Fábio Martins - Senior Network & Security Engineer

Professional Summary

Senior Network & Security Engineer with 8 years of experience designing, implementing, and securing enterprise-grade networks across global environments. Multi-vendor expertise across Check Point, FortiGate, Palo Alto, Cisco, Zscaler ZIA/ZPA, and VMware Datacenter Virtualization. Currently managing global network security for Getinge AB (Swedish MedTech) across EMEA, AMER, and APAC regions. Proven delivery of zero-trust architectures, SASE deployments, firewall policy management, and cloud security programmes in regulated, mission-critical environments. ISO 27001 Lead Implementer & Lead Auditor with a track record of supporting enterprise audit cycles and compliance frameworks (NIST CSF). Seeking Senior Network Security Engineer / Security Architect roles in Dublin, Ireland.

Technical Skills

Firewalls & Security

Check Point (CCSM/CCTE/CCSE) FortiGate (NSE4/NSE7) Palo Alto (PCNSA) Zscaler ZIA/ZPA

Network & Routing

Cisco CCNP BGP OSPF EIGRP SD-WAN LAN/WAN IPsec/SSL VPN MPLS

Wireless

Cisco Catalyst 9800 WLC FlexConnect 802.1X WPA3

Identity & Access

Cisco ISE 802.1X NAC RADIUS LDAP

Cloud & Virtualisation

VMware vSphere (VCP-DCV) VMware NSX-T (VCP-NV)

Automation & APIs

Python RESTCONF NETCONF REST APIs Node.js

Network Management

ITIL 4 Cisco Unified Communications Network Hardening & Compliance

Work Experience

Global Network Specialist

Getinge AB (outsourced via Inetum)

Swedish medical technology company — global network security operations across three regions

Mar 2024 – Present Remote, Portugal EMEA · AMER · APAC

Architected and maintained global enterprise network spanning EMEA, AMER, and APAC
Managed Check Point and FortiGate firewall policy management across more than 100 distributed sites; enforced zero-trust segmentation and least-privilege access controls
Deployed and maintained Cisco Catalyst 9800 WLC across more than 100 sites supporting ~10,000 wireless users
Replaced legacy VPN with Zscaler ZIA/ZPA (SASE) for more than 10,000 remote users, eliminating split-tunnel risks
Managed IPsec/VPN tunnels across all regions
Delivered network automation using Python and RESTCONF/NETCONF APIs targeting Cisco Catalyst 9800 WLC

Senior Network Security Engineer Consultant

Inetum Portugal

Mar 2024 – Present Remote, Portugal

Delivered firewall rule reviews, VPN hardening, and network segmentation projects for enterprise clients across financial and healthcare verticals
Supported ISO 27001:2022 and NIST CSF compliance programmes
Designed secure network architectures aligned with zero-trust principles, reducing client attack surface across multi-site environments

Network & Security Analyst

Sistec S.A.

8-year tenure — network operations, security engineering, and infrastructure management

2016 – 2024 Luanda, Angola

Monitored and secured enterprise network maintaining <1% unplanned downtime annually via proactive monitoring and structured incident response
Optimised multi-vendor firewall rulesets (Check Point, FortiGate)
Led SD-WAN deployment across branch sites, reducing WAN costs while improving application performance SLAs
Implemented Cisco ISE 802.1X NAC across all wired and wireless endpoints
Administered VMware vSphere/NSX-T environments ensuring HA for business-critical workloads
Received Excellence Award — Best Performing Technical IT Angola 2021 (DSSI/Sophos)

Certifications

Cisco Certified Network Professional — Routing & Switching (CCNP)

Palo Alto Networks Certified Network Security Administrator (PCNSA)

Fortinet NSE 7 — SD-WAN

Check Point Certified Security Master (CCSM)

ISO/IEC 27001:2022 Lead Implementer

VMware Certified Professional — Network Virtualization / NSX-T (VCP-NV 2022)

Check Point Certified Troubleshooting Expert (CCTE)

Check Point Certified Security Expert (CCSE)

Check Point Certified Security Administrator (CCSA)

Cisco Certified Network Associate — Security (CCNA Security)

Fortinet NSE 4 — Network Security Professional

VMware Certified Professional — Data Center Virtualization (VCP-DCV 2022)

ISO/IEC 27001:2013 Lead Auditor

ITIL 4 Foundation

Achievements & Awards

Excellence Award — Best Performing Technical IT Angola 2021 (DSSI / Sophos)

Key Projects

SD-WAN Migration (Cisco to Fortinet)

Led migration from Cisco SD-WAN to FortiGate SD-WAN across multi-site environment
Designed and implemented secure, high-availability WAN architecture
Improved network performance, resiliency, and operational visibility

Firewall Migration & Optimization

Executed multi-vendor firewall migrations (Check Point, Fortinet) in enterprise environments
Redesigned security policies aligned with Zero Trust principles and least privilege access
Reduced complexity and improved rule efficiency and security posture

Cisco Catalyst 9800-CL Deployment & Migration

Deployed and migrated to Cisco Catalyst 9800-CL wireless controllers in enterprise environments
Implemented centralized wireless management and enhanced security (802.1X, WPA2/WPA3)

Zscaler ZPA Deployment & Optimization

Designed and deployed Zscaler ZPA as part of a Zero Trust architecture, replacing legacy VPN access
Integrated ZPA with identity providers (Azure AD / LDAP) to enforce secure, identity-based access
Onboarded and segmented applications using application segmentation and least privilege access principles
Optimized access policies, improving user experience and reducing latency for remote users

Education

BSc in Business Information Systems

International University of Management

Jan 2012 – Nov 2016

Diploma in PC Engineering

IIT — Institute of Information Technology

2010 – 2011

Languages

Portuguese Native

English Professional — C1 / CEFR

Spanish Intermediate – B1