Payehrizan Fanavari Hooshmand — 2024 — 2026
Advise government, finance, and petrochemical organizations on next-generation network security and monitoring, owning the full stack from SIEM analytics to identity, endpoint, and IT service management.
SIEM & Security Analytics
- Deployed and maintained Splunk enterprise security monitoring to optimize telemetry pipelines, analyze security logs, and streamline threat detection.
- Implemented and configured Cisco SNA (Secure Network Analytics) for network-wide visibility, anomaly detection, and advanced threat hunting.
Network Routing, Proxy & Tunneling Infrastructure
- Configured and managed MikroTik routers, optimizing dynamic/static routing protocols, VLAN segmentation, and network traffic management.
- Designed and maintained secure tunneling protocols (GRE, IPsec, OpenVPN, EoIP) for safe site-to-site connectivity and inter-branch communication.
- Implemented and administered enterprise proxy infrastructure to control web access, enforce content filtering, and optimize bandwidth usage.
Email & Network Security
- Administered and hardened Cisco ESA (Email Security Appliance) to mitigate spam, phishing, and malware threats, ensuring high-availability email delivery.
- Managed enterprise licensing and compliance using Cisco SSM (Smart Software Manager).
Identity, Access & Endpoint Management
- Managed and hardened Active Directory Domain Services (AD DS) and core network services, ensuring strict security policies and compliance.
- Administered ManageEngine PAM360 for Privileged Access Management, enforcing Zero-Trust access control and auditing critical infrastructure usage.
- Deployed and managed ManageEngine Endpoint Central and Patch Manager to automate patch deployment, vulnerability management, and endpoint compliance.
System Administration & Infrastructure
- Administered cross-platform Linux (Debian/CentOS/Oracle Linux) and Windows Server environments, focusing on OS hardening and performance optimization.
- Managed enterprise email infrastructure using Microsoft Exchange Server.
- Executed network cabling, server rack assembly, and passive infrastructure installations according to standard cabling topologies.
Monitoring & IT Service Management
- Configured ManageEngine OpManager for proactive network topology discovery, bandwidth monitoring, and system uptime alerting.
- Administered ManageEngine ServiceDesk Plus to streamline ITSM workflows, incident management, and ticketing SLAs.