Patrick Madioko

– Led the migration of Check Point Software and Stormshield firewalls to Palo Alto Networks. – Redesigned and converted security policies (ACL, NAT, objects) to a Palo Alto architecture (zones, App-ID, User-ID) and segmented the firewall into multiple VSYS to isolate production from the OOB network, including proxy traffic integration. – Identified and remediated security constraints within the existing architecture. – Optimized security rules through rationalization, removal of obsolete, duplicate rules, and performance enhancement. – Deployed and administered Palo Alto Panorama (centralized management, Templates, Device Groups). – Implemented RBAC, logging, and monitoring via PRTG, with integration of EfficientIP DDI services. – Deployed GlobalProtect SSL VPN with authentication via Microsoft Azure Entra ID (users) and ADFS (administrators). – Designed and maintained multi-site enterprise network infrastructures leveraging OSPF, EIGRP, and BGP for optimized routing. – Performed advanced configuration of portals, gateways, authentication (LDAP, MFA, SAML), split/full tunnelling, and HIP profiles. – Deployed NAC solutions using Aruba ClearPass and Cisco ISE, including 802.1X, compliance posture assessment, guest access, and dynamic segmentation. – Integrated Wi-Fi controllers with NAC (WPA2/WPA3-Enterprise, centralized authentication, dynamic access policies). – Designed and implemented IPsec site-to-site VPNs (IKE/IPsec, routing, PBF, high availability, dual ISP). – Demonstrated knowledge and supported enterprise-grade network infrastructures across multiple sites, leveraging OSPF, EIGRP, and BGP for optimized routing. – Integrated and secured DNS/DHCP/IPAM services via EfficientIP. – Diagnosed and resolved network and security incidents (LAN/WAN/Wi-Fi, VPN, NAC). – Authored technical documentation and delivered knowledge transfer sessions.

– Evaluate and deploy next-generation and legacy firewalls (e.g., Fortinet and Palo Alto), intrusion detection systems (IDS)/intrusion prevention systems (IPS), virtual private networks (VPNs), and endpoint protection platforms to reinforce enterprise perimeter and endpoint defense. – Integrate layered security controls across cloud (AWS, Azure), hybrid, and on-premises environments to ensure consistent policy enforcement and secure interoperability. – Spearhead the design and implementation of secure network and system architecture that aligns with regulatory standards and business requirements. – Collaborate cross-functionally with the legal, human resources, and compliance teams to uphold privacy and data protection mandates. – Serve as the technical lead on critical security projects and initiatives, translating complex risks into actionable insights for executives and stakeholders. – Develop and implement incident response plans and monitor SIEM platforms (e.g., Splunk and Forti SIEM) to detect anomalies, coordinate threat containment, and drive mitigation efforts. – Mentor junior engineers and analysts to foster technical growth and cultivate a strong security culture within the organization.

As a Network & Security Consultant, my primary role is to bridge the gap between complex technical security and strategic business objectives. I design and implement cutting-edge security solutions that directly align with both internal and customer objectives.... Network Security Architect Project Achievements: – I led the team & implemented a solution to onboard over 90 schools and higher education institutions using Palo Alto NGFW and virtual machine appliances to the Panorama M-200 series. – To achieve full functionality, I had to migrate institutions running on other vendors such as FortiGate, Sophos, SonicWall to Palo Alto using Expedition and manually reviewed and customized imported rules to optimize for Palo Alto's architecture and features such as application identification and user identity. – Designed a FortiGate SD-WAN solution to connect the managed devices to the panorama M-200 Series. The solution provided centralized visibility and management, making it easier to monitor and control network performance across multiple sites. – The enhanced QoS capabilities result in better application performance and more consistent user experience, log forwarding, and the provider's cloud services, especially for real-time applications such as VoIP and video conferencing... – Designed and implemented network and security migration in a multi-vendor environment. (Cisco routers, switches, ASA, FTD, Sophos, Microsoft, Checkpoint, SonicWALL, Palo Alto, FortiGate) – I Implemented server systems and used best practices to meet organizational objectives by collaborating with engineering and business units. Produced architecture documentation, including high-level designs (HLD) and low-level designs (LLD). – Enforce security policies, standards, and procedures and educate development and operations teams on secure coding practices and responsible data handling. – Produce comprehensive architecture documentation, including high-level designs (HLDs) that define the system-wide structure, integration points, business flows, and low-level designs (LLDs) that detail the technical components, protocols, and configuration specifics for the implementation teams. – Ensure that design artifacts support scalability, resilience, and compliance to provide clarity for cross-functional teams throughout the project lifecycle.

