Francis Esguerra

 Led enterprise firewall migrations across Cisco ASA, Check Point, FortiGate, and Aruba CPPM,
ensuring secure cutover with minimal downtime.
 Delivered multiple data center migrations, including firewall re-architecture, policy migration, and connectivity validation.
 Performed technology refresh and legacy migrations (F5 LB, Check Point, Cisco PIX to ASA),
improving performance, security, and supportability.
 Upgraded and maintained Bluecoat ProxySG and Barracuda Spam Firewall, enhancing web and email security.
 Implemented IPS/IDS solutions (Cisco ASA IPS, Sourcefire) to strengthen threat detection and prevention.
 Designed and deployed Site-to-Site and SSL VPN solutions across multi-vendor platforms (Cisco, Juniper), including certificate-based authentication.
 Delivered cloud connectivity projects (Azure and AWS Site-to-Site VPNs) and implemented 2FA authentication for secure remote access.
 Optimized SNMP monitoring and firewall rules, improving visibility and reducing security risks.
 Executed web application firewall migrations and enforced secure access policies.
 Implemented and supported NAC solutions (Aruba ClearPass, IDA NAC), including access control and endpoint compliance.
 Provided 24/7 APAC network operations support, handling incidents, service requests, and change management under ITIL standards.
 Delivered L2/L3 support for multi-vendor environments, including Cisco, Palo Alto (Panorama), F5(LTM/SSLO), and proxy platforms.
 Conducted vulnerability assessments, patching, and firmware upgrades across the network and security infrastructure.
 Supported industrial network deployments, including RTG crane SD-WAN implementations and infrastructure upgrades.
 Managed network services (IP, DNS, NAC, firewall requests) and handled security incidents such as malicious IP/domain blocking.
 Supported cloud security platforms (Menlo Security, Prisma Access), ensuring secure user access.
 Executed critical maintenance activities (power shutdowns, hardware replacements) with minimal service impact.
 Conducted wireless surveys and optimization across multiple campuses to improve coverage and performance.

 Plans and implements network design changes in involving Firewall/VPN, LAN/WAN and Network Services.
 Performs troubleshooting functions involving Firewall/VPN, LAN/WAN and Network Services.
 Coordinates with vendors for installation of network devices specifically for Firewall/VPN,
LAN/WAN and Network Services.
 Coordinates with the Network Engineering Team Lead, other concerned team, vendors, and /or appropriate third party for all escalation issues. Ensures that all escalation information is accurate and periodically updated, and that all relevant members of the team are regularly informed on the status of the escalation process.
 Oversees and coordinate the prioritization and updating problems/ and specific deliverables.
 Performs daily and monthly Preventive Maintenance on the current state and condition of the
network environment.
 Performs network back-up, IOS upgrades, monitoring, access administration and related network tasks.
 Ensures that assigned incident tickets are resolved within the Operating Level Agreement (OLA).
 Do task to coordinate or be a member of various functional activities and initiatives of the Network operations and /or Network Engineering team/s.
 Responsible for doing Periodic Access Review for Local Accounts for MetaIP and Nortel VPN
device.
 Responsible for doing Root Password Periodic Access review for facility core devices.
 Do change reviews, Post Implementation Reviews and attending CAB's where network changes are up for reviews.
 POC for consolidating Capacity Management report of managed devices in network facility.
 Responsible in ensuring/maintaining Network security in accordance with global and local security standards and best practices including:
Standards Implementation.
Ensures network devices pass the global Technology Architecture Standard.
 Adhere to compliance frameworks such as ISO 27001.

Provide Server system integration, server demo, Pre/Post sales, solutions
and support services to our clients.

Provides on-site wired/wireless network surveys, hardware/software
installation, upgrade of computer equipment, and also provides
maintenance support.