Rohit Raj Rajana

Network security engineer. Five years securing enterprise and industrial networks: firewall migrations, Zero Trust access, and OT/SCADA rollouts for Chevron and Bath & Body Works.

Now studying for an M.Sc. in Cybersecurity at Saarland University, with a focus on network security.

Connect on LinkedIn rohit7rajana@gmail.com
Rohit Raj Rajana at his graduation in Chicago, with the city skyline behind him

At a glance

Based in
Saarbrücken, Germany. Open to relocation across Germany.
Availability
Open to full-time roles, plus part-time and working-student roles. Currently on a Chancenkarte, converting to a student visa.
Languages
English (C1), German (A2, learning)
Driving licence
Class B, Germany
Education
M.Sc. Cybersecurity, Saarland University
Oct 2026 to present

Five years, one path

Systems Engineer · Tata Consultancy Services

Enterprise LAN/WAN operations

Hyderabad, India · Jun 2018 to Jul 2021

  • Switch port provisioning, VLANs, IP address management, routing and ACL changes.
  • Tier 1 and Tier 2 incidents resolved within ITIL-aligned SLAs.
  • Firmware upgrades and change windows with config backups and rollback plans.

3 yrsenterprise network operations

M.Sc. Management Information Systems

University of Illinois Chicago

Chicago, USA · 2021 to 2023

  • Designed a multi-account AWS security baseline: IAM, KMS, VPC peering, Transit Gateway, CloudTrail.
  • Remediated 25+ over-privileged IAM roles in that project.

3.71GPA out of 4.0

Network Security Engineer · Cloud88 Inc

Bath & Body Works, retail

Chicago, USA · Sep 2023 to Nov 2024

  • ZTNA with Aruba ClearPass and Palo Alto User-ID and App-ID.
  • 50+ Cisco ASA policies migrated to Palo Alto NGFW.
  • 20+ site-to-site IPsec VPN tunnels built.

40%fewer unauthorized access attempts

Network Security Engineer · Confiminds LLC

Chevron, oil and gas

Colorado, USA · Dec 2024 to Mar 2026

  • Fortinet FortiGate firewalls configured and deployed across oil-rig sites.
  • Cisco IE3400 rollout with zero unplanned downtime.
  • MTTR cut by 25%, with 99%+ SLA adherence.

200+field sites on Cisco IE3400 industrial switches

  • 200+ field sites upgraded with Cisco IE3400 industrial switches Chevron · OT/SCADA
  • 40% fewer unauthorized access attempts after a ZTNA rollout Bath & Body Works
  • 50+ Cisco ASA policies migrated to Palo Alto NGFW Bath & Body Works
  • 25% lower mean time to repair (MTTR) Chevron

Experience

  1. Network Security Engineer

    OT zone

    Confiminds LLC · Client: Chevron, oil and gas

    Colorado, USA · Dec 2024 to Mar 2026

    • Configured Fortinet FortiGate firewalls from scratch and deployed them across oil-rig sites, with port mapping and switch integration for secure remote connectivity.
    • Rolled out Cisco IE3400 industrial switches to 200+ field sites. The new switches replaced unmanaged hardware and standardized VLAN segmentation, management access, and monitoring across OT/IT boundaries. Rollouts finished with zero unplanned downtime.
    • Cut MTTR by 25% with structured L1 to L3 diagnostic workflows, and held 99%+ SLA adherence across rig sites.
    • Kept configuration baselines and change records in ServiceNow, audit-ready for 100+ network devices.
    • FortiGate
    • Cisco IE3400
    • VLAN segmentation
    • SCADA
    • ServiceNow

  2. Network Security Engineer

    Enterprise zone

    Cloud88 Inc · Client: Bath & Body Works, retail

    Chicago, USA · Sep 2023 to Nov 2024

    • Built the secure-access architecture on Palo Alto NGFW, Arista CloudVision, and Aruba ClearPass. Blocked threat events rose 30% and access-related tickets fell 25%.
    • Designed and deployed a ZTNA framework with ClearPass (TACACS+/RADIUS) and Palo Alto User-ID and App-ID. Unauthorized access attempts dropped 40%.
    • Migrated 50+ Cisco ASA policies to Palo Alto with Expedition and YAML automation, upgraded Panorama, and built 20+ site-to-site IPsec VPN tunnels.
    • Managed firmware and reimaging for 100+ routers and switches in Arista CVP, which cut config-drift incidents by 20%. Set up Azure Express Gateway as a disaster-recovery extension of the on-premises data center.
    • Palo Alto NGFW
    • Panorama
    • Aruba ClearPass
    • Arista CVP
    • ZTNA
    • Azure

  3. Systems Engineer

    Enterprise zone

    Tata Consultancy Services (TCS)