In my role as Network & Security Operations Specialist at *Invest Bank*, I was instrumental in advancing the bank's connectivity and security objectives. My primary focus was to ensure that all business units and internal services maintained seamless and secure connections with their respective vendors, thereby providing a stable user experience for our customers... Project Achievements: – I spearheaded the strategic "work from home" initiative, enabling secure remote access for over 2,500 employees during the bank's critical transition from Check Point to Palo Alto Networks 5500 Series Next-Generation Firewalls (NGFWs). – Established and enforced security policies governing network access based on user roles and device compliance, integrated Security Assertion Markup Language (SAML) for authentication, and deployed the preferred Global Protect client version. This approach enhanced secure single sign-on (SSO) capabilities across multiple applications...

The Commonwealth Bank of Australia acquired Tyme digital, a money transfer company, to become Tyme Bank, formerly Commonwealth Bank of South Africa, a subsidiary of the Australian bank. My role as Network Security Consultant was to work closely with the Australian IT team to conduct a thorough assessment of the existing network infrastructure to identify any security gaps and evaluate hardware and network configurations. Participate in the process to define security objectives and ensure they are aligned with the bank's business objectives, including protecting sensitive financial data, ensuring regulatory compliance (South African POPI Act equivalent to EU GDPR) and maintaining customer confidence. Create a detailed design of the network security architecture, including network segmentation, defense in depth, access control, data, encryption, endpoint security, logging and monitoring... Project Achievements: – I divided the network into segments to limit the spread of potential threats and Implemented firewalls migration from the legacy ASA to FTD, intrusion detection/prevention systems (IDS/IPS), and other perimeter security measures. – I used strong authentication and authorization mechanisms to control access to network resources and encrypted sensitive data both in transit and at rest to comply with industry standards (PCI-DSS). – Provided high level operational security support for security controls, firewalls, web content management, forward and reverse proxy, secure email, vulnerability management, secure remote access, fault tolerance, VPN and IPsec configurations, gateway data leak prevention... – Protected endpoints such as computers, mobile devices, and servers with antivirus, anti-malware, and implemented continuous monitoring and logging to detect and respond to security incidents in real-time... – Produced architecture documentation, including high-level designs (HLD) and low-level designs (LLD).

The objectives of the consultancy were to hire a highly skilled network & security consultant to assist the bank's UC and IT team to carry out specific tasks for improving network access, connectivity, switching, routing, quality of service (QoS), resilience and security in the southern hemisphere. Under the administrative authority of the resident representative, the DC and Business Centre Division Manager... Project Achievements: – Planned, designed and configured Dynamic Multipoint Virtual Private Network (DMVPN) phase 3 in a dual hubs & spoke architecture between head offices and more than 40 business units (Branches) across Africa as spokes with mGRE tunnels protected with internet protocol security encryption and Public Key infrastructure for authentication to achieve integrity, confidentiality and availability of the bank back-ups, replication traffic and enable remote sites to securely access resources hosted in the data Centre via the DMVPN hubs. – To handle optimal data forwarding and ensure availability, the Open Shortest Path First routing protocol has been used. – The solution facilitated direct spoke-to-spoke communication for seamless unified communication between the bank's remote business units which significantly enhanced the flexibility, scalability, and security of the network. – I led the implementation of a Data Centre Interconnect (DCI) using SMT-1 clear channel transport and Overlay Transport Virtualization (OTV) to seamlessly 2 geographically dispersed data centers. Produced architecture documentation, including high-level designs (HLD) and low-level designs (LLD). – Thorough connectivity, performance and security testing were conducted to verify, measure and validate the effectiveness of network performance, IPsec encryption between the hubs and spokes and other security measures. – Created a roadmap that addressed cybersecurity risks & aligned with organizational objectives.

My duties and responsibilities included but not limited to the following: – Network Administration (network fine tuning and maintenance.) – Circuit activation, testing & fault troubleshooting. – Create reports for management. – Compile & release handover prior to shift conclusion. – Implementation of wide variety of Access methodologies, VPN and VOIP solutions. – Accurate and timely completion of installations and the relevant administration work that is required for signing off jobs and projects – Attending to escalations from tier 1and tier 2 teams within the network operation environment. – Completion of jobs in Remedy (call logging system) to ensure that employee times are recorded and customers are billed. – Accurately configuring and installing customer' value added services. – Training and documentation on various products where applicable, doing the actual ground work and research on the information provided. – Mentoring and training of the tier 1 and tier 2 engineers. – Installations of projects within agreed deadlines set between CMC Networks and customers. – Liaising directly with Project Office regarding project updates. – Guiding the Project Office on achievable outputs for project installations.