Network Security Engineer / Architect

Nenad Karlovcec

Designing, securing, and automating complex network infrastructures across enterprise environments.

location_on Location Welland, ON, Canada
mail Email [email protected]
call Phone 416-888-2166
link LinkedIn /in/nenadkarlovcec

Professional Summary

Seasoned network security professional with deep expertise in security architecture, firewall design, and network security assessments. Strong background in the design, implementation, and hardening of complex IP-based networks.

Skilled across major firewall platforms (Palo Alto, Fortinet, Cisco, Check Point) with a focus on security policy development, threat prevention, and infrastructure protection. Recognised for initiative, hands-on delivery, and mentoring.

20+ Years Experience
8 Active Certifications

Professional Experience

iON United

Team Lead, Service Delivery

Oct 2025 — Present

iON United

Sr. Network Security Engineer

Apr 2025 — Oct 2025

iON United

Sr. Network Architect

Feb 2023 — Mar 2025

University of Toronto

Firewall Engineer

Sep 2020 — Sep 2022

Contributed to projects and day-to-day operations within the Network Security Team, managing a fleet of Cisco ASA appliances and internet-facing Palo Alto firewalls.

Oslon IT Limited

Owner

Apr 2015 — Present

Independent contractor focused on networking and security technologies. Delivered projects with leading integrators (CDW Canada, Insight Canada) in Sr. Network Security Consultant / Network Architect roles. Frequently acted as project Team Lead: coordinating engineers, guiding solution design, and ensuring successful delivery.

Siemens Canada Limited

Network Consultant

Oct 2013 — Mar 2015

Implemented designs including RUGGEDCOM products and multivendor solutions; developed training curricula and materials; delivered training; advanced routing/switching services across RUGGEDCOM platforms (ROXI, ROXII, ROS).

Technical Skills

Vendors

Palo Alto Fortinet Cisco Check Point Juniper HP/Aruba

Routing & Switching

OSPF EIGRP BGP RIP Static Routing STP / RSTP / MSTP VLANs EtherChannel

Network Technologies

Ethernet IPv4 / IPv6 VoIP / SIP VRRP VRF IPSec

Cloud, Platforms & Automation

Azure AWS GCP Ansible VMware / vSphere Proxmox Citrix XenServer LXC / Docker

OS & Applications

Windows macOS Linux (Debian, Ubuntu) FireMon Tufin Visio MS Project

Certifications

Selected Projects

Signature Infrastructure Work

Palo Alto & Aruba

New Network Build & Migration

Migration from existing firewall and LAN to new vendors. Complete redesign and security hardening.

Sr. Network Architect / Technical Lead

IT Mission Global Services

Fortinet & ADVPN

Multi-Site Fortinet Deployment

Multi-site rollout including ADVPN solution, remote access, and FortiAuthenticator-based authentication.

Sr. Network Architect / Technical Lead

IT Mission Global Services

VPN & BGP/OSPF

Redundant WAN Design

Fully redundant network with certificate-based IPSec VPNs, dynamic routing, User-ID + SSL decryption, and DUO MFA.

Network Architect / Technical Lead

IT Mission Global Services

Cisco ASA → Fortinet

Firewall Migration

Architecture and migration from Cisco ASA to Fortinet 200F with new services implementation.

Sr. Network Consultant / Technical Lead

IT Mission Global Services

PA-7050 PoC

UAT / PoC: URL, Threat, WildFire, SSL

Proof of Concept testing for URL filtering, threat prevention, WildFire, and SSL decryption capabilities.

Sr. Network Consultant / Technical Lead

University of Toronto

Extreme Networks VSP

Network Segmentation Programme

Segmentation programme replacing existing L3 switches with Extreme Networks VSP appliances.

Sr. Network Consultant / Technical Lead

Capgemini Canada — Ontario Power Generation

Cisco Viptela SD-WAN

SD-WAN Proof of Concept

SD-WAN proof of concept design and configuration.

Sr. Network Consultant / Technical Lead

IT Mission Global Services

Meraki SD-WAN

SD-WAN Replacement Programme

Replacing existing security appliances with a Cisco Meraki SD-WAN solution.

Sr. Network Consultant / Technical Lead

IT Mission Global Services

Cisco ISR / ASA / Catalyst

New Network Build

New network build using Cisco ISR, ASA, and Catalyst setup and configuration.

Sr. Network Consultant / Technical Lead

IT Mission Global Services

Education

University of Zagreb

Physics & Computer Science (Masters)

pmf.unizg.hr/phy

Languages

Croatian Native
English Fluent
Slovenian Fluent
German Intermediate

Ready to fortify your
network infrastructure?

Consult on architectural design, security audits, or large-scale automation projects.