Sulay Soni
Senior Network & Security Consultant
Hire this person
Send a job offer directly to this candidate
About
Highly accomplished Senior Network & Security Consultant with over 15 years of experience architecting, designing, implementing, and operating large-scale enterprise and service provider network and security infrastructures. Extensive expertise across Cisco (IOS, NX-OS, IOS-XR, ACI, Meraki), Arista, Juniper, SD-WAN, Palo Alto Networks, Check Point, F5, Zscaler, and cloud platforms including AWS and Azure. Proven ability to deliver secure, scalable, and highly available solutions across LAN, WAN, data center, cloud, and edge environments.
Strong background in network automation, cloud transformation, and DevOps integration, enabling Infrastructure as Code (IaC), API-driven operations, and improved operational efficiency. Adept at defining architecture standards, security frameworks, and governance models while leading cross-functional teams and driving complex enterprise transformation initiatives.
Experience
Senior Network & Security Consultant - Moneris Inc.
(2025-01)
Serve as a Senior Network & Security Consultant and Architect responsible for the architecture, design, and day‑to‑day operations of Moneris' data center, campus, and regional office network environments.
- Provide technical leadership across a large‑scale, multi‑vendor infrastructure consisting of Cisco, Nexus, and Arista routers and switches, Palo Alto and Check Point firewalls, F5 and Cloudflare load balancing and Layer‑7 DDoS protection, Cisco ISE, Prisma Access, and additional segmented network domains
- Drive Network modernization initiatives, including end‑to‑end data center network architecture transformation aligned with hardware refresh programs
- Lead campus migration from Cisco to Arista cloud‑managed networking platforms
- Lead regional site firewall migrations from Cisco ASA and Juniper firewalls to Palo Alto NGFW
- Design and deliver a fully isolated Non‑Production environment, separate from Production, to enable robust testing, validation, and change assurance
- Lead network automation initiatives to reduce manual effort and operational risk, including automated firewall rule implementation, Cisco and network device configurations and F5 Configuration and SSL Cert renewals
- Actively support and participate in annual internal and external PCI, security, and compliance audits
- Design and lead an annual network upgrade and maintenance program, ensuring a resilient, redundant architecture, implementing zero-downtime or low-impact changes, and enabling consistent, predictable lifecycle management across all network platforms
- Play a key role in migrating the RBC data center architecture from a legacy network design to a simplified, refreshed, and more resilient architecture
- Contribute to application migrations from on‑premises data centers to Azure Cloud, improving availability, scalability, and resilience as part of Moneris' cloud transformation strategy
Senior Network & Security Consultant - Fidelity Investments Canada Inc.
(2022-06 - 2024-12)
Lead end‑to‑end architecture, design, and operations of enterprise network and security infrastructure across data centers, campus, and cloud environments.
- Architect and manage a multi‑vendor ecosystem, including Cisco Nexus & enterprise routing platforms, Palo Alto firewalls with Panorama, F5 BIG‑IP (LTM, GTM, vCMP), Zscaler (ZIA/ZPA) proxy security, Pulse Secure VPN, Aruba Silver Peak SDWAN
- Lead campus network transformation, migrating from traditional Cisco switching to Cisco Meraki cloud‑managed networking
- Design and implement secure segmentation across internal, DMZ, and external zones using Palo Alto NGFW
- Own F5 architecture and operations, delivering high‑availability load balancing and WAF protection
- Architect and deploy Silver Peak SD‑WAN, including policy design, traffic migration, and optimization
- Manage enterprise DNS/DHCP platforms (QIP, UltraDNS), ensuring resilience and global performance
- Design and implement Zero Trust access models using Zscaler
- Lead capacity planning, lifecycle management, upgrades, SSL certificate management, and compliance initiatives
- Act as a technical authority, collaborating with security, cloud, and infrastructure teams on enterprise initiatives
Senior Network Engineer / Team Lead - Rogers Communications Inc.
(2018-01 - 2022-05)
Led a team of 11+ network engineers supporting a nationwide network footprint.
- Design and support large‑scale LAN/WAN infrastructure (8,000+ devices) across Cisco and Nexus platforms
- Serve as SME for 5G/LTE network expansion
- Serve as SME for core and aggregation upgrades (ASR 9K, Nexus)
- Develop Ansible‑based network automation, reducing deployment time and manual errors
- Design and enforce QoS and routing policies, improving traffic efficiency and application performance
- Lead deployment of TWAMP monitoring, increasing visibility into latency, jitter, and packet loss
- Author MOPs and test plans for large‑scale production changes
- Coordinate with vendors and internal stakeholders to deliver critical initiatives with minimal downtime
Network Security Engineer - Rogers Communications Inc.
(2013-03 - 2018-01)
- Design and implement enterprise security solutions using Palo Alto NGFW, Cisco ASA, and Check Point
- Manage Panorama for centralized firewall policy and configuration management
- Design secure VPN architectures (IPsec, SSL VPN, Global Protect)
- Implement F5 BIG‑IP LTM and Cisco ACE load balancers
- Lead security incident response, threat analysis, and vulnerability remediation
- Coordinate penetration testing efforts and apply remediation strategies
- Develop firewall policies aligned with security and compliance standards
Senior IP Engineer - Idea Cellular Ltd.
(2007-01 - 2012-09)
- Provide L2/L3 support for telecom backbone networks (3G/LTE)
- Manage MPLS backbone, BGP, OSPF, and traffic engineering
- Lead provisioning and migration initiatives, including LTE rollouts
- Perform IOS upgrades, troubleshooting, and performance optimization
Education
Bachelor of Engineering - Networking & Computer Engineering - Dharmsinh Desai University
