider.
Education
BCOM -
Mumbai University
MumbaiHSC - undefined
Maharashtra Board
SSC - undefined
Maharashtra Board
Skills
- Palo Alto Firewall like PA-220, PA-450, PA-460, PA-820, PA-1410, PA-3220, PA-3440, PA5430, PA5410
- Cloud Architecture (AWS, AZURE, GCP)
- Project Management
- OT Network & Security
- OT Micro-Segmentation as per (IEC 62443/NIST SP800-82)
- OT/ICS & PLCs
- OT Micro segmentation through Elasity & Illumio
- Design and Solution IT/OT
- Cisco SDN ACI Fabric
- Cisco Software Define Access (SDA)
- Cisco Catalyst Center/DNAC
- ACI Multi-Pod and Multi-Site Environment
- Cisco ISE, Cisco ASA, Cisco Email Security
- Infoblox Grids (DDI)
- Information Security (Content Analysis, Log Monitoring, SIEM, Threat Analysis, Vulnerability Assessment)
- Network Security Managers (Panorama, Strata Cloud Manager, Juniper & FortiGate)
- Juniper SRX Series Firewalls SRX210, SRX550, SRX650, SRX1400
- Network Architecture and Solutions
- Install, Configure and Upgrade network appliances
- CISCO ASA, Juniper Net screen & SRX Firewall and Fortinet firewall, SSL VPN DEVICES, UTMs Features, and IPS/IDS
- F5 LTM/ GTM, Cisco ACE and Cisco GSS
- SD-WAN, SASE & Prisma Cloud
- Cisco Catalyst Switches 9200,9300, 9400, 9500
- HSRP, VRRP, GLBP Protocols
- Routing protocols EIGRP, OSFP, BGP
- AWS, GCP & AZURE Direct Connect, Transit Gateways, Firewalls, Policy, Load Balancer, Private Link, VPC & Transit Gateway Peering, Azure Front Door, Application Gateway
- Switch technology: Spanning tree, DTP, VTP, STP, RSTP, Stack switches Ether channels: PAGP, LACP, QOS
- Cisco WLC, Wireless & Access-Points
Timeline
Network Security Architect & Project Lead
Apha Data PLC Abu Dhabi
2025.12 - 2026.05
Group Technical Manager
HCL AMERICA INC
2024.09 - 2025.11
Group Technical Manager
HCL United Kingdom LTD
2023.10 - 2024.08
Technology Specialist
Yash Technologies Pvt LTD
2018.01 - 2020.08
Senior Security Analyst
Tech Mahindra LTD
2016.07 - 2018.01
Engineer- Network Security Management
Orange Business Services
2013.09 - 2016.07
Network Administrator
Allied Digital Services LTD
2013.03 - 2013.09
Network Engineer
DSM INFOCOM PVT LTD
2011.08 - 2012.10
Trainee Network Engineer
Allied Digital Services LTD
2010.11 - 2011.08
HSC - undefined
Maharashtra Board
SSC - undefined
Maharashtra Board
BCOM -
Mumbai University