Please give us some details about the role you want to fill and let us know why you think our client might be the perfect candidate for you.
What happens next?
Our Job Search Specialist Mark Beltran will facilitate the next steps:
Mark will let our client know that you have shown an interest in their professional skills.
You will receive a full job application from our client and might want to offer them a formal job interview if you see the right potential in this candidate.
If you decide that you would like to offer the role to our client, we will help to make the next steps as smooth as possible.
You will be supported by our Licensed Immigration Advisers, who will take care of all visa related aspects of the process of offering our client a job.
Offering a job to our client will be straight forward.
Enterprise Network Security Engineer with 10+ years’ experience designing, securing, and optimising large-scale infrastructure across MSP and higher education environments in New Zealand and internationally.
Strong capability across enterprise networking, firewall architecture, privileged access governance, and hybrid Azure environments.
Proven track record strengthening security posture, improving resilience, and delivering scalable network and cloud solutions aligned to organisational risk and operational requirements.
FINAO Limited
Auckland, New Zealand Nov 2024 - Aug 2025
• Delivered enterprise network and security engineering services across multi-tenant MSP environments supporting customers throughout New Zealand and Australia.
• Designed and optimized Check Point and Fortinet firewall architectures, strengthening segmentation and improving rule base hygiene across multiple client environments.
• Led firewall policy migrations from Check Point to Fortinet, ensuring seamless transition with zero unplanned downtime.
• Engineered and maintained Aruba switching and wireless infrastructure including core and edge switches, enterprise access points, and ClearPass network access control.
• Implemented VLAN segmentation and role-based access policies using Aruba ClearPass, strengthening endpoint authentication and access governance.
• Administered Tenable Vulnerability Management, prioritizing remediation and driving structured patch governance to reduce enterprise attack surface.
• Configured Netskope cloud security policies to enhance SaaS access control and secure web gateway performance.
• Applied firmware upgrades and security patches across firewalls, Aruba infrastructure, and security platforms under structured change management frameworks.
The American University in Cairo (AUC) May 2022 - Jun 2023
• Designed and implemented CyberArk Privileged Access Management across enterprise Microsoft and Linux environments to secure privileged credentials.
• Defined least privilege access models and onboarded administrative accounts across multiple business units to centralize credential governance.
• Collaborated with infrastructure and application teams to embed privileged access controls into enterprise architecture designs.
• Conducted privileged account audits and security reviews, improving audit readiness and strengthening compliance alignment.
• Produced executive reporting on privileged access risks, remediation status, and control effectiveness.
Universities of Canada
New Administrative Capital Dec 2019 - Apr 2022
• Led end-to-end design and delivery of enterprise network and security architecture for a newly established international university campus.
• Designed and deployed campus-wide network infrastructure including core switching, distribution layers, wireless architecture (250+ access points), and secure VLAN segmentation.
• Architected datacenter infrastructure including 15+ servers, VMware clusters, shared storage, and backup solutions supporting mission-critical academic systems.
• Defined hybrid infrastructure strategy integrating on-prem systems with cloud services to enable secure remote learning during COVID-19.
• Established disaster recovery and business continuity frameworks to improve organizational resilience and reduce operational risk.
• Implemented proactive monitoring, vulnerability remediation, and patch governance processes across infrastructure.
Universities of Canada
New Administrative Capital Oct 2017 - Nov 2019
• Installed and configured network infrastructure to ensure optimal availability and performance.
• Configured and monitored GPON, core, edge switches and Access Points from various vendors (Huawei,HP).
• Administered AD, DNS, and Microsoft server environments to maintain seamless operations.
• Managed storage pools for network file shares (NFS), server storage, and backups.
• Administered VMware infrastructure to deliver virtual desktops and maintain virtualized environments.
• Implemented and maintained VoIP, CCTV and access control systems.
Canadian International College Jan 2015 - Jul 201
• Configured and troubleshooted Cisco and HP switches for LAN/WAN connectivity.
• Provided L2/L3 support for user incidents, diagnosing and resolving complex issues.
• Documented network configurations and troubleshooting steps for knowledge base.
Wintec - Te Pukenga Hamilton, New Zealand • 2023 - 2024
Advanced study in business analytics, operations management, and strategic leadership within the Canadian business environment. Focuses on developing data-driven decision-making skills and organizational management strategies for global markets.
University of Waikato • Hamilton, New Zealand • 2016 - 2017
Covers technical aspects of computer infrastructure, cloud computing, cryptography, management, and cybersecurity laws. Focuses on security threats detection, preventative, and offensive security.
Cape Breton University Cape Breton, Canada 2007 - 2012
Studied Software programming, data management, electrical and electronic concepts of power systems, electronic design, embedded systems and communication circuits.
Canadian International College (CIC) • Cairo, Egypt • 2006 – 2013
Focused on circuit designs to deploy wireless networks and the installation of telecommunications equipment including complex switching systems, fiber optics, and internet protocol data systems.
CheckPoint Certified Security Administrator-R81
2024
Tenable vulnerability Management
2024
Cisco Certified Network Professional Security
2023
CyberArk Privileged Access Management (PAM) Administration
2022
Azure Administrator Associate
2021
Cisco Certified Network Associate Routing & Switching (CCNA R&S)
2014
Microsoft Certified Solutions Associate (MCSA)
2014
Cloud & Hybrid Infrastructure: Microsoft Azure | Azure AD | Microsoft 365 | Hybrid Cloud Integration | Virtual Networking | VMware ESXi & vCenter | Veeam Backup | Disaster Recovery & Business Continuity Planning| Windows Server | Linux Administration | Active Directory Architecture | Infrastructure Monitoring | ITIL- aligned Change Management
Security Engineering & Governance: Check Point Firewalls | Fortinet Firewalls | Firewall Architecture & Policy Optimisation | Zero Trust Principles | CyberArk PAM | Privileged Access Governance | Tenable Vulnerability Management | Netskope Cloud Security | Patch Governance | Incident Response
Resilience | Self-leading | Complex problem-solving | Decision-making | Analytical | Can -do attitude | Agility | Stakeholder Management |Technical Leadership | Architecture Reviews | Cross-Functional Collaboration | Stakeholder engagement
Enterprise Networking & Infrastructure: Cisco (CCNA, CCNP Security) | Aruba Switching & Wireless | VLAN Segmentation | Secure Routing | Site-to-Site & Remote Access VPNs | High-Availability Network Design | Citrix NetScaler |Aruba ClearPass (NAC)
Copyright New Zealand Immigration Concepts Ltd 2026