AI.ANDREI ILAO / NETWORK SECURITY
Portrait of Andrei Emmanuel Ilao
Andrei Emmanuel IlaoSystem Engineer · Network Security
Network Security Engineer

Engineeringsecure networksthat keepbusinesses connected.

I specialize in network security implementation, firewall migration, VPN configuration, network segmentation, infrastructure deployment, and technical troubleshooting. My focus is building and maintaining secure, reliable network environments.

Explore My Projects Get In Touch
FIREWALLS · CONNECTIVITY · INFRASTRUCTURE
Enterprise network topology with four ISP links to a FortiGate SD-WAN firewall, Cisco core, Aruba access switching, VMware ESXi servers, and remote VPN usersISP 01WAN 1ISP 02WAN 2ISP 03WAN 3ISP 04WAN 4FORTINETFORTIGATESD-WAN · 4 ISP LINKSCISCO COREL3 SWITCHCAMPUS DISTRIBUTIONREMOTE USERSSSL / IPsec VPNARUBA ACCESSACCESS SWITCHVMWARE ESXiVIRTUAL SERVERSCONCEPTUAL TOPOLOGY / NOT TO SCALE
CONCEPTUAL TOPOLOGYNOT TO SCALE
About Me

Built on infrastructure.
Focused on security.

I’m a System Engineer specializing in Network Security, with hands-on experience across Fortinet, Sophos, Cisco, and Aruba technologies.

My work includes firewall implementation, deployment, migration, configuration, VPN connectivity, SD-WAN, network infrastructure support, and security-focused configuration. I use GUI and CLI tools to work with firewall policies, NAT, security profiles, connectivity, and troubleshooting.

I focus on practical implementation and clear troubleshooting to help maintain stable, secure, and reliable network operations.

SECURE CONFIGURATION
RELIABLE CONNECTIVITY
THOUGHTFUL SEGMENTATION
Technical Expertise

Practical skills.
Security-minded execution.

A hands-on toolkit spanning firewall configuration, network connectivity, security controls, and day-to-day technical support.

Networking & Network Security

FortinetSophosCiscoArubaFortiGate configuration & troubleshootingFirewall policies & traffic matchingNAT · SNAT · DNAT · Port forwardingIPsec site-to-site VPNSSL VPN deployment & troubleshootingSD-WAN · Basic SLA & rulesVDOM & inter-VDOM policiesWeb FilteringAntivirusIPSApplication ControlSSL deep inspection & certificate trustCLI troubleshootingTraffic & event log analysisBasic HA concepts & monitoringCisco switch configuration & upgradesLayer 1–3 connectivity troubleshootingLevel 1–2 technical support

Security Platforms

FGFortiGate
FAFortiAnalyzer
FMFortiManager
FSFortiSandbox
FWFortiWeb
SFSophos Firewall
XGSophos XGS
SESophos Endpoint
CCisco
AAruba
SECURITY PLATFORMS

Devices and tools

FortiGate 700G product image
FortiGateFirewall appliance
Sophos Firewall XGS product image
Sophos XGSFirewall appliance
Cisco Catalyst 9200L network switch
Cisco CatalystAccess switch
ARUBA CX ACCESS SWITCH
Aruba CXAccess switch illustration

FortiGate

Applies firewall policies, VPN, and SD-WAN at the network edge.

FortiAnalyzer

Centralizes logs, reports, and security event analysis.

FortiManager

Manages FortiGate configurations and policies centrally.

FortiSandbox

Inspects suspicious files in an isolated analysis environment.

FortiWeb

Protects web applications from common application-layer threats.

Sophos Firewall

Controls network traffic and provides VPN and threat protection.

Sophos XGS

Provides perimeter firewalling and traffic inspection for networks.

Sophos Endpoint

Helps protect workstations and servers from malware and ransomware.

Cisco

Connects and segments LAN devices through switching and routing.

Aruba

Provides wired and wireless access with network segmentation.

Selected Work

Featured projects.
Real infrastructure work.

Implementation and migration work centered on secure connectivity, network separation, and reliable infrastructure configuration.

Firewall Migration · Sophos

2 Sophos Firewall Migration with Set of VPN — 1 HQ and 1 Branch with Reconfiguration and Segmentation of VLANs

Migration of two Sophos firewalls across one headquarters and one branch office, including VPN configuration, firewall reconfiguration, and VLAN segmentation.

