Hamid Reza Khazaie

I help organizations modernize and secure complex networks through firewall architecture, segmentation, secure connectivity, and hybrid-cloud security.

With more than 12 years of experience, I deliver network-security engagements from assessment and architecture through implementation, validation, documentation, and operational handover. I have worked across enterprise, banking, government, industrial, academic, healthcare, and SaaS environments where controlled change and rollback planning are essential.

My main consulting areas include:

- Enterprise firewall assessment, migration, policy design, cleanup, NAT, IDS/IPS, and SSL inspection

- Network segmentation, secure L2/L3 redesign, routing, switching, and access control

- Site-to-site and remote-access VPN troubleshooting and implementation

- SASE, Zero Trust Network Access, SD-WAN, and hybrid connectivity

- AWS VPC, Cloudflare, and on-premises security architecture

- Web application firewall design and deployment

- Migration plans, architecture diagrams, test procedures, runbooks, and handover documentation

I have delivered more than 16 enterprise network and security projects and led engineering teams of up to six people. Relevant work includes redesigning a university network with approximately 300 switches supporting 17,000 students, modernizing a layered banking-security architecture, and designing security across four AWS environments. I also supported a cybersecurity platform serving more than 7,000 ethical hackers and contributed to two consecutive SOC 2 Type II renewals.

My hands-on experience includes Fortinet FortiGate and FortiWeb, Cisco Firepower, ASA and FTD, Palo Alto Networks, Juniper SRX, F5 BIG-IP, Cisco ISE, Cloudflare, AWS, and Wazuh.

Based in Rome, I am available for remote international delivery, hybrid assignments in Rome, and occasional business travel. I work B2B through an Italian Partita IVA with structured communication and complete documentation.