Jabar Khan

Network Security Professional with 6+ years of experience designing, securing, migrating, and managing enterprise network infrastructure across MSP, ISP, and distributed client environments. Strong hands-on experience with next-generation firewalls, firewall migrations, VPN/IPsec tunnels, SD-WAN migrations, routing and switching, cloud security, vulnerability management, and high-availability network operations. Skilled in Check Point, Palo Alto, FortiGate, Sophos, Meraki MX, Zscaler, Tenable, Imperva WAF, Office 365 Exchange, Active Directory, Cisco routing/switching, and enterprise troubleshooting.

Network & Security Engineer - CyberGen

(2023-08)

• Manage network and security operations for multiple clients, including endpoint support, Office 365 Exchange, Active Directory administration, and performed cloud migration.
• Configure and maintain VPNs, remote access, and cross-vendor IPsec tunnels to provide secure, high-availability connectivity across diverse infrastructures.
• Migrated Meraki MX firewall, switches, and access points to a FortiGate 100F high-availability setup; configured Forti Fabric, FortiSwitches, FortiAPs, and ongoing network operations.
• Completed a firewall migration from Check Point SMB firewalls to Sophos firewalls for a client environment.
• Performed Check Point firewall upgrades and operations across multiple clients, including management servers, clusters, gateways, and Smart-1 Cloud migrations.
• Upgraded Client's Check Point management server from R80.40 to R81.20 and upgraded multiple clusters.
• Migrated Client's Check Point management from on-premises infrastructure to Smart-1 Cloud.
• Handled the Check Point side of a large-scale migration from R77.20 to Palo Alto firewalls across 38 sites, including management migration to Panorama in coordination with a senior architect.
• Assisted in a major Trace3 - GMR SD-WAN migration from Cisco Viptela (vEdge, vSmart, vBond, vManage) to Palo Alto Prisma SD-WAN (ION 1200S, 3200, 5200, 9200) across 46 sites; later independently handled SD-WAN site migrations.
• Implemented Domotz monitoring and Nakivo backup solutions from scratch, establishing proactive network management and reliable data protection.

Network Security Engineer - TekBoox (Hallmark MSP)

(2021-07 - 2023-08)

• Managed Zscaler Internet Access (ZIA) to ensure secure web connectivity and enforce customized security policies through PAC files, application profiles, and forwarding profiles.
• Managed Tenable vulnerability assessment tools to identify security risks, conduct regular vulnerability scans, and recommend mitigation strategies.
• Configured and managed Check Point, FortiGate, and Palo Alto firewalls to protect client networks from security threats.
• Led Check Point firewall hardware swap and migration activities for single and cluster gateways while minimizing downtime and network disruption.
• Resolved critical incidents, problem tickets, and service requests within defined SLA targets using the ServiceNow platform.
• Provided technical support and troubleshooting to reduce downtime and improve end-user experience.

Network Engineer - Cybernet ISP

(2017-12 - 2021-06)

• Configured, operated, and supported Cisco routers including 2900 and 3600 series devices, and Cisco switches including 2900, 3500, 3700, and 9000 series platforms.
• Worked with wireless LAN controllers including Cisco 5520, Ruckus SZ124, Ruckus vSZ124, and Ruckus ZD1200.
• Configured and managed Layer 2 and Layer 3 networks to improve network performance, reliability, and availability.
• Designed and implemented network infrastructure to optimize network performance and reliability.
• Implemented and supported routing and switching protocols including BGP, EIGRP, OSPF, RSTP, HSRP, VRRP, and GLBP; maintained good working knowledge of MPLS.
• Configured and managed Layer 2 protocols including STP, RSTP, MSTP, LACP, PAgP, and VLANs to support efficient and secure network operations.
• Managed GPON network infrastructure to optimize network performance and reliability.
• Provided remote troubleshooting and support to on-site engineers, resellers, and GPON network operations teams.
• Managed and supervised CCTV deployments for local clients.
• Attended management meetings to discuss infrastructure-related projects and operational requirements.

MS - Telecom and Network - University of Engineering and Technology (UET) (2018 - 2020)