Security Access

Network Security Engineer

Rafli Eka Saputra

Securing networks — from the edge to the cloud.

View experienceGet in touch
Scroll
Portrait of Rafli Eka Saputra

About

I am a Network Security Engineer specializing in Palo Alto Networks technologies, with hands-on experience in NGFW deployment, Panorama, Prisma SASE, and Cortex XDR. Certified PCNSE and NGFWE, with a proven track record delivering technical presentations, POCs, and solution architectures for enterprise clients. Passionate about continuous learning and staying ahead of the evolving security landscape.

By the numbers

Measured in sites, certs and platforms.

  • 15Professional certifications
  • 481Sites covered by lab design (DC, POLDA, POLRES)
  • 3Palo Alto platforms (Strata · Prisma · Cortex)
  • 5Vendor ecosystems (Palo Alto, Cisco, Fortinet, MikroTik, Extreme)

Palo Alto Platform

Strata. Prisma. Cortex.

From the firewall, to the cloud edge, to the SOC.

Strata

Next-Generation Firewall

Every session is classified by zone, application, user and content before a verdict is reached.

Hands-on

  • NGFW Configuration & Policy Management (PAN-OS, Panorama, Strata Cloud Manager)
  • App-ID, User-ID, Content-ID, Device-ID & SSL Decryption
  • Security Services: IPS, Anti-Virus, WildFire, DNS Security, Advanced URL Filtering, DLP

Single-pass packet flow

  1. Ingress
  2. Zone & Policy
  3. App-ID
  4. User-ID
  5. SSL Decryption
  6. Content-IDIPSAVWildFireURLDNSBLOCK threat
  7. Egress

ALLOW

Prisma SASE

Secure Access Service Edge

Users, branches and HQ connect through a cloud-delivered security edge — every tunnel encrypted, every access verified.

Hands-on

  • Prisma Access, GlobalProtect, ZTNA & SD-WAN Configuration
  • SaaS Security, AI Access Security & Prisma Browser
Secure Access Service EdgePrisma AccessRemote userBranchHQGlobalProtectSD-WANZTNA

Cortex

XDR · XSOAR · XSIAM

Telemetry becomes alerts, alerts become an incident, and a playbook automates the response.

Hands-on

  • Cortex XDR Deployment, Incident Investigation & Alert Triage
  • Cortex XSOAR Playbook & XSIAM Analytics
SOC feed
  • highXDRSuspicious PowerShell execution
  • mediumNGFWConnection to newly registered domain
  • highWildFireMalicious file verdict
  • criticalXDRCredential dumping attempt
  • lowDNSDNS tunneling pattern detected
Incident5 alerts grouped into one incident

XSOAR playbook

1Enrich IOC2Isolate endpoint3Block on NGFW4Notify SOC5Close case

Skills

The toolkit.

Network security across vendors — Palo Alto at the core.

  • Palo Alto Networks

    • NGFW Configuration & Policy Management (PAN-OS, Panorama, Strata Cloud Manager)
    • Security Services: IPS, Anti-Virus, WildFire, DNS Security, Advanced URL Filtering, DLP
    • App-ID, User-ID, Content-ID, Device-ID & SSL Decryption
    • VM-Series, CN-Series & Cloud NGFW Deployment
    • Prisma Access, GlobalProtect, ZTNA & SD-WAN Configuration
    • SaaS Security, AI Access Security & Prisma Browser
    • Cortex XDR Deployment, Incident Investigation & Alert Triage
    • Cortex XSOAR Playbook & XSIAM Analytics
    • High Availability, Routing (OSPF, BGP) & NAT Configuration
    • PAN-OS
    • Panorama
    • Strata Cloud Manager
    • App-ID
    • User-ID
    • Content-ID
    • Device-ID
    • SSL Decryption
    • WildFire
    • DNS Security
    • Advanced URL Filtering
    • DLP
    • Prisma Access
    • GlobalProtect
    • ZTNA
    • SD-WAN
    • SaaS Security
    • AI Access Security
    • Prisma Browser

  • Cisco

    • Basic Configuration
    • Switching Technologies
    • Routing (Static & Dynamic)
    • Redistribution, Wireless & Automation

  • Fortinet

    • Basic Configuration
    • Firewall Policy
    • NAT
    • Web Filtering

  • Routing & High Availability

    • High Availability, Routing (OSPF, BGP) & NAT Configuration
    • OSPF
    • BGP
    • NAT
    • HA

  • Cloud & Container NGFW

    • VM-Series, CN-Series & Cloud NGFW Deployment
    • VM-Series
    • CN-Series
    • Cloud NGFW

  • Security Operations

    • Cortex XDR Deployment, Incident Investigation & Alert Triage
    • Cortex XSOAR Playbook & XSIAM Analytics
    • Cortex XDR
    • XSOAR
    • XSIAM

Experience

Where I've worked.

Pre-sales, post-sales, managed services and teaching.

