Ing. Facundo Ferri

Senior System Engineer · Network & Security

Telecommunications Engineer (degree recognised in Germany)

Languages: Spanish (native) · English (fluent) · German (C1)

  • 10+ years of experience
  • EU citizenship
  • Munich
  • Willing to travel
  • Driving licence (class B)
Download PDF

Career Summary


Senior System Engineer for network and security with more than 10 years of experience, from mobile networks in Argentina to enterprise networks in Germany. As the main technical contact for about 15 customer companies, I design, migrate and harden firewall, LAN/WAN and Wi-Fi infrastructures, from the first requirement to handover, and I help customers contain and recover from cyber attacks.

Technical Expertise

  • Firewall & security: More than ten cross-vendor migrations, mostly as lead, focused on FortiGate and Sophos XGS: rule-set cleanup, VPN, NAT and WAF migration, plus test, cut-over and rollback planning.
  • Network infrastructure: LAN, VPN, routing, switching and segmentation with Aruba and Cisco, owned from requirements to handover.
  • Wi-Fi design: Predictive planning, site surveys and validation measurements with Ekahau, including concrete optimisation recommendations.
  • Incident response: Containing serious cyber attacks through segmentation and isolation of affected systems, followed by hardening of the network.
  • Automation & AI: Python, Bash and PowerShell scripts for data collection, configuration and troubleshooting; agentic AI as part of daily engineering work.

Skills

Core skill Expert Intermediate Basic knowledge

Professional experience


11/2020– present

Senior System Engineer

K&P Computer Service- und Vertriebs-GmbH

Munich, Germany

  • Main technical contact for about 15 customer companies and cross-vendor 2nd and 3rd-level support, focused on Fortinet (FortiGate, FortiAnalyzer, FortiClient EMS), Aruba (WLAN, switching, ClearPass, AirWave, NetEdit, Central) and Sophos XGS, plus Cisco and Meraki.
  • From planning to deployment: end-to-end ownership of network and security projects, covering customer consulting and requirements analysis, design, evaluation and selection of suitable solutions, implementation, testing, handover and further development of LAN, WAN, WLAN, VPN, routing, switching and segmentation.
  • More than ten cross-vendor firewall migrations, mostly as lead and focused on FortiGate and Sophos XGS: taking over and cleaning up rule sets, migrating VPN, NAT and WAF configurations, and planning tests, cut-over and rollback.
  • Support in handling serious cyber attacks through network segmentation and isolation of affected systems, followed by hardening of the network infrastructure.
  • Predictive WLAN planning, site surveys, validation measurements and troubleshooting with Ekahau; preparing and presenting the results with concrete optimisation recommendations.
  • Ongoing maintenance of the network and security infrastructure of the customers I look after: monitoring, firmware and security updates, configuration backups and regular security reviews.
  • Nationwide remote coordination and technical guidance of on-site technicians during incidents, including scheduling, customer alignment and steering the technical work.
  • PowerShell, Bash and Python scripts for data collection, configuration optimisation and troubleshooting.
  • Network documentation, installation guides, solution and implementation descriptions, and runbooks for recurring incidents.

Certifications

  • Sophos Firewall Technician (S80)
  • Sophos Firewall Architect (AT80)
  • Sophos Firewall Engineer (ET80)
  • Sophos MSP Connect – Sales Consultant (MSP01)
FortinetSophosArubaCisco/MerakiEkahauScriptingProject management
12/2017– 10/2020

Technical Service Engineer

Aeroaccess GmbH

Unterföhring (Munich), Germany

  • Analysed customer requirements for Wi-Fi infrastructure (coverage, performance and appearance) and developed tailored solutions.
  • Site surveys and performance reports, prepared and presented to the customer.
  • Coordination of technical teams on site.
  • Configuration of access points and switches for plug-and-play operation.
  • Configuration of the Mist cloud portal via API with Python.
  • Level 2 and 3 support for Aruba Networks (a Hewlett Packard Enterprise company) and Mist Systems (a Juniper Networks company).
  • Installation guides, documentation and use cases.
  • Responsible for the general IT maintenance of Aeroaccess GmbH: VLAN, VoIP, firewall, scripting, profiling, data servers.

Certifications

  • Mist Master (WiFi + Location Expert)
  • Aruba Certified Switching Professional (ACSP) V1
  • Aruba Certified Design Professional (ACDP) V1
  • Aruba Certified Switching Associate (ACSA)
  • Aruba Certified Mobility Professional (ACMP) V8b
  • Aruba Certified Mobility Associate (ACMA) V8
03/2016– 11/2017

Professional orientation in Germany

Munich

Language, certification and recognition

  • CCNA Security (210-260) · Comcave College, Munich
  • CCNA Routing & Switching (200-125) · Comcave College, Munich
  • Mentoring partnership · City of Munich · 09–11/2017
  • Recognition as engineer · Regierung von Schwaben · 05/2017
  • German course · BFZ GmbH, Munich · 03/2016 – 04/2017
CiscoGerman
11/2014– 10/2015

Radiofrequency Postprocessing Engineer

Celplan de Argentina S.A.

Córdoba, Argentina | Mobile networks

  • Coordinated and planned drive-test teams collecting radio-frequency data.
  • Quality of Service (QoS) reports from the mobile network, based on Nokia and Huawei hardware, for some of the largest mobile operators in Argentina.
  • Prepared and presented optimisation measures to clients.

Training

  • TEMS Discovery and Investigation (Ascom)
NokiaHuaweiCarrier networking
02/2008– 11/2015

Telecommunications Engineering

Instituto Universitario Aeronáutico

Córdoba, Argentina | Degree

  • Focus: network protocols, computer science, high-frequency radio.

Thesis · 10/2014 – 11/2015

  • Encrypted voice channel on a Raspberry Pi in C: a channel over GPIO ports in which a key was generated with Diffie-Hellman and then used for RC4 encryption. The voice signal was decimated, filtered, encoded, encrypted and transmitted.

Internship · 09–10/2014

  • Research, development and testing of an RC4 algorithm for voice in C on a Raspberry Pi.
Raspberry PiCSwitchingRoutingCiscoProtocol engineeringWirelessPhysicsMathematics