Network & Cloud Security Consultant
Hamidreza Khazaie
I help companies design, secure and change their networks and cloud with confidence, from firewall migrations and Zero Trust access to getting ready for SOC 2.
- Banking
- Ports & public sector
- Aviation
- Broadcasting
- Security SaaS
01 · How I can help
Pick a problem. Here’s how I’d approach it.
Remote and admin access without exposing anything
Replace open VPN ports and public admin panels with access that checks who the user is and what device they’re on. Your internal systems stop being visible from the internet.
- Cloudflare ZTNA and identity-aware access
- Taking admin interfaces off the internet
- Remote-access VPN redesign
Where I’ve done this: A security SaaS platform on AWS
Keep a problem in one place
Split critical systems into zones with a firewall between each one. If a server is compromised, it can’t reach the rest of your network or your data.
- Network segmentation and multi-tier isolation
- Firewall policy design
- WAF in front of public services
Where I’ve done this: Internet banking for a national bank
Firewall changes without the drama
Move to new firewalls or a new vendor with a reviewed rule base, a tested cutover and the old path kept ready as a way back.
- Cisco, Fortinet, Juniper and Palo Alto
- Rule-base review and clean-up
- Staged cutover with validation and rollback
Where I’ve done this: Bank, broadcaster and public-sector estates
Offices, data centre and AWS, connected securely
Join your sites and cloud accounts over encrypted tunnels, with one clear place to control what can talk to what.
- Site-to-site VPN and SD-WAN
- AWS network and security architecture
- Consistent policy on-prem and in the cloud
Where I’ve done this: Multi-site enterprises and AWS workloads
Ready for SOC 2 before the auditor arrives
Set up the monitoring, controls and evidence an auditor will ask for, then support you through the audit itself.
- SIEM setup and tuning
- Vulnerability management and remediation
- Control evidence and tracking
Where I’ve done this: A security SaaS company through SOC 2 Type II
02 · Working together
Bring me in for as much or as little as you need.
- 01
Architecture review
A clear look at your network, cloud and firewalls, with a prioritised list of what to fix first.
- 02
Design
High- and low-level designs for a new build or a redesign, ready for your team to implement.
- 03
Hands-on delivery
Implementation, migration and troubleshooting, done alongside your team.
- 04
Ongoing advice
An experienced second opinion for your engineers when a decision matters.
How a project runs
- 01 · Look
Understand what’s there: topology, rules, access paths, dependencies.
- 02 · Draw
Write the design down so it can be reviewed before anything changes.
- 03 · Change
Planned windows, validation at each step, a rollback ready.
- 04 · Hand over
Documentation and runbooks, so your team can run it without me.
“I’d rather spend an extra day planning than an extra night rolling back.”
03 · Experience
Organisations I’ve worked with.
- Nordic DefenderSecurity SaaS · Stockholm
- Tejarat BankBanking
- Iran Ports & Maritime OrganizationPublic sector
- Mahan AirAviation
- Cisco Firepower / ASA
- FortiGate
- Juniper SRX
- Palo Alto
- AWS
- Cloudflare
- Wazuh
04 · About
Hi, I’m Hamidreza.
Most of my work sits in the part of IT nobody notices until it breaks: the network, the firewalls, and the access paths between everything. It rewards patience: understanding a system properly before touching it.
I’m based in Rome and work with teams across Europe, remotely or on-site around Rome.
- AWS Certified Solutions Architect – Associate
- Fortinet FortiOS 7.6 Administrator
- English · Persian · Italian (learning)
05 · Contact
Tell me about your network.
A few lines on your setup and what you’re trying to do is enough to start. I usually reply within a day.