About
This section offers an overview of my professional focus, technical depth, and delivery approach in Operational Network, Security and OT cybersecurity.
I approach OT cybersecurity as an engineering discipline—not a checklist—balancing risk, operational continuity, and regulatory assurance to deliver systems that are secure, resilient, and buildable.
OT Cybersecurity Engineering | Network & Security Operations | Governance & Assurance
Network and Security Consultant focusing on OT Cybersecurity Engineering with hands-on delivery experience across regulated critical infrastructure environments. I specialise in embedding cybersecurity governance, engineering assurance, and operational security into complex project lifecycles across transport, rail, and data centre programs.
- Goals: Focused on advancing OT cybersecurity engineering, governance leadership, and secure infrastructure delivery across critical environments.
- Skills: Extensive experience in Operational and Network security solutions (NGFW, Antivirus, SIEM, and SOAR), strong familiarity with NIST CSF and Special Publications, ISO 27001 IEC 62443 & ACSC ISM & E8 and MITRE ATT&CK TTPs
- Effort: Leading risk assessments for ME&I packages and developed various technical documents, recognised with the "Engineering the Very Best" award at UGL
- Phone: +61 447 777 673
- Email: contact@navidniknezhad.me
- Location: Sydney, NSW
- Qualifications: Bachelor's in ICT
- Certifications: ISC2 CC, CCNA, NSE4, CCST Cybersecurity
I approach OT cybersecurity as an engineering discipline—not a checklist—balancing risk, operational continuity, and regulatory assurance to deliver systems that are secure, resilient, and buildable.
Facts
I am a highly skilled Cybersecurity professional with a Bachelor's degree in ICT with a major in Cybersecurity and Networking from the University of Western Sydney.
Engagements & Stakeholders Supported, a selection of testimonials and case studies showcasing the positive impact of my work
Projects, a portfolio of diverse and successful projects
Hours of research in cyber threat intelligence, Exposure Management, Risk Assessments, and Offensive Security
Industry Recognition & Engineering Awards
Framework Alignment
Skills
In the critical field of OT Cybersecurity Engineering, I have developed a robust skill set focused on ensuring the security and compliance of industrial control systems. My expertise includes developing and implementing cybersecurity management programs that incorporate security by design, Zero Trust, and Defence in Depth (DiD) strategies. These strategies align with best practices to establish a comprehensive cybersecurity management plan that complies with industry frameworks and regulatory standards. Through close collaboration and mentorship from leading industry CISOs, I have gained invaluable insights into navigating the ever-evolving cyber threat landscape. This includes creating comprehensive management plans and effectively mitigating cyber risks. I have experience designing and developing cybersecurity countermeasures, verification and validation strategies, and contributing to complex network architecture designs. This diverse skill set makes me highly desirable in the field. I am continuously updating my skills by deploying security solutions and attending industry events. My abilities extend beyond technical aspects, including soft skills such as project management, leadership, and communication. This section includes a comprehensive list of the skills I have developed and honed throughout my career.
Consulting Capability
Security & Networking Operations and OT Cybersecurity Engineering delivery across infrastructure, critical systems, and regulated environments.
OT Cybersecurity Engineering
- Security-by-Design integration
- IEC 62443 aligned controls
- Verification & Validation (V&V)
- Threat modelling & risk workshops
Network & Security Operations
- Firewall engineering & segmentation
- Exposure management
- Security monitoring & response
- Data centre infrastructure delivery
Governance & Compliance
- NIST CSF & SP 800 alignment
- ISO 27001 & ISO 31000
- Essential Eight & ISM
- Compliance traceability & assurance
Cybersecurity Delivery Lifecycle
Selected Engagement Highlights
Representative of cybersecurity engineering, governance, and network security delivery across infrastructure, OT environments, and enterprise operations.
OT Cybersecurity Governance & Engineering – Major Infrastructure Program
Transport & Critical Infrastructure Environment
- Delivered cybersecurity risk assessments, security documentation, and compliance alignment.
- Developed RVTM artefacts linking requirements, risks, and controls.
- Facilitated engineering workshops integrating cybersecurity into the system design lifecycle.
- Aligned implementation with NIST CSF, IEC 62443, and project governance frameworks.
Network & Security Operations Transformation – Contractor Delivery
Enterprise & Data Centre Infrastructure
- Executed firewall upgrades, segmentation strategies, and VPN deployments.
- Integrated FortiAnalyzer and centralised logging for monitoring and audit readiness.
- Delivered vulnerability remediation and exposure management initiatives.
- Performed infrastructure cutovers with minimal operational disruption.
Cybersecurity Assurance & Verification – OT Deployment Lifecycle
Pre-commissioning & Operational Hypercare
- Supported verification & validation activities across commissioning phases.