    Hyderabad, India · Jun 2018 to Jul 2021

    • Ran LAN/WAN operations for a large enterprise: switch port provisioning, VLANs, IP address management, and routing and ACL changes.
    • Resolved Tier 1 and Tier 2 network incidents (TCP/IP, DNS, DHCP, VLAN, VPN) within ITIL-aligned SLAs, and co-wrote runbooks that reduced repeat incidents.
    • Executed firmware upgrades and change windows across routers, switches, and firewalls, with versioned config backups and rollback plans.
    • LAN/WAN
    • Routing & switching
    • ACLs
    • ITIL

Education

  • M.Sc. Cybersecurity, Network Security specialization

    Saarland University (Saarland Informatics Campus / CISPA), Germany

    Oct 2026 to present

  • M.Sc. Management Information Systems

    University of Illinois Chicago, USA

    2021 to 2023 · GPA 3.71 / 4.0

  • B.Tech. Computer Science and Engineering

    GITAM University, Visakhapatnam, India

    2014 to 2018 · GPA 8.0 / 10

Both foreign degrees hold Anabin H+ status in Germany.

Skills and certifications

Networking
BGP, OSPF, EIGRP, MPLS, VLANs, STP, NAT, dot1q, IPsec and SSL VPN, TCP/IP, DNS, DHCP
Routing & switching
Cisco IOS, Cisco IE3400, Arista CloudVision (CVP)
Firewalls
Palo Alto NGFW, Panorama, Expedition, Fortinet FortiGate, Cisco ASA, GlobalProtect
Zero Trust & NAC
Aruba ClearPass, TACACS+, RADIUS, User-ID, App-ID, ZTNA
Cloud
AWS (VPC, IAM, EC2, Transit Gateway), Azure (ExpressRoute, network security groups)
Monitoring & SIEM
Splunk, SolarWinds Orion, Wireshark, ServiceNow
Industrial / OT
SCADA networks, Cisco IE-series, IEC 62443, ICS security fundamentals
Automation
Python, Docker, YAML
Frameworks
ITIL, change management, ISO 27001 awareness

Certifications

  • Cisco Certified Network Associate (CCNA)Cisco · valid through Dec 2026Earned
  • AWS Certified Cloud PractitionerAmazon Web ServicesEarned
  • Google Cybersecurity CertificateGoogleEarned
  • Practical Junior Penetration Tester (PJPT)TCM SecurityEarned
  • CompTIA Security+CompTIAIn progress
  • Azure Network Engineer Associate (AZ-700)MicrosoftIn progress
  • Fortinet NSEFortinetIn progress

Projects

Lab and academic work outside client engagements, built and run end to end.

  • AWS multi-account security baseline

    Academic · University of Illinois Chicago

    Designed a multi-account AWS baseline across IAM, KMS, VPC peering, Transit Gateway, and CloudTrail, with least privilege, encryption, segmentation, and audit logging. Remediated 25+ over-privileged IAM roles and enabled cross-account detection and incident response.

    • AWS
    • IAM
    • KMS
    • Transit Gateway
    • CloudTrail

  • Active Directory attack and defense

    Home lab

    Took over a lab domain controller through Kerberoasting, Pass-the-Hash, and NTLM relay, using Nmap, BloodHound, and PowerView. Wrote the hardening and remediation report.

    • Kerberoasting
    • NTLM relay
    • BloodHound
    • PowerView

  • OSINT investigations

    Independent research

    Mapped digital footprints, exposure surfaces, and threat indicators across social media, breached data, and metadata, using Maltego, theHarvester, and Shodan. Delivered structured threat intelligence reports.

    • Maltego
    • theHarvester
    • Shodan

  • Hardened Docker stack

    Self-hosted

    A production-hardened n8n environment with Portainer, Watchtower, CrowdSec, and a Docker socket proxy that limits the daemon to least-privilege access.

    • Docker
    • CrowdSec
    • Socket proxy
    • n8n

  • Homelab

    Self-hosted

    A ZimaBlade 7700 server running CasaOS on Debian, with Pi-hole, Tailscale, Portainer, Nextcloud, and Jellyfin.

    • Debian
    • Pi-hole
    • Tailscale
    • Nextcloud

Work with me

Role briefRohit Raj Rajana
Looking for
Network security, OT/IT security, and security engineering roles, with security architecture as the long-term direction.
Strongest in
Firewall design and migration (Palo Alto, FortiGate, Cisco ASA), Zero Trust access, and segmented industrial networks.
Environments
Enterprise campus and WAN, OT/SCADA field sites, hybrid cloud on AWS and Azure.
Next step
A call, an interview, or a technical screen.

Also available for tutoring and consulting.See details →

Contact

LinkedIn is the fastest way to reach me. Email works too.

Connect on LinkedIn rohit7rajana@gmail.com