Network security architecture
Designing secure, scalable networks with layered controls, from requirements and solution design to bills of materials.
RemoteOn-site
Available for projects · on-site or remote
Securing networks
that can't afford downtime.
~$
I'm Muhammed Roshan, a Network Security Engineer. I design, build and secure enterprise networks end to end: the perimeter, the switching fabric, the WAN, remote access, identities and endpoints, for organisations in Oman and remotely anywhere.
Multi-vendor certified · Fortinet · Sophos · Cisco · Microsoft
Based in Muscat, Oman
Industries I work with
Government and public sector
Banking and finance
Oil and gas
Engineering and construction
Education
About
Engineering secure, resilient networks
I'm a Network Security Engineer based in Muscat with over four years of hands-on experience designing and securing networks where downtime and data exposure aren't an option, across government, banking, energy and engineering environments.
My work covers the whole network: next-generation firewalls at the perimeter, segmented enterprise switching inside, secure SD-WAN and VPN between sites, Zero Trust and privileged access for users and admins, and EDR/XDR on every endpoint. I take projects from assessment and design through deployment, and keep them healthy afterwards.
I work across vendors, including Fortinet, Sophos, Palo Alto, SonicWall, Cisco and Huawei, and much of my work can be delivered remotely, so location is rarely a barrier.
B.Sc. Mathematics with Computer Science, Mahatma Gandhi University.
0+Years in network security
0+Firewall migrations delivered
0+EDR / XDR rollouts
0+Organisations supported under SLA
Services
How I can help
Network security and infrastructure engineering across the perimeter, the LAN, the WAN, identities and endpoints. Most work can be delivered remotely, with on-site support in Oman.
Perimeter and next-generation firewalls
NGFW policy design, IPS, web and application control, SSL inspection and high availability across leading platforms.
RemoteOn-site
Enterprise switching and LAN
VLAN architecture, Layer 2 and Layer 3 design, trunking, inter-VLAN routing and segmentation on Cisco, Huawei and FortiSwitch.
RemoteOn-site
Secure WAN and remote access
Secure SD-WAN across multiple ISP links, IPsec site-to-site tunnels and SSL remote access that stays fast and reliable.
RemoteOn-site
Zero Trust and identity
Zero Trust Network Access tied to Active Directory and Entra ID, with privileged access management for admin accounts.
RemoteOn-site
Endpoint detection and response
EDR/XDR deployment and policy tuning at scale, so threats are detected and contained on every device.
Remote
Security assessment and hardening
Posture reviews of firmware, HA, access and rule bases, followed by hardening against best practice and a clear findings report.
Remote
Platform migration and modernisation
Moving security estates between platforms with policies, objects and tunnels converted, and a planned, zero-surprise cutover.
RemoteOn-site
Visibility and managed support
Centralised logging, reporting and policy management, plus SLA-based support for changes, upgrades and incidents.
RemoteOn-site
01
Assess
Understand your network, risks and what's already in place.
02
Design
Plan the solution, policies and a cutover that avoids downtime.
03
Deploy
Configure, test and validate, with everything documented.
04
Support
Keep it patched, tuned and healthy over time.
Projects
Selected work
Delivered for government and enterprise organisations. Client names are kept confidential. Select a project to see what was involved.
- Audited existing configurations before every migration.
- Converted security policies, address objects and IPsec/SSL VPN tunnels to the target platform.
- Planned cutovers and ran post-migration validation to keep services available.
- Implemented Fortinet ZTNA end to end for on-fabric and off-fabric users.
- Integrated Active Directory and Azure connectors to enforce identity-based policies.
- Deployed FortiPAM for a government ministry and an engineering and construction company.
- Brought privileged sessions to internal servers under central control.
- Delivered Sophos EDR/XDR deployments end to end.
- Pushed agents at scale using AD Group Policy scripts and third-party deployment tools.
- Deployed FortiEDR (Cloud) for clients standardising on Fortinet.
- Reviewed firmware against release notes and known issues, HA status, licensing and device health.
- Tested HA failover, removed unused rules, tightened policies and hardened admin access.
- Reviewed EDR/XDR policies and detections, and delivered a findings report to each client.
- Deployed new perimeter firewalls and access switches across every IDF room.
- Designed the VLAN architecture to separate departments, servers and services.
- Configured access ports and trunk uplinks, with inter-VLAN routing and security policy enforced on the firewall.
- Deployed FortiAnalyzer for centralised log analysis and reporting.
- Deployed FortiManager for central firewall policy management.
How I work
Ways I can support your team
4+ years delivering network security across Oman since 2022, in whichever way an organisation needs it.
Project delivery
End-to-end design and deployment of network security for government and enterprise environments, from assessment and planning through cutover, validation and handover documentation.
Ongoing support
SLA-based support for 14+ organisations: troubleshooting and escalations, firmware and HA management, scheduled health checks, and every resolution documented.
Resident engineering
On-site engagements running day-to-day infrastructure, including a six-month residency for a financial-sector organisation covering servers, Active Directory, Group Policy, backups and network devices.
Solution design and pre-sales
Turning business requirements into solution designs, technical bills of materials and RFP responses, so projects are scoped correctly from day one.
Tech stack
Tools and platforms
Security platforms
Fortinet Security Fabric
Access and identity
VPN and WAN
Endpoint
Switching and LAN
Systems
Certifications
Certified across vendors
NSE 7 Secure Networking
FortinetNSE 6 Secure Networking
FortinetNSE 4 Cybersecurity
FortinetFirewall v19.5 Architect
SophosCentral Endpoint and Server Protection Engineer v4.0
SophosMicrosoft 365 Fundamentals
MicrosoftNetwork Support and Security
Cisco Networking AcademyContact
Have a project or a security concern?
Tell me a little about your network and what you need. Whether it's a new deployment, a migration, a health check or ongoing support, I'll get back to you.
Based in Muscat, Oman · working with clients on-site and remotely