- Produced traceable evidence packs aligned to audit and regulatory expectations.
- Delivered penetration test remediation and security monitoring improvements.
- Provided hypercare support, ensuring secure transition into BAU operations.
Security Strategy & Exposure Management Advisory
Consulting & Independent Security Research
- Advised organisations on exposure management and cyber risk reduction strategies.
- Developed threat-informed security awareness and technical content.
- Mapped controls against MITRE ATT&CK and Essential Eight maturity uplift.
- Supported organisational alignment to modern cyber governance practices.
Resume
My resume comprehensively summarises my education, experience, and accomplishments in OT / ICT Cybersecurity and Networking. It offers a clear overview of my qualifications and skills, including the projects and responsibilities I have taken on throughout my career.
Executive Profile
Navid Niknezhad
Security & Networking Operations and OT Cybersecurity Engineering Consultant delivering governance, engineering assurance, and secure infrastructure outcomes across regulated environments. Experienced in contractor-led cybersecurity delivery spanning risk management, network security engineering, compliance alignment, and operational security lifecycle support.
Professional Experience
ICT / OT Network & Security Engineer (Consultant) – IL/DA Services
Sep 2024 – Present
Contractor, Sydney, NSW
Cybersecurity Engineering & Operations
- Led vulnerability management and remediation activities, coordinating identification, prioritisation, and closure of security findings across network, server, and application layers.
- Performed security posture reviews and threat exposure analysis, aligning implemented controls with Essential Eight, NIST CSF, and internal security baselines.
- Executed penetration test remediation, validating fixes through configuration reviews, retesting, and control verification prior to production sign-off.
- Delivered operational security response across network and firewall telemetry, investigating anomalous traffic patterns and coordinating remediation under SLA-driven environments.
- Integrated security and network devices with FortiAnalyzer and centralised logging platforms to enhance visibility, alerting, and audit readiness.
- Supported security audits and technical reviews by providing evidence packs, configuration extracts, diagrams, and remediation plans.
Data Centre & Infrastructure Engineering
- Delivered end-to-end data centre upgrade activities, covering concept design, documentation, testing, implementation, cutover, and verification & validation (V&V).
- Upgraded and replaced networking and infrastructure equipment, ensuring platform compatibility and minimal service disruption.
- Planned and executed infrastructure cutovers with minimal downtime, producing change management documentation, impact analysis, and rollback plans.
- Performed rack remediation and cable management, improving physical layout, labelling, airflow, and maintainability.
- Decommissioned legacy infrastructure, ensuring secure configuration sanitisation and accurate update of asset registers and documentation.
- Completed post-implementation validation and operational handover prior to transition into BAU support.
Network Engineering & Site Delivery
- Conducted on-site network assessments and deployments, delivering LAN, WAN, and WLAN solutions from initial site visit through to client handover.
- Performed manual firewall upgrades and downgrades to resolve firmware compatibility issues, validating configurations and restoring secure service operation.
- Delivered network upgrades to fibre connectivity, coordinating ISP cutovers, firewall reconfiguration, and end-to-end testing.
- Designed and implemented network segmentation, including VLANs, inter-VLAN routing, and security zoning.
- Configured site-to-site and dial-up VPNs, firewall policies for access to internal resources, and integration with application servers, domain controllers, and jump servers.
- Integrated firewalls with SNMP monitoring and FortiAnalyzer for proactive monitoring and fault detection.
- Deployed and configured wireless networks, including FortiAP provisioning, SSIDs, MAC address mapping, and VLAN assignment.
- Delivered end-user and infrastructure services, including printer setup, IP phones / VoIP, and network-connected peripherals.
- Implemented identity and access integrations, configuring administrator profiles, LDAP authentication, and role-based access controls.
- Completed client onboarding and technical handover, delivering as-built documentation, network diagrams, and operational guidance.
OT / ICT Engineer - Cybersecurity at UGL
Jul 2023 - Sep 2024
Full-time, Sydney
Summary: Delivered cybersecurity and network security engineering across regulated, large-scale infrastructure environments, with a focus on securing systems prior to commissioning and during live operations. My work spans security assessments, vulnerability remediation, penetration testing support, security monitoring, and operational hypercare, aligned with recognised industry frameworks and standards. I have contributed to the development of cybersecurity management artefacts, including security strategies, threat and risk analyses, and verification and validation documentation, supporting assurance, audit readiness, and safe system deployment. The engagements showcased here reflect practical, engineering-led security delivery in environments where availability, safety, and compliance are critical.
- Security Assessments & Vulnerability Remediation: Conducted High-level and detailed cybersecurity risk assessments and remediation activities to identify, prioritise, and address vulnerabilities prior to system deployment and during live operations.
