Afroz Ahmad

• Designed, deployed, and administrated Cisco ISE for enterprise wired/wireless
networks, enforcing secure 802.1X authentication.
• Integrated ISE with Active Directory, enabling role-based authentication and
dynamic access enforcement.
• Configured MAB, dACLs, posture checks, profiling, and guest portal workflows for
unmanaged and guest devices.
• Implemented TACACS+/RADIUS for centralized authentication of network devices.
Email & Web Security
• Managed Fortinet EMS/FortiMail for protection against malware, phishing, and
spam.
• Implemented and maintained Exchange (on-premises) & Microsoft 365 email
security policies and DLP controls.
• Integrated web/email filtering to minimize attack surface and ensure policy
compliance.
Firewall & Network Security
• Configured and optimized FortiGate NGFW: application control, IPS, antivirus, SSL
inspection, and web filtering.
• Implemented and maintained IPsec/SSL VPNs, supporting secure connectivity for
remote and branch users.
• Performed FortiOS upgrades, patching, and system hardening, ensuring
alignment with best practices.
• Built and tuned firewall rules, NAT policies, and zone-based segmentation to reduce
risk exposure.
• Managed static routing, OSPF, and policy-based routing across Cisco platforms.
• Supported enterprise LAN/WAN operations including VLANs, trunking, STP, and
EtherChannel for high availability.
• Utilized FortiAnalyzer and FMC for log analysis, forensic investigation, and
compliance reporting.
Monitoring, Compliance & Technical Support
• Conducted proactive monitoring, event correlation, and incident triage using
FortiAnalyzer and FMC analytics.
• Produced and maintained network topology diagrams, runbooks, SOPs, and
configuration baselines.
• Served as L2/L3 escalation for complex issues in routing, firewalling, VPN, and NAC
domains.
• Managed change requests, including impact analysis, implementation, rollback,
and post-change validation.
• Resolved incidents within SLA thresholds using enterprise ticketing systems.