ENTERPRISE SECURITY · CLOUD INFRASTRUCTURE

Mohammad Aftab Arab

Network and Security Specialist

Three years across network engineering, infrastructure management, and production cloud security operations — combined with hands-on product testing and building toward broader cybersecurity and AI-driven roles.

  • Network Security
  • Cybersecurity
  • Cloud Security
  • Enterprise AI Operations
  • Infrastructure Management
  • Product & Resilience Testing
  • Zero Trust Architecture
get in touch
01

Career thesis

/*
* You can't secure
* what you can't route,
* isolate, and recover.
*/

I've always believed that good security starts with a solid grasp of how systems actually talk to each other. When you spend time configuring routers, debugging network drops, and setting up failover clusters, security stops being an abstract checklist. You understand where data flows, where bottlenecks happen, and where things can break under stress. That hands-on networking background gives every firewall rule and access policy a real, practical foundation.

In my day-to-day work, I bring together three areas that are often kept in separate boxes: enterprise security, cloud infrastructure, and operational resilience. Whether I'm tuning Fortinet firewall policies, locking down cloud perimeters with WAF and IAM controls, or setting up Zero Trust tunnels through Cloudflare, the core goal stays the same. Keep the attack surface as small as possible, ensure systems recover quickly if something fails, and make sure legitimate work never gets blocked.

I also use modern AI tools as a daily multiplier for writing automation scripts, parsing complex logs, and troubleshooting unfamiliar edge cases. But I treat AI as a capable assistant, never as the final word. Every configuration is reviewed by hand, tested against real system telemetry, and verified before it ever touches production. It’s about moving faster without cutting corners on reliability.

02

Experience

  1. Network and Security Specialist

    Apr 2026 — Present

    DRaaS, cloud and hybrid-solutions startup

    Production cloud security, network and firewall operations, Zero Trust access, disaster-recovery infrastructure, and incident response.

  2. Network Engineer

    Nov 2024 — Apr 2026

    MaNetSecure Technologies Pvt Ltd

    Fortinet administration, network troubleshooting, access-control changes, architecture documentation, and enterprise high availability.

  3. Frontend Developer & Graphic Designer

    Jun 2023 — Nov 2024

    Freelance

    Production frontend delivery and visual communication work that continue to inform technical tools and documentation.

03

Selected case studies

01Huawei Cloud · Acronis

Production cloud security operations

problem
Production cloud workloads needed continuous protection, controlled access, operational visibility, and a repeatable response process across infrastructure and endpoints.
action
Administered Huawei Cloud security controls and Acronis Cyber Protect, combining preventive configuration with daily alert review, incident mitigation, escalation, and reporting.
outcome
A practical security-operations rhythm spanning cloud perimeter, identities, hosts, containers, endpoint protection, patching, and stakeholder reporting.
WAFIAMHSSCloud EyeAcronis
full case study →
02ERP & document systems

OWASP WSTG authorized penetration-test plan

problem
Production ERP and document-management systems required a defensible security assessment plan without putting live services or data at unnecessary risk.
action
Scoped a 13-phase authorized plan with rules of engagement, safe-testing controls, evidence handling, and a CVSS v3.1 severity model.
outcome
A structured, reviewable assessment methodology with OWASP WSTG selected deliberately over PTES and NIST alternatives for the application-focused scope.
OWASP WSTGCVSS v3.1Rules of engagementSafe testing
full case study →
03Enterprise client · 4 nodes

SQL Server 2022 Always On high availability

problem
A four-node production and staging high-availability environment failed readiness testing because one secondary database node remained unsynchronized.
action
Configured both failover clusters, availability groups, listeners, and quorum witness, then traced the fault to an incomplete secondary-node join.
outcome
Synchronization was restored and high availability was validated through multiple failover and node-failure permutations beyond the minimum acceptance check.
SQL Server 2022WSFCAlways OnFailover testing
full case study →
04BMA engagement · Huawei Cloud

