Hussein Rasheed

Zero Trust, Cloud & Identity Security
• Deployed and managed Trend Micro Zero Trust Secure Access (ZTSA), configuring ZTNA and Secure Web
Gateway (SWG) profiles to enforce continuous verification for remote and hybrid users.
• Integrated Microsoft 365 security features and identity-based access controls into cloud-hybrid environments to
support data governance and compliance requirements.
• Administered Cisco Umbrella DNS security using Virtual Appliances (VA1 & VA2) in a high-availability design,
integrated with internal DNS/DHCP infrastructure.
• Administered Cisco ISE for Network Access Control (NAC), integrating with Active Directory and LDAP to
enforce dynamic 802.1X/MAB authentication, authorization, and policy-based access; built and validated
802.1X, TACACS+, CoA, and posture redirect ACL configurations in an EVE-NG lab environment prior to
production rollout.

Perimeter & Endpoint Security
• Deployed and managed Cisco Firepower Threat Defense (FTD) and FortiGate firewalls, configuring access
control policies, intrusion prevention (IPS), and advanced malware protection (AMP) to defend enterprise
networks against threats.
• Implemented FortiDLP with LDAP integration for user visibility, access accountability, and outbound data
leakage prevention across email platforms.
• Deployed and maintained Trend Micro Vision One (EDR) and Deep Discovery Inspector (DDI) appliances for
continuous endpoint threat detection, network traffic analysis, and threat intelligence processing; produced a
multi-tier troubleshooting reference guide covering DDAN, DDI, DDEI, IMSVA, Apex One, Apex Central, Deep
Security Manager, Vision One, and WFBS.
• Performed email security analysis and hardening across FortiMail, including quarantine policy review and
SPF/DKIM/DMARC configuration to reduce spoofing and delivery issues.

SIEM, Automation & Infrastructure
• Deployed and integrated FortiSIEM for centralized log correlation and security monitoring, including third-party
integrations for Barracuda WAF (syslog/UDP) and Bitdefender GravityZone (HTTPS/TCP); diagnosed and
resolved deployment and connectivity issues during setup and configuration.
• Architected a self-hosted AI automation platform on a vCenter/ESXi cluster using Ubuntu VMs, PostgreSQL,
and n8n to automate security workflows as a cost-effective alternative to commercial subscription tools.
• Configured and troubleshot Cisco IOS XE routing and switching devices in production environments, including
boot image management, tunnel interfaces, dot1x/MAB, SNMP, and device-tracking policies, resolving
connectivity and performance issues.