Dedicated and results-driven Network and IT Security Engineer with over 1.5 years of experience spanning enterprise IT infrastructure and government network security engineering. Holds a Bachelor's degree in Computer Science from Kabul Polytechnic University alongside advanced Cisco credentials (CCNA, CCNP). Possesses proven expertise in Defense-in-Depth architecture, OPNsense firewalls, and Suricata IDS/IPS threat mitigation. Skilled in network troubleshooting, access control, data backup protocols, and deploying scalable, high-security systems.
Network Engineer · Shamshad Asia Construction and Road Building Company
Kabul, Afghanistan
Configured, deployed, and maintained office computers, printers, and internet equipment across administrative offices and project sites. Resolved daily technical issues related to local area networks (LAN), computer systems, and IT infrastructure. Managed critical file systems and implemented regular, secure backup protocols for administrative documents, financial records, and technical engineering maps. Monitored, controlled, and regulated employee access permissions to the internal corporate network and office internet.
Network Security Project Lead · Kabul Polytechnic University
Kabul, Afghanistan
Designed and deployed a multi-layer (Defense-in-Depth) network security architecture using OPNsense Firewall and Suricata IDS/IPS in EVE-NG.
Wrote custom User-Defined Suricata rules to detect and automatically mitigate SYN Flood, IP Spoofing, Slowloris, Skipfish, DirBuster, and Rogue SSH attacks.
Evaluated network defense performance across Baseline, IDS (Alert), and IPS (Drop) modes, achieving 100% attack blocking efficiency.
Network Security Intern · Ministry of Telecommunications and Information Technology (MCIT)
Kabul, Afghanistan
Designed a Cisco lab architecture and deployed a multi-layer Defense-in-Depth security model using OPNsense and Suricata IDS/IPS.
Simulated L3–L7 cyber threats to evaluate and execute practical mitigation techniques for enterprise networks.
Managed core IT operations, including daily network administration, infrastructure monitoring, and connectivity troubleshooting.
Learning
Education
Kabul Polytechnic University
Bachelor in Computer Science (Network Engineering)
Sep 2022 – Aug 2026
Key Coursework: Advanced Computer Networks, Web Development (HTML, CSS), Programming (C++, Java), and MS Office Suite.
Top In Town Target Training Center
Professional Training in Network Engineering (CCNA & CCNP)
Jul 2024 – May 2025
• Completed comprehensive hands-on training covering CompTIA Network+, Cisco CCNA Routing & Switching, and CCNP Enterprise curriculum.
• Practical experience in configuring Cisco routers/switches, OSPF, BGP, VLANs, STP, and troubleshooting enterprise network topologies.
Dedicated and results-driven Network and IT Security Engineer with over 1.5 years of experience spanning enterprise IT infrastructure and government network security engineering. Holds a Bachelor's degree in Computer Science from Kabul Polytechnic University alongside advanced Cisco credentials (CCNA, CCNP). Possesses proven expertise in Defense-in-Depth architecture, OPNsense firewalls, and Suricata IDS/IPS threat mitigation. Skilled in network troubleshooting, access control, data backup protocols, and deploying scalable, high-security systems.
Work History
Network EngineerNov 2024 – Mar 2026
Shamshad Asia Construction and Road Building Company, Kabul, Afghanistan
Configured, deployed, and maintained office computers, printers, and internet equipment across administrative offices and project sites. Resolved daily technical issues related to local area networks (LAN), computer systems, and IT infrastructure. Managed critical file systems and implemented regular, secure backup protocols for administrative documents, financial records, and technical engineering maps. Monitored, controlled, and regulated employee access permissions to the internal corporate network and office internet.
Network Security Project LeadNov 2025 – Aug 2026
Kabul Polytechnic University, Kabul, Afghanistan
• Designed and deployed a multi-layer (Defense-in-Depth) network security architecture using OPNsense Firewall and Suricata IDS/IPS in EVE-NG.
