Looking for a job

Hafiz Muhammad Irfan Alam

@hafizmuhammadirfanal

Principal Consultant at Systems Limited designing Zero Trust and SASE solutions for enterprise and financial-sector clients.

Pakistan

Message

At Systems Limited, I lead network and security solution design for local and international enterprise and financial-sector clients, from requirements gathering through documentation and implementation. I support technical and sales teams with solution architecture and security assessments across F5, Palo Alto, Fortinet, and Cisco engagements.

At Bank Al Habib Limited, I operated and hardened perimeter and data-center security, managing multi-vendor firewalls and HO–DR VPNs while administering F5 LTM and ASM WAF for online banking. Earlier, at United Bank Limited, I led core security operations and owned platforms protecting internet-facing services.

Experience

Work history, roles, and key accomplishments

Current

Principal Consultant – Cloud Digital Infrastructure & Security (CDIS)

Current

Systems Limited

Feb 2023 - Present (3 years 8 months)

Lead network and security solution design for local and international enterprise and financial-sector clients, from requirements gathering through HLD/LLD/MOP documentation to implementation. Serve as senior technical authority across F5, Palo Alto, Fortinet, and Cisco engagements.

Palo Alto Fortinet Cisco HLD LLD MoP Solutions Architect Security Assessments

Assistant Manager – Network Security Operations

Bank Al Habib Limited

Aug 2021 - Feb 2023 (1 year 6 months)

Operated and hardened perimeter and data-center security for a leading commercial bank across production, extranet, and test segments. Managed multi-vendor firewalls and F5 LTM/ASM WAF for online banking, and coordinated with SOC on incident management.

Palo Alto Cisco Firepower Cisco ASA Fortinet F5 LTM F5 ASM (WAF)IPsec VPN SOC Incident Management

Senior Network Engineer – Network Security Operations

United Bank Limited (UBL)

Jul 2018 - Jul 2021 (3 years)

Led core security operations for a global bank, including network defense, secure remote access, and continuous threat monitoring. Owned WAF, email security, endpoint protection, SIEM, and network-visibility platforms protecting all internet-facing services.

WAF Email Security Endpoint Protection SIEM SSL VPN Firewall Management Security Triage

Resident Engineer – Network Security (Palo Alto Networks)

INBOX Business Technology

Dec 2017 - Jun 2018 (6 months)

Served as on-site Palo Alto Networks security engineer for UBL, advising executive-level project teams on firewall architecture, threat prevention, and remediation options. Handled day-to-day operations for site-to-site and remote-access VPNs, security policies, and WildFire monitoring.

Palo Alto Firewall Architecture Threat Prevention Site To Site VPNs VPN Wildfire

Network Administrator

College of Physicians & Surgeons Pakistan (CPSP)

May 2016 - May 2017 (1 year)

Administered a nationwide WAN across 12 branches and a ~1,000-user wired/wireless campus network, and delivered simultaneous online FCPS examinations across multiple cities.

WAN LAN Wireless Network Administration

Pre / Post-Sales Network Engineer

Silicon Technologies

Feb 2015 - Feb 2016 (1 year)

Ran proofs-of-concept and designed tailored IT/security solutions for SMB clients, partnering with sales to convert technical wins into closed deals and delivering the implementations.

Pre Sales Post Sales Proof of Concept Solution Design IT Consulting Project Planning

Network Consultant / Corporate Trainer

ORACITI Training & Consulting

Sep 2012 - Apr 2014 (1 year 7 months)

Delivered instructor-led CCNA, CCNA Security, and CCNP training to IT professionals, including custom programs for a national ISP and United Nations staff. Customized CCNA/CCNP programs for internet and data-service providers and corporate groups.

CCNA CCNP Training Networking

Network Engineer – Data Center

Access Group (ORIX Technology Partner)

May 2009 - Aug 2011 (2 years 3 months)

Administered nationwide connectivity for 16+ banks and 500+ branches over VSAT, VPN, leased-line (DXX), and radio-based networks. Maintained branch-to-head-office connectivity and data-center facilities, meeting maximum SLA availability targets.

V Sat VPN Leased Lines Radio Networks Data Center SLA