K. Zubair Sediqi

Solution Architect | Internet Researcher | Educator

Email: info@zubairsediqi.net

Linkedin: Khwaja Zubair Sediqi

Welcome! I'm Zubair, a Solution Architect at Continental based in Hanover, Germany.

My work centers on designing secure, scalable network architectures—from transforming global Internet breakout strategies and driving SASE and Zero Trust (ZTNA) initiatives to modernizing perimeter security and remote access.

Over the past decade, my path in tech has taken me through a wide range of rewarding experiences: architecting nationwide IP/MPLS backbones in telecom, advising national government bodies on digital transformation, and completing my Ph.D. at the Max Planck Institute for Informatics, where I published research on BGP, RPKI, and DNS at venues like ACM SIGCOMM.

At heart, I’ve always been a teacher, whether guiding undergraduate students as a university lecturer or helping cross-functional teams navigate complex technology shifts today. Beyond the tech world, I am a proud father, which keeps me grounded and constantly learning.

Thanks for stopping by! Feel free to explore my research, talks, and projects, or reach out via info@zubairsediqi.net if you'd like to connect or collaborate.

Updates

Hyper-specific Prefixes (HSP) in the Internet Get HSP statistics for IPv4 and IPv6 in public BGP feeds.

Presented our research on RPKI Validation Time at MANRS Routing Security Summit 2023

Our research paper got the fast-track (top3) paper award from TMA 2023 Conference

I gave a lightning talk at SEE 12 in Athens.(Video of Day2 time 5:40:00)

Watch my presentation on the RPKI delay from the RIPE 88 meeting.

Presented our research at AFNOG2

Experience

Network Solution Architect at Continental (Continental.de)

August 2025 - Present, DE

As a Solution Architect at Continental, I lead enterprise-scale network transformation initiatives designed to modernize and secure our global infrastructure. My focus centers on architecting secure Internet breakout strategies, driving SASE and Zero Trust Network Access (ZTNA) initiatives, and modernizing perimeter security and remote access frameworks. I lead cross-functional engineering teams in integrating core network technologies across SD-WAN, Entra ID, network automation, and monitoring pipelines using agile methodologies (Jira/Kanban).

I align complex infrastructure engineering with global business requirements. Beyond technical design, I collaborate closely with cross-functional stakeholders, guiding teams through large-scale technology shifts, establishing automated operational workflows, and ensuring high-availability and network security across our global operations.

Research Fellow at Mutually Agreed Norms for Routing Security (MANRS)

June 2022 - December 2022, USA (Remote, part-time)

As a Research Fellow, I set up testbeds to measure RPKI validation, performance, and TAL structures. I led and managed a large-scale research project in collaboration with experts from NTT (Tier-1 ISP), IIJ, and ISOC. I used over 700 RIPE Atlas anchors from 91 countries to perform delay measurements toward RPKI publication points.

I also implemented and automated RPKI testbeds on Linux systems to measure validation times, driving key insights into RPKI performance at scale.

IT advisor of the Minister at the Ministry of Higher Education (MOHE)

October 2017 - Mar 2020, AF

As IT Advisor to the Minister of Higher Education (MoHE), I led key national projects like the Higher Education Management Information Systems (HEMIS) and the Afghanistan Research and Education Network (AfgREN), enhancing Afghanistan’s educational technology infrastructure. I applied Agile software development practices to deliver scalable solutions on time, including establishing university ICT centers. I also contributed to the National Strategic Plan, aligning technology with educational goals.

I developed an IT strategy for MoHE and 36 public universities, leveraging AWS and cloud technologies to drive digital transformation and migrate key services to the cloud, focusing on scalability, virtualization, and secure infrastructure.

Senior Engineer IP & Data Network at ROSHAN Telecom (ROSHAN)

February 2014 - October 2017, AF

I played a key role in designing and implementing Afghanistan's first IP/MPLS backbone, migrating telecom traffic for 4 million customers to a scalable MPLS network. I also led the planning, design, and implementation of network projects at Roshan Telecom, focusing on network security through Firewall deployment, SSL, and IPsec VPN configuration. I helped architect a cloud-based DR and BDR infrastructure, leveraging virtualization and cloud-native solutions to migrate services, improve resilience, and create opportunities for offering cloud services to external clients.

Collaborating with vendors like Cisco, Huawei, F5, Ericsson, and ZTE, I ensured smooth integration and upgrades across the network. Starting as a Senior Engineer, I was later promoted to Deputy Manager, where I deepened my expertise in network architecture and project management.

IP Planning & Data Network at ROSHAN Telecom (ROSHAN)

January 2008 - February 2010, AF

I actively contributed to the data network service expansion of 2G and 3G projects, improving telecom services in remote areas of Afghanistan. I worked closely with upstream ISPs (AFTEL, PTCL, TIS) on BGP configuration, policy, and routing. In this role, I gained hands-on experience with switches, routers, firewalls (PIX, IPS/IDS, Cyberoam), load balancers, fiber optics, WLAN controllers, and satellite networks, utilizing technologies like VLAN, OSPF, VRRP, RIP, and GPRS.

Starting as an Intern, I was promoted to Engineer, further building my expertise in network operations and telecom infrastructure.

Ph.D. Candidate at Max Planck Institute for Informatics (MPI-Inf)

November 2020 - July 2025, DE

During my Ph.D. at the Max Planck Institute for Informatics, I conducted advanced research on BGP and RPKI validation. I developed pipelines (Python, Bash) to process hundreds of terabytes of BGP data and optimize the routing ecosystem. I was honored to work with top researchers and engineers, lead multi-timezone projects, and deliver novel algorithms for detecting Multi-Origin AS prefixes at Internet scale.

I also automated the collection, analysis, and visualization of HSPs at the Internet scale and measured the performance of complex RPKI validators, suggesting optimizations. My work has been recognized through publications and presentations at top conferences. Additionally, I have practical experience with AWS cloud solutions.

My research has been published at ACM SIGCOMM and earned recognition at the Network Traffic Measurement and Analysis Conference 2023. In addition to my research, I supported teaching activities and actively engaged in conferences, scientific events, and RIPE meetings. I also contributed to and learned from the broader network of research and operation communities.