- Cybersecurity Management & Assurance: Contributed to cybersecurity strategies and management artefacts, including security management plans, threat landscape, risk register, risk treatment plans, and verification and validation reports.
- Verification, Validation & Audit Support: Supported verification and validation activities and audits by producing traceable evidence aligned with industry standards and regulatory expectations, including NIST CSF, NIST SP 800-82r3, and IEC 62443-3-3.
- Penetration Testing & Security Monitoring: Delivered internal penetration testing, network activity monitoring, and security alarm analysis to improve detection and response capability.
- Operational Hypercare & Post-Deployment Support: Provided operational hypercare during critical phases to ensure system stability, availability, and secure transition into BAU operations.
Cybersecurity Analyst | Content Creator @DecentralizedDefender
Feb 2021 - Present
Self-Employed, Sydney
- Advising Clients: Advised 10 clients on best practices for protecting against cyber threats and social engineering attacks, resulting in a 50% reduction in security incidents
- Content Creation: Developed & delivered training, built community, and created content for cybersecurity education, resulting in 75% employee awareness & 20% community growth
- Research: Conducted research on the latest cybersecurity trends and threats and incorporated the findings into content and community discussions
- Analytics: Analysed community metrics to gauge engagement, reach, and impact and used this data to inform future content and community-building strategies. Successfully increased community engagement by 25% in the last 6 months
- Industry Engagement: Participated in industry events, presenting on the latest trends and developments in the security industry and building relationships with other security professionals
Leadership Experience
Developer Team Lead at WSU
Jun 2021- Nov 2021
Professional Experience, Sydney
- Utilising Node.js, Express.js, HTML/CSS, and GitOps to develop and implement a system that streamlined the deployment process, resulting in a reduction of downtime by 60% and enabling self-updating capabilities
- Collaborating with a team to analyse and recommend the best solution for the project using statistical measurements and VAR methodologies, resulting in the successful implementation of Node JS-based solution
- Collaborating with the client and team members to understand and meet project requirements, resulting in a 95% satisfaction rate from the client
- Utilising the Apache web server to extract map contents from Knightlab's map editor and deploy its contents onto the NUC, resulting in a seamless integration and updating process
- Implementing Intel NUC (Windows 10) as the device that runs StoryMap, resulting in a stable and reliable system
- Investigating and fixing any outstanding bugs in the system, resulting in a 99% uptime rate
Consultant Team Lead at Squadnet
Nov 2020- Dec 2020
Internship, Sydney
- Team Leadership: Led a team of 5 consultants, assigned tasks, and organised weekly meetings to drive progress and successfully completed the project on time
- Strategic decision-making: Developed effective business strategies and provided recommendations for the successful launch of the app, resulting in a 20% increase in revenue in the first quarter after the launch
- Competitive Analysis: Conducted competitive analysis to identify opportunities and threats in the market, informing business planning and decision-making, resulting in a 15% increase in market share in 6 months
ICT System Administrator at RCOA
May 2021- July 2021
Volunteer, Sydney
- Contributed to the overall success of RCOA by volunteering an average of 10 hours per week for 12 weeks
- Provided IT technical support to RCOA staff, improving computer performance by 25% and reducing downtime by 40%. Resolved 15 technical issues, improving system efficiency by 20%
- Evaluation: Conducted evaluations of RCOA programs and initiatives, gathering feedback from 100 participants and providing recommendations for improvement
- Technical Support: Provided IT technical support to RCOA staff and assisted in troubleshooting and resolving 15 technical issues, improving system efficiency by 20%, improving computer performance by 25% and reducing downtime by 40%
Education
Bachelor of Information & Communications Technology
2019 - 2022
University Of Western Sydney
Activities and societies: Sport, Graduate Recruitment Accelerator
Major focus: Major focus: Cybersecurity, Networking, Systems Design, Project Delivery
- Maintained GPA 4.9 in Cybersecurity major and Networking sub-major
- Cybersecurity: Implemented cybersecurity measures to protect against data breaches and other cyber threats on five occasions, including setting up and managing user accounts and permissions and enforcing strong password policies
- Project Management: Led a team of 4 to develop a web application for a small business, including planning, scheduling, and managing the project
- Ethical Hacking: Became proficient in ethical hacking, including reconnaissance, vulnerability scanning, exploitation, post-exploitation, and report writing
- Information Security: Developed expertise in human behaviour, cybercrime, and cybersecurity, including social engineering and organisational security infrastructure
Foundation Standard Program& Science/Engineering/Health Engineering
Feb, 2018 - Nov, 2018
Taylor's College of University Of Sydney, Sydney
- Maintained an overall average 7.7 GPA in Mathematics for Science, Australian Studies, Biology, Physics, and Information Technology courses
- Software Development: Received high distinction and distinction in Software for Business and Software for Programmers, demonstrating a strong understanding of complex concepts and principles
- Advanced Programming: Developed advanced programming skills in Information Technology, completing multiple projects and earning recognition from professors
Portfolio
This portfolio presents selected engineering and consulting engagements delivered across enterprise, MSP, and critical infrastructure environments. It highlights hands-on work performed as both a full-time engineer and contract consultant, spanning network engineering, data centre delivery, cybersecurity, and OT security. The portfolio includes examples of security solution design, network and infrastructure upgrades, vulnerability remediation, incident response, OT security implementation, and technical advisory work. Each entry focuses on practical outcomes, engineering decisions, and measurable impact rather than theory or academic exercises. This section is intended to provide visibility into how I approach complex technical problems, operate in live production environments, and deliver secure, resilient systems aligned with business and regulatory requirements.