Cloudflare Zero Trust browser-RDP — first-adopter deployment

problem
Remote access to 12 Windows Server targets without exposing TCP/3389 or retaining a blanket-access SSL VPN, using a new capability with no implementation precedent.
action
Reverse-engineered the feature and diagnosed each dependency layer until a Windows SecurityLayer negotiation mismatch was isolated.
outcome
Identity-aware, auditable browser access across six private subnets and eight virtual networks with zero public RDP exposure.
Cloudflare Zero TrustHuawei CloudWindows ServerRCA
full case study →
05OnePro Cloud · React 18

HyperBDR adaptive sales & demo cockpit

problem
Static presentations could not adapt to a prospect's real environment during live disaster-recovery demonstrations.
action
Directed and built a nine-view application where architecture, ROI, fit, and recommendations recompute from shared session state.
outcome
Sales engineers can configure and demonstrate a tailored recovery scenario live instead of deferring answers to a follow-up.
ReactState architectureAnthropic APIDebugging
full case study →
06Enterprise DRaaS · hybrid cloud

Production infrastructure incident response

problem
Replication agents, backup subsystems, and microservices failed in live environments where diagnosis had to preserve uptime and evidence.
action
Investigated Windows VSS provider conflicts, Linux kernel/DKMS breaks, and Kubernetes/Nacos service faults through layered root-cause analysis.
outcome
Restored replication and service health while turning incidents into reusable RCA material instead of leaving tribal knowledge.
VSSDKMSKubernetesHuawei Cloud
full case study →
04

Skill matrix

Cybersecurity Operations

  • Huawei Cloud WAF, IAM and HSS
  • Acronis alerts, incidents and protection plans
  • Cloudflare Zero Trust, Access and Tunnel
  • OWASP WSTG and CVSS v3.1 planning
  • Nmap, Burp Suite, ZAP, Nikto and Netcat

Network & Firewall

  • TCP/IP, DNS, DHCP, routing and switching
  • FortiGate, FortiSwitch and FortiOS migration
  • Hillstone NGFW and Cisco IOS
  • VLAN, NAT and IPsec VPN troubleshooting
  • Wireshark, HLD and LLD design

Cloud & DR Infrastructure

  • Huawei VPC, ECS, EVS, OBS and CBR
  • NAT Gateway, EIP and Cloud Eye
  • DRaaS solution architecture
  • Cross-region object storage replication
  • VMware, Proxmox and Kubernetes

Systems & High Availability

  • Windows Server 2016–2022 and Active Directory
  • SQL Server Always On and WSFC
  • VSS, registry and COM troubleshooting
  • Linux kernel and DKMS compatibility
  • Grafana, Prometheus, Uptime Kuma and OPManager

Development & Automation

  • React, TypeScript and Tailwind CSS
  • Python and Node.js automation
  • ASP.NET Core Web API and IIS
  • GitHub Actions CI/CD
  • Document engineering with docx.js / OOXML

AI-Directed Delivery

  • Multi-model workflows matched to task type
  • Generated-code validation and correction
  • Anthropic Messages API integration
  • RAG and agentic AI fundamentals
  • AI-assisted technical documentation systems
05

Credentials

Security & infrastructure

  • Fortinet NSE 4 Certified
  • Fortinet FortiGate 7.6 Administrator
  • Fundamentals of Docker & Kubernetes — Scalar
  • Cybersecurity Track — Proficiency Certificate — VNR VJIET

Development & AI

  • RAG, AI Agents and Agentic AI Masterclass — Scalar
  • Web Design for Everybody — University of Michigan
  • Machine Learning with Python — IIT Guwahati E-Cell
  • Java Full Stack — Wipro

Education & recognition

  • B.Tech — Electronics and Communications Engineering
  • Hackathon Winner — Convergence 2K21
  • Foundations of Project Management — Google
  • Product Management Course — Unstop

Certifications, professional training, and ongoing learning.

View certificates & training →
06

Contact

Open to cybersecurity and network security roles, and to conversations about enterprise infrastructure, zero-trust access, and disaster recovery.

© 2026 Mohammad Aftab ArabEnterprise Security · Cloud Infrastructure · AI Operations