Eduard Agopyan

Lead end-to-end Cloudflare delivery for enterprise customers: platform architecture and governance, account audits, enablement workshops, automation, zero-downtime migrations, and origin hardening.

• Cloudflare architecture: Built repeatable account/zone baselines for TLS, caching, WAF/Rulesets, Bot, and Zero Trust.
• Audits and remediation: Delivered security/performance assessments with prioritized findings and phased rollout plans.
• Migrations at scale: Executed staged DNS/SSL/WAF/Bot migrations for hundreds of domains with tested rollback paths.
• Automation: Implemented Workers + Terraform/Python workflows for reporting, alerting, and controlled configuration rollout.
• Origin hardening: Tuned nginx cache/headers/real_ip/timeout behavior to stabilize edge-origin correctness.

Fortinet-centric network security engineering for a regulated enterprise - NGFW, SD-WAN, VPN and change governance.

• Fortinet platform: Operated FortiGate, FortiManager, FortiAnalyzer, and FortiEMS across sites.
• NGFW operations: Managed IPS/AV, URL filtering, SSL inspection, and policy lifecycle/reporting.
• Connectivity: Delivered SD-WAN segmentation and site-to-site/remote-access VPN operations.

Owned end-to-end enterprise network and security operations: architecture decisions, firewall governance, and day-to-day reliability across a mixed-vendor environment.

• Network ownership: Led standards, architecture decisions, and escalations for high-impact changes.
• Security governance: Managed FortiGate/Palo Alto/Meraki policy lifecycle, segmentation, NAT, and VPN.
• Delivery: Implemented Meraki, Palo Alto/FortiGate, and Silver Peak SD-WAN solutions across sites.
• Reliability: Drove runbooks, change acceptance, RCA, and preventive improvements.

Enterprise network engineering for a global QSR brand - AWS networking with Palo Alto transparent inspection, plus day-to-day stability work.

• AWS inspection architecture: Designed GWLB/GWLBe + VM-Series transparent inspection patterns for centralized control.
• Transit design: Built TGW route segmentation for east-west and egress inspection workflows.
• Resilience and scale: Implemented multi-AZ health-driven scaling with Panorama policy consistency.
• Observability and automation: Standardized logs/alarms and Terraform-based deployment with rollback plans.
• Hybrid operations: Supported Cisco/Fortinet/F5 estates and resolved complex VPN/routing/security incidents.

Global enterprise support focused on VPN and secure connectivity.

• Global support: Resolved enterprise Cisco/Meraki incidents with clear customer communication.
• VPN delivery: Implemented and troubleshot IPsec site-to-site and SSL remote access.
• Operations: Managed failovers, NAT changes, and network documentation updates.