- All
- Network & Cyber Security
- OT / ICS Security
- Programming
- Consulting
- Publication
- Other
Services
I am able to offer a range of professional services to businesses and organisations. This includes deriving regulatory compliance and developing security solutions to protect against cyber threats and vulnerabilities, managing projects and providing maintenance support, my services are designed to help businesses improve their security and performance. Below, you will find a list of specific roles and services that I am able to provide.
Cybersecurity Solutions
Develop comprehensive cybersecurity strategies to protect against threats and vulnerabilities. Implement security protocols, including firewalls, intrusion detection systems, and encryption. Conduct vulnerability assessments and penetration testing to identify security weaknesses.
Regulatory Compliance Consulting
Assess and develop compliance frameworks for industry regulations (e.g., ISA99, NIST, ACSC E8, ISO 27001). Conduct audits and risk assessments to identify areas of non-compliance. Create and implement policies and procedures to ensure ongoing compliance.
Penetration Testing
Use penetration testing and other techniques to identify vulnerabilities in an organisation's systems and networks, and provide recommendations for remediation.
Custom Security Solutions
Design tailored security solutions that align with the unique needs of the organisation. Collaborate with stakeholders to develop security initiatives that support business objectives. Ensure that solutions are scalable and adaptable to future business changes.
Security Awareness Training
Develop and deliver training programs to educate employees about cybersecurity best practices. Create customised training materials based on the organisation’s specific security needs. Implement phishing simulations and other exercises to reinforce training effectiveness.
Project Management
Plan, execute and finalise projects according to strict deadlines and within budget, and lead cross-functional teams to achieve project goals. Facilitate stakeholder communication and reporting throughout the project lifecycle.
Testimonials
You can find testimonials from past clients who have shared their positive experiences working with me and the results I have helped them achieve below. These testimonials reflect my dedication and commitment to excellence in the field of Information and Communications Technology. Reading them will help you understand why my clients trust and rely on me for my expertise in Information Communications an Operational Technologies.
Navid is a highly skilled and knowledgeable professional in the field of cybersecurity and networking. He has an excellent understanding of the latest technologies and is able to implement them effectively to protect against cyber threats. His attention to detail and problem-solving abilities are second to none.
Chris Barton
Ceo & Founder
I had the pleasure of working with Navid on a project and was impressed by his technical expertise and ability to lead a team. He is a great communicator and was able to clearly explain complex concepts to non-technical team members. He is a valuable asset to any organization.
Joshua Chia
Network Engineer
I have had the opportunity to work with Navid on multiple projects and have always been impressed by his technical capabilities and dedication to the job. He is a great team player and always willing to lend a hand. He is always willing to take on new challenges and is always looking for ways to improve.
Hassan Rajab
Consultant
Navid is a results-driven professional who is dedicated to delivering the best outcomes for his clients. He is a quick learner and is always up to date with the latest industry trends. He is a pleasure to work with and always goes the extra mile to ensure success.
Andrew Leahy
Research Data Manager & Research Systems Engineer
Navid is a highly professional and dedicated individual with a wealth of knowledge in the field of cybersecurity. He is a skilled problem-solver and is always willing to go the extra mile to ensure the success of a project. I would highly recommend him to any organization looking for a top-notch cybersecurity professional.
Shaun Ghahyazi
Technical Expert
Contact
If you're interested in learning more about how I can help your organisation with my professional services, please don't hesitate to reach out. I would be happy to discuss your specific needs and how my skills and expertise can help you achieve your goals. You can contact me via email or phone, or connect with me on LinkedIn. I look forward to hearing from you and discussing how I can contribute to your organisation's success.
Location:
Sydney, Australia
Email:
contact@navidniknezhad.me
Call:
+61 447 777 673