Open to opportunities

Azat Khairutdinov

@azatkhairutdinov

Cybersecurity Engineer with 10+ years securing networks for finance and critical infrastructure, specializing in NGFW, SIEM, and automation.

Russian Federation

Message

What I'm looking for

I’m looking for a cybersecurity role where I can design NGFW/SIEM-driven segmentation, automate security operations with Python/PowerShell/Ansible, harden Kubernetes, and deliver zero-downtime network migrations for critical environments.

I’m a Cybersecurity Engineer with 10+ years’ experience architecting and securing networks for finance and critical infrastructure. I’ve built security controls across DMZs and micro-segmented environments using SIEM-driven traffic analysis and strict access enforcement.

In my current role (Dec 2023–Present), I’ve driven projects like network segmentation, micro-segmentation at workload level, and DDoS prevention—reconfiguring external infrastructure to improve mitigation and reduce VPN downtime by 60%. I migrated management hosts with Ansible/Jump/Zabbix to isolate segments, and I’ve optimized firewall policy at scale (e.g., ~1000 firewall rules, and consolidating rules to improve management efficiency by 33%).

Previously, I led zero-downtime migrations and security rollouts across many sites (55 branches and 220 branches), coordinated diagnostics and access requests, and improved reliability during datacenter transitions. I also focus on hardening practices (including Kubernetes CIS best practices), automation with Python/PowerShell/Bash/Ansible (plus Pandas for log analysis), and clear documentation across CMDB/IPAM so teams can operate security confidently.

Experience

Work history, roles, and key accomplishments

Current

CyberSecurity Engineer

Current

Jet Infosystems, JSC

Dec 2023 - Present (2 years 5 months)

Isolated Skype/telephony services in a dedicated DMZ by configuring and optimizing 100+ Palo Alto firewall rules and implementing access controls. Built SIEM-driven traffic analysis and microsegmentation for 53 enterprise systems with ~1000 firewall rules, and reduced DDoS-related VPN downtime by 60%.

Palo Alto NGFW SIEM Zabbix Ansible Automation VPN

Network Security Lead

System Operator of the United Power System, JSC

Sep 2022 - Nov 2023 (1 year 2 months)

Migrated 55 branches to UserGate NGFW with zero downtime by configuring prioritized global security policies and documenting branch security procedures. Tested UserGate 7 NGFW and Efros ACS to find critical bugs, diagnosed complex inter-network issues (including Kaspersky connectivity), and managed network/IPAM documentation across departments.

UserGate NGFW Efros ACS Network Troubleshooting IPAM Vendor coordination Security Testing

Network Security Lead

United Power System JSC

Sep 2022 - Nov 2023 (1 year 2 months)

Led migration of 55 branches to UserGate NGFW with zero downtime and implemented higher-priority global security policies. Tested UserGate 7 NGFW and Efros ACS, identified critical issues with vendor collaboration, and troubleshot complex inter-network connectivity problems while maintaining network and IPAM documentation.

UserGate NGFW Efros ACS Network Troubleshooting IPAM

Network Security Engineer

Bank Uralsib, PJSC

Aug 2020 - Sep 2022 (2 years 1 month)

Oversaw IT service migration to a new datacenter, ensuring uninterrupted availability for 50+ applications. Implemented Fortigate firewalls across 220 branches, enabled secure VPN connections for partner banks, and led DDoS mitigation by optimizing firewall and WAF settings during attacks.

VPN Integration Availability Management Security Rule Optimization

Network Engineer

SIBINTEK, LLC

Dec 2017 - Jul 2020 (2 years 7 months)

Modernized branch networks by replacing Cisco PIX with ASA and integrating Check Point hardware for improved security posture. Delivered high-availability infrastructure for gas station networks using OSPF and DMVPN and automated network configurations with Python, PowerShell, and Ansible scripting.