• Wrote custom User-Defined Suricata rules to detect and automatically mitigate SYN Flood, IP Spoofing, Slowloris, Skipfish, DirBuster, and Rogue SSH attacks.
• Evaluated network defense performance across Baseline, IDS (Alert), and IPS (Drop) modes, achieving 100% attack blocking efficiency.
Network Security InternApr 2026 – Sep 2026
Ministry of Telecommunications and Information Technology (MCIT), Kabul, Afghanistan
• Designed a Cisco lab architecture and deployed a multi-layer Defense-in-Depth security model using OPNsense and Suricata IDS/IPS.
• Simulated L3–L7 cyber threats to evaluate and execute practical mitigation techniques for enterprise networks.
• Managed core IT operations, including daily network administration, infrastructure monitoring, and connectivity troubleshooting.
Education
Bachelor in Computer Science (Network Engineering)
Kabul Polytechnic University
Sep 2022 – Aug 2026
Professional Training in Network Engineering (CCNA & CCNP)
Top In Town Target Training Center
Jul 2024 – May 2025
Diploma in English Language (DEL)
Kateb University (2024)
High School Diploma in General Science
Habibia High School
Mar 2009 – Sep 2021
Languages
Pashto
Dari
English
References
Asst. Prof. Shamsul Islam Shirani
Assistant Professor, Network Engineering Department, Kabul Polytechnic University
shamsulislamshirani@gmail.com · +93777027984
Dedicated and results-driven Network and IT Security Engineer with over 1.5 years of experience spanning enterprise IT infrastructure and government network security engineering. Holds a Bachelor's degree in Computer Science from Kabul Polytechnic University alongside advanced Cisco credentials (CCNA, CCNP). Possesses proven expertise in Defense-in-Depth architecture, OPNsense firewalls, and Suricata IDS/IPS threat mitigation. Skilled in network troubleshooting, access control, data backup protocols, and deploying scalable, high-security systems.
Work History
Network EngineerNov 2024 – Mar 2026
Shamshad Asia Construction and Road Building Company, Kabul, Afghanistan
Configured, deployed, and maintained office computers, printers, and internet equipment across administrative offices and project sites. Resolved daily technical issues related to local area networks (LAN), computer systems, and IT infrastructure. Managed critical file systems and implemented regular, secure backup protocols for administrative documents, financial records, and technical engineering maps. Monitored, controlled, and regulated employee access permissions to the internal corporate network and office internet.
Network Security Project LeadNov 2025 – Aug 2026
Kabul Polytechnic University, Kabul, Afghanistan
• Designed and deployed a multi-layer (Defense-in-Depth) network security architecture using OPNsense Firewall and Suricata IDS/IPS in EVE-NG.
• Wrote custom User-Defined Suricata rules to detect and automatically mitigate SYN Flood, IP Spoofing, Slowloris, Skipfish, DirBuster, and Rogue SSH attacks.
• Evaluated network defense performance across Baseline, IDS (Alert), and IPS (Drop) modes, achieving 100% attack blocking efficiency.
Network Security InternApr 2026 – Sep 2026
Ministry of Telecommunications and Information Technology (MCIT), Kabul, Afghanistan
• Designed a Cisco lab architecture and deployed a multi-layer Defense-in-Depth security model using OPNsense and Suricata IDS/IPS.
• Simulated L3–L7 cyber threats to evaluate and execute practical mitigation techniques for enterprise networks.
• Managed core IT operations, including daily network administration, infrastructure monitoring, and connectivity troubleshooting.
Education
Bachelor in Computer Science (Network Engineering)
Kabul Polytechnic University
Sep 2022 – Aug 2026
Professional Training in Network Engineering (CCNA & CCNP)
Top In Town Target Training Center
Jul 2024 – May 2025
Diploma in English Language (DEL)
Kateb University (2024)
High School Diploma in General Science
Habibia High School
Mar 2009 – Sep 2021
References
Asst. Prof. Shamsul Islam Shirani
Assistant Professor, Network Engineering Department, Kabul Polytechnic University