Fábio Martins - Senior Network & Security Engineer

Professional Summary

Senior Network & Security Engineer with 8+ years of experience designing, implementing, and securing enterprise network infrastructures across multi-vendor environments. Proven track record in reducing security incidents, optimizing network performance, and delivering zero-trust security solutions for global organizations. Expertise in next-generation firewalls, SD-WAN, cloud security, and virtualized datacenter environments. Currently managing global network security for Getinge AB (Swedish MedTech) across EMEA, AMER, and APAC regions.

Technical Skills

Firewalls & Security

Check Point (CCSM, CCTE, CCSE) FortiGate (NSE4, NSE7) Palo Alto Networks (PCNSA) Zscaler Internet Access (ZIA) Zscaler Private Access (ZPA) Cisco ASA Next-Generation Firewalls (NGFW)

Network & Routing

Cisco CCNP Enterprise Cisco CCNA Security BGP OSPF EIGRP SD-WAN MPLS LAN/WAN Design IPsec VPN SSL VPN VLAN Spanning Tree Protocol (STP) QoS Network Segmentation

Wireless

Cisco Catalyst 9800 Wireless LAN Controller Cisco FlexConnect 802.1X Authentication WPA2-Enterprise WPA3 Wireless Site Surveys CAPWAP

Identity & Access Management

Cisco Identity Services Engine (ISE) 802.1X Network Access Control (NAC) RADIUS LDAP Active Directory Integration Multi-Factor Authentication (MFA)

Cloud & Virtualisation

VMware vSphere (VCP-DCV)

Automation & Dev

Python REST APIs RESTCONF NETCONF YANG Network Automation

Compliance & Frameworks

PR320: ISMS ISO 27001:2013 Lead Auditor ITIL 4 Foundation Network Security Hardening GDPR Compliance Security Auditing Risk Assessment

Voice & Collaboration

Cisco Unified Communications Manager (CUCM) VoIP SIP Voice Gateway Configuration

Work Experience

Global Network Specialist

Getinge AB (outsourced via Inetum)

Swedish medical technology company — global network security operations across three regions

Mar 2024 – Present Remote, Portugal EMEA · AMER · APAC

Architected and maintained global enterprise network spanning EMEA, AMER, and APAC
Managed Check Point and FortiGate firewall policy management across more than 100 distributed sites; enforced zero-trust segmentation and least-privilege access controls
Deployed and maintained Cisco Catalyst 9800 WLC across more than 100 sites supporting ~10,000 wireless users
Replaced legacy VPN with Zscaler Private Access (ZPA) for more than 10,000 remote users, eliminating split-tunnel risks
Implemented Zscaler Internet Access (ZIA) with SSL inspection, DLP policies, and cloud firewall rules, securing SaaS traffic for 10,000+ users across hybrid cloud environment
Managed IPsec/VPN tunnels across all regions
Delivered network automation using Python and RESTCONF/NETCONF APIs targeting Cisco Catalyst 9800 WLC

Senior Network Security Engineer Consultant

Inetum Portugal

Mar 2024 – Present Remote, Portugal

Seconded to Getinge AB as a dedicated Global Network Specialist, providing enterprise-level network and security engineering services across a multi-national infrastructure spanning 40+ countries

Network & Security Analyst

Sistec S.A.

8-year tenure — network security engineering, and infrastructure management

2016 – 2024 Luanda, Angola

Led team of 4 engineers delivering comprehensive network and security solutions for 30+ enterprise clients; served as technical authority for security architecture, network infrastructure, and unified communications projects
Security Leadership: Designed and implemented multi-vendor security solutions (Check Point, FortiGate, Sophos) for diverse clients
Managed information security projects end-to-end including ISO 27001 compliance initiatives, risk assessments, and security infrastructure deployments
Network Infrastructure: Owned complete network infrastructure responsibility — design, implementation, and optimization of enterprise Cisco routing/switching environments
UC Implementation: Designed and deployed Cisco Unified Call Manager infrastructure
Conducted Check Point security assessments across diverse client environments, identifying critical vulnerabilities, policy misconfigurations, and active threats; delivered remediation roadmaps reducing high-severity findings and preventing security incidents

Certifications

Cisco Certified Network Professional — Routing & Switching (CCNP)

Palo Alto Networks Certified Network Security Administrator (PCNSA)

Fortinet NSE 7 — SD-WAN

Check Point Certified Security Master (CCSM)

VMware Certified Professional — Network Virtualization / NSX-T (VCP-NV 2022)

VMware Certified Professional — Data Center Virtualization (VCP-DCV 2022)

Check Point Certified Troubleshooting Expert (CCTE)

Check Point Certified Security Expert (CCSE)

Check Point Certified Security Administrator (CCSA)

Cisco Certified Network Associate — Security (CCNA Security)

Cisco Certified Network Associate — Routing & Switching (CCNA R&S)

Cisco Certified Network Associate Voice (CCNA Voice)

Fortinet NSE 4 — Network Security Professional

PR320: ISMS ISO 27001:2013 Lead Auditor

ITIL 4 Foundation

Achievements & Awards

Excellence Award — Best Performing Technical IT Angola 2021 (DSSI / Sophos) — recognised for outstanding contribution to enterprise network security operations

Key Projects

SD-WAN Migration (Cisco to Fortinet)

Led migration from Cisco SD-WAN to FortiGate SD-WAN across multi-site environment
Designed and implemented secure, high-availability WAN architecture
Improved network performance, resiliency, and operational visibility

Firewall Migration & Optimization

Executed multi-vendor firewall migrations (Check Point, Fortinet) in enterprise environments
Redesigned security policies aligned with Zero Trust principles and least privilege access
Reduced complexity and improved rule efficiency and security posture

Cisco Catalyst 9800-CL Deployment & Migration

Deployed and migrated to Cisco Catalyst 9800-CL wireless controllers in enterprise environments
Implemented centralized wireless management and enhanced security (802.1X, WPA2/WPA3)

Zscaler ZPA Deployment & Optimization

Designed and deployed Zscaler ZPA as part of a Zero Trust architecture, replacing legacy VPN access
Onboarded and segmented applications using application segmentation and least privilege access principles
Optimized access policies, improving user experience and reducing latency for remote users
Troubleshot and resolved connectivity issues, ensuring high availability and seamless user access

Zscaler Internet Access (ZIA) Implementation

Deployed Zscaler Internet Access (ZIA) cloud security platform across 50+ global locations, replacing traditional proxy infrastructure and enabling secure direct internet access for 2,000+ users
Designed URL filtering policies, SSL inspection rules, and DLP policies aligned with corporate security standards
Configured advanced threat protection including sandbox analysis, cloud firewall rules, and bandwidth management policies

Cisco Unified Call Manager (CUCM) — Enterprise VoIP Infrastructure

Designed and deployed Cisco Unified Communications Manager (CUCM) infrastructure supporting 500+ IP phones and 7+ office locations across global enterprise environment
Implemented high-availability CUCM cluster with redundant call processing nodes

High-Availability Datacenter Infrastructure — DC/DR Implementation

Designed and implemented redundant datacenter infrastructure across primary (DC) and disaster recovery (DR) sites, ensuring business continuity for critical enterprise applications
Deployed two high-availability Check Point 6200 firewall clusters in active-passive configuration, providing stateful failover and sub-second convergence for perimeter security

Education

BSc in Business Information Systems

International University of Management

Jan 2012 – Nov 2016

Diploma in PC Engineering

IIT — Institute of Information Technology

2010 – 2011

Languages

Portuguese Native

English Professional — C1 / CEFR

Spanish Intermediate – B1