Available for opportunities

IT Infrastructure & Security Engineer

I design and secure scalable enterprise infrastructure.

Addis Ababa, Ethiopia

About Me

Bisrat Melknew

Bisrat Melknew

IT Infrastructure & Security Engineer

Infrastructure•Security•Cloud•Automation
Contact me →

Expertise

Core competencies across infrastructure, security, and cloud engineering.

Networking and Security

Designing, Securing, and Optimizing Enterprise Network Infrastructure

FortiGate Firewall AdministrationCisco ASA Firewall AdministrationCisco Meraki MX67 / MX84 / MX95pfSense Firewall AdministrationIDS / IPSSSL InspectionWeb FilteringApplication ControlGeo-blockingACLsNACZero Trust Architecture802.1X AuthenticationVPN Deployment & Secure Remote AccessNetwork Segmentation & Security HardeningFirewall Policy ManagementSecure Enterprise Network ArchitectureVulnerability AssessmentIncident Response

Cloud

Cloud identity, endpoint management, and secure access administration

Microsoft 365 AdministrationAzure AD / Entra IDMicrosoft IntuneHybrid Identity ManagementMulti-Factor Authentication (MFA)Conditional Access PoliciesIdentity & Access Management (IAM)User & Device ManagementEndpoint Security ManagementSingle Sign-On (SSO)Azure Tenant AdministrationCloud Security & Compliance

Infrastructure

Scalable and resilient system design

Linux Administration (RHEL, Ubuntu)Windows Server & Active Directory AdministrationDNS , DHCP , GPO , FILE SERVER , PRINT SERVERNPS / RADIUS AuthenticationServer HardeningVeeam Backup & ReplicationDisaster Recovery

Automation

Infrastructure as code and CI/CD

AnsiblePython & Bash Scripting

Virtualization

Enterprise virtualization platforms

VMware vSphere / ESXiProxmox VEHyper-VVirtual Networking (NSX)Resource OptimizationMigration Strategies

Featured Projects

Selected infrastructure and security engineering work.

Multi-Vendor Enterprise Hub-and-Spoke WAN Architecture | SD-WAN | IPsec VPN | SSL VPN | High Availability
NetworkingVPNSD-WANHigh Availability

Multi-Vendor Enterprise Hub-and-Spoke WAN Architecture | SD-WAN | IPsec VPN | SSL VPN | High Availability

A production-grade enterprise WAN architecture featuring Dual-WAN SD-WAN, redundant IPsec VTI tunnels with OSPF dynamic routing, Active-Passive HA clustering, and AD CS-backed SSL/TLS VPNs for secure remote access.

FortiGateCiscopfSenseSD-WANOSPF
View all projects

Certifications

Industry-recognized credentials validating technical expertise.

CMSS | Cisco Meraki Solution Specialist

Cisco Systems

2026Active

CCNA | Cisco Certified Network Associate

Cisco Systems

2025Active

Cisco AI Technical Practitioner

Cisco Systems

2026Active
View all certifications

Latest Articles

Technical writing on infrastructure, security, and cloud engineering.

Security12 min read

Implementing Zero Trust Architecture in Enterprise Networks

A comprehensive guide to designing and deploying Zero Trust principles across enterprise infrastructure, from identity verification to micro-segmentation.

September 15, 2024
Read all articles

Let's build secure and scalable infrastructure together.

Open to discussing infrastructure challenges, security architecture, or new opportunities.

Get in touch