2 Sophos firewallsHQ + branchVPN configurationFirewall reconfigurationVLAN segmentation
HQ + BRANCH FIREWALL MIGRATIONIPsec VPNSOPHOSHQ FIREWALLSOPHOSBRANCH FWHQ VLAN SEGMENTSUSERSVOICESERVERSBRANCH VLAN SEGMENTSUSERSVOICESERVERS
Firewall Migration · Fortinet

2 Fortinet Firewall Migration — HQ and DR with IPsec Tunnel for Remote Users

Migration of two Fortinet firewalls across an HQ and disaster recovery environment, including IPsec tunnel implementation for remote users.

2 Fortinet firewallsHQ environmentDR environmentIPsec tunnelRemote-user connectivity
HQ + DISASTER RECOVERYIPsec TUNNELFORTINETHQ FIREWALLFORTINETDR FIREWALLREMOTE USERSVPN ACCESSRESILIENT SITE CONNECTIVITY
OT Security · Fortinet

1 Fortinet Firewall OT Security — Separate and Quarantine the OT Network and Security

Implementation of one Fortinet firewall to separate and quarantine the operational technology (OT) network, creating a dedicated security boundary between network environments.

1 Fortinet firewallOT network separationNetwork quarantineSecurity isolation
IT / OT SECURITY BOUNDARYIT NETWORKCORPORATEUSER DEVICESIT SERVICESFORTIGATE FWOT NETWORKCONTROL ZONEOT DEVICESISOLATED ASSETSDEFAULT DENY · EXPLICIT ALLOW · QUARANTINE
Infrastructure Deployment · Sophos

Reconfiguration of Sophos Firewall and Deployment of 1 L3 Sophos Switch and 4 Access Switches, Security Hardening and Configuration of Network Infrastructure

Reconfiguration of a Sophos firewall and deployment of one Layer 3 Sophos switch and four access switches, including security hardening and network infrastructure configuration.

Sophos firewall1 Layer 3 switch4 access switchesSecurity hardeningInfrastructure configuration
HARDENED CAMPUS INFRASTRUCTURESOPHOS FWSECURITY GATEWAYLAYER 3CORE SWITCHARUBA 01ARUBA 02ARUBA 03ARUBA 04
Ongoing Technical Work

Security Supports

Separate support activities across firewall platforms, connectivity, optimization, and technical maintenance.

Fortinet firewall reimageDevice recovery and reimage support.
VPN troubleshootingInvestigating VPN connectivity issues.
SD-WAN multipath optimizationSD-WAN path and connectivity optimization.
Fortinet & Sophos supportTechnical support across firewall platforms.
Security platformsFortiGate, FortiSandbox, FortiAnalyzer, FortiWeb, and Sophos XGS.
Firmware & maintenanceFirmware upgrades and technical maintenance.
Professional Experience

Building experience
through implementation.

Hands-on responsibilities across network security implementation, deployment, configuration, and technical support.

System Engineer – Network Security

MAKATI CITY, PHILIPPINES
March 2026 – Present

Deploying and managing FortiGate, FortiAnalyzer, FortiManager, Sophos Firewall, Sophos Endpoint, and Cisco switches. Configuring firewall policies, NAT, VPN, SD-WAN, and VDOM; working with security profiles including Web Filtering and IPS; and performing troubleshooting and log analysis through GUI and CLI to support stable, secure network operations.

Firewall deploymentVPN & SD-WANSecurity profilesGUI / CLI troubleshooting

Technology Solutions Associate

MAKATI CITY, PHILIPPINES
September 2025 – March 2026

Supported network security implementation and gained exposure to data center and network security environments. Hands-on activities included firewall deployment, shadowing, troubleshooting, FortiGate configuration, firewall policies and NAT, IPsec and SSL VPN, SD-WAN, VDOM, Web Filtering, and IPS.

Network security supportFortiGate configurationIPsec / SSL VPNWeb Filtering & IPS
Credentials & Education

Learning with a
technical foundation.

Certifications and formal education supporting my work in networking and security.

CCNA: Enterprise Networking, Security, and Automation

Networking certification

Fortinet Certified Associate in Cybersecurity

Fortinet cybersecurity credential

NSE 1–3 – Cybersecurity

Dates listed in resume: September 11, 2025 – August 28, 2028

NSE 4 – FortiOS

Dates listed in resume: August 28, 2026 – August 28, 2028

Education

Bachelor of Science in Information Technology — Major in Network Technology

Batangas State University – The National Engineering University, Alangilan Campus

Batangas City, Philippines

Contact

Let's build
something secure.

Interested in network security, infrastructure engineering, or technical collaboration? Let's connect.

Start a conversation
EMAILilaoandrei90@gmail.comVIBER09466132384

GET IN TOUCH

Let's connect.

EMAILilaoandrei90@gmail.comLINKEDINAndrei Emmanuel IlaoVIBER09466132384