  1. westcon-solutions pre-sales-engineer

    Pre Sales Engineer

    Westcon Solutions

    Full-time

    • Acted as primary technical advisor for enterprise customers across network security, cloud security, and security operations domains
    • Conducted product presentations, technical demonstrations, and Proof of Concept (POC) for Palo Alto Networks portfolio including NGFW, Prisma SASE, Prisma Access, Cortex XDR, and XSIAM
    • Developed solution architecture designs (HLD/LLD), Bill of Materials (BOM), and technical proposals aligned with customer requirements
    • Performed security assessments and firewall migration planning for enterprise clients
    • Engaged in competitive positioning against vendors including Fortinet, Cisco, Check Point, and Zscaler
    • Delivered knowledge sharing sessions and product updates to internal teams and channel partners, covering latest Palo Alto Networks solutions, security trends, and competitive landscape

  2. westcon-solutions post-sales-engineer

    Post Sales Engineer

    Westcon Solutions

    Full-time

    • Delivered end-to-end implementation of Palo Alto Networks NGFW, Panorama, and WildFire, from initial configuration and security policy design through go-live
    • Deployed and configured Extreme Networks campus infrastructure, including switches, access points, and wireless LAN controllers (WLC)
    • Implemented Extreme Networks Access Control (NAC) for policy-based authentication, role-based access, and endpoint visibility
    • Set up and operated Extreme Networks network management (NMS) and Analytics platforms for centralized monitoring, application visibility, and faster troubleshooting
    • Provided post-deployment technical support, covering troubleshooting, root-cause analysis, firmware and PAN-OS upgrades, and escalation to vendor TAC
    • Researched and validated new Extreme Networks and Palo Alto Networks features in the lab ahead of customer rollouts
    • Designed the lab topology used by the engineering team to roll out 481 sites (DC, POLDA, and POLRES)
    • Produced as-built documentation and implementation reports, and led knowledge transfer and handover sessions for customer teams

  3. ellipse-projects freelance-managed-services

    Freelance Managed Services

    Ellipse Projects

    Freelance

    • Deployed and configured Cisco AnyConnect VPN to give employees secure remote access to company resources
    • Provisioned and configured employee laptops, ready for day-to-day business operations
    • Joined employee client devices to the corporate domain for centralized user and device management
    • Performed routine network maintenance to keep office connectivity stable and reliable

  4. id-networkers academy

    Academy

    ID-Networkers (IDN)

    Academy

    • Delivered instructor-led training on MTCNA, CCNA, and MTCRE curricula
    • Completed IDN's full training program across Fortinet, Cisco, Juniper, Ubiquiti, and MikroTik technologies

  5. pt-berdikari-prima-mandiri network-engineer-internship

    Network Engineer Internship

    PT Berdikari Prima Mandiri

    Internship

    • Installed and provisioned internet connectivity at client sites
    • Monitored client networks to detect and resolve issues before they impacted users
    • Configured routing and switching to meet client network requirements
    • Carried out scheduled maintenance to keep client networks stable and reliable

Certifications

Certified across vendors.

Palo Alto Networks, MikroTik, Cisco, Extreme and more.

  • PCNSEFeatured

    Palo Alto Networks Certified Network Security Engineer

    Palo Alto

  • NGFWEFeatured

    Palo Alto Networks Certified Next-Generation Firewall Engineer

    Palo Alto

  • SSE-EngineerFeatured

    Palo Alto Networks Certified Security Service Edge Engineer

    Palo Alto

  • PCNSA

    Palo Alto Networks Certified Network Security Administrator

    Palo Alto

  • MTCINE

    MikroTik Certified Inter-Networking Engineer

    MikroTik

  • MTCIPv6E

    MikroTik Certified IPv6 Engineer

    MikroTik

  • MTCTCE

    MikroTik Certified Traffic Control Engineer

    MikroTik

  • MTCRE

    MikroTik Certified Routing Engineer

    MikroTik

  • MTCNA

    MikroTik Certified Network Associate

    MikroTik

  • CCNA

    Cisco Certified Network Associate

    Cisco

  • Extreme

    Extreme Networks (CloudIQ, Fabric Connect, Switching, Site Engine, Access Control)

    Extreme

  • Google IT

    IT Support Google

    Others

  • Network+

    CompTIA Network+

    Others

  • Linux

    Linux System Administration

    Others

  • BNSP P1

    BNSP (P1) — Kompeten

    Others

Achievements & Education

Recognition & foundations.

Competitions

  • 3rd Place

    Vocational Competition for Vocational Students, Bekasi City

  • 2nd Place

    Vocational Competition for Vocational School Students, Jabodetabek

Education

  • 2023–Present

    Universitas Terbuka

    Information Systems

  • 2020–2023

    Vocational High School

    Computer and Network Engineering

Contact

Let's secure your network.

Open to roles, freelance projects and partner collaboration.

rafli@portfolio — zsh

rafli@portfolio:~$ whoami

Network Security Engineer — Palo Alto Networks

rafli@portfolio:~$ contact --list

rafli@portfolio:~$

Send an email