Maqsood Ali Khan

About Maqsood Ali Khan

Senior Network Engineer with 10+ years of experience designing, implementing, and securing large-scale enterprise and cloud networks. Specialized in modern data center architectures (Cisco ACI, EVPN-VXLAN), multi-cloud networking (AWS & Azure), and next-generation security solutions including Palo Alto, Zscaler, and SASE frameworks.Proven track record of delivering scalable, high-performance, and secure network infrastructures across hybrid environments. Experienced in building spine-leaf architectures, optimizing BGP/MPLS backbones, and enabling workload mobility across multi-data center deployments.Strong focus on network security and Zero Trust principles, with hands-on expertise in firewall policy design, SSL inspection, VPN technologies, and SIEM integrations (Splunk, QRadar). Adept at identifying threats, reducing attack surfaces, and ensuring compliance with standards like PCI-DSS, NIST, and ISO.Skilled in automation and infrastructure as code using Terraform, Ansible, and Python to streamline provisioning, enforce consistency, and reduce operational overhead

Experience

1. Senior Network Security Engineer

   Zebra Technologies

   Jan 2025 — Present · Lincolnshire, IL, US

   Implemented Palo Alto PA-5260 firewalls in Azure environments to enforce network Segmentation and protect application workloads.• Deployed Palo Alto PA-3220 with Panorama to manage firewall policies and resolve template conflicts reducing configuration errors by 25% and improving policy consistency for more reliable security enforcement.• Configured Palo Alto PA-1420 threat prevention profiles with ACI fault management policies reducing security policy misconfigurations by 20%.• Involved in Fortinet FortiGate 200F firewalls with built-in security services to improve visibility into IoT and OT traffic.• Supported Fortinet FortiGate SSL VPN configurations including RADIUS-based user authentication to provide secure remote access.• Assisted in setting up Akamai API security controls to validate API requests and reduce exposure to malformed traffic.• Worked with other team members to optimize Cisco Nexus 9300 switch connectivity for servers improving data center traffic flow and enhancing throughput by 20%.• Identified Azure Virtual Network peering requirements to enable secure communication between multiple cloud environments.• Analysed ExpressRoute connectivity and BGP stability to proactively detect and respond to routing issues.• Created OSPF and BGP configurations on Cisco ASR-9922 routers optimizing routeSummarization and inter-area routing reducing routing table size and improving convergence by 15%.• Good understanding of Cisco Catalyst 9500 switches including Stack Wise Virtual and VLAN Trunking protocol VTP to support high availability in core networks.• Handled Cisco ACI micro-segmentation tasks using VXLAN and applying IP-based contracts for application isolation.• Used Cisco ACI multi-pod designs with EVPN to extend fabric connectivity across data centers with synchronized control planes.• Combined Prisma SD-WAN connectivity with endpoint security solutions to enhance secure access for remote users.