Inside the Mind of a Security Enhancer: NEC XON’s Approach to Modern Cybersecurity

By Andre Lombaard, Network and Security Architect at NEC XON

When it comes to enterprise cybersecurity there’s often more noise than clarity. More tools than alignment. More pressure than purpose. My mission is to cut through all of that — not just to secure environments, but to enhance them. I don’t see myself as a traditional security architect or consultant. I see myself as something different: a Security Enhancer.

What Is a Security Enhancer?
A Security Enhancer does more than just deploy solutions. We refine, optimise, and consolidate complex security ecosystems. We take fragmented environments and transform them into structured, scalable frameworks. It’s not about stacking more tools. It’s about strategic design, operational clarity, and the purposeful blending of automation and architecture. Sometimes, it means challenging convention. But always with control.

Controlled Disruption With Purpose
Security isn’t static — it’s a living, breathing framework that must evolve with the threat landscape. That’s why I believe in controlled disruption — challenging legacy designs and tool sprawl with strategic redesign. This might involve streamlining a patchwork of overlapping solutions, standardising configurations across teams, or layering automation to bring governance and consistency. The goal is never disruption for its own sake — it’s clarity, control, and measurable improvement.

Where Networking and Security Meet
A strong security posture rests on a solid network foundation. My experience spans Cisco Catalyst and Nexus, Juniper EX and SRX, and Fortinet’s Secure SD-WAN and NGFW platforms. I don’t just secure the edge — I optimise the entire data path, from core switching to cloud overlays.

Designing high-availability architectures, integrating SD-WAN with zero trust principles, and building virtual network overlays are where networking and security intersect — and that’s where I thrive. This is where resilient design and real-world performance come together.

Fortinet + red Hat Ansible: Automation for Secure Infrastructure
At NEC XON, I harness the combined power of Fortinet’s security ecosystem and Red Hat Ansible’s automation platform. Fortinet provides the intelligence and security fabric, while Ansible ensures consistency, speed, and repeatability across deployments.

I use Ansible to manage FortiGate firewalls, enforce security policies, automate change control, and maintain backups. But it’s more than efficiency — it’s about eliminating drift, ensuring compliance, and aligning execution with design intent. This automation-first mindset brings a DevSecOps philosophy into even the most traditional network environments — increasing visibility, reducing manual error, and scaling governance across the infrastructure.

A Standards-Based, Vendor-neutral Strategy
Security must be built on solid, globally recognised foundations. At NEC XON, we are certified in CIS (Centre for Internet Security) and apply CIS Benchmarks to infrastructure to drive hardening, consistency, and visibility across environments.
As a CISSP, I approach solutions with a vendor-neutral mindset. This means our recommendations aren’t driven by products — they’re driven by outcomes. We also hold Lead Auditor certification for ISO/IEC 27001:2022, allowing us to embed compliance, governance, and security assessments into every engagement. Whether it’s auditing, assessing maturity, or building a roadmap, our approach is grounded in structure, evidence, and alignment to best practices.

Client-Centric Security Built on Vision - Not Templates
No two clients are the same. That’s why effective security cannot be templated. Every engagement begins with listening — understanding the client’s business drivers, risk appetite, and governance goals. From there, we translate that vision into a security roadmap — whether it’s a full audit, infrastructure optimisation, or a long-term hardening plan.
 
Our goal is to ensure that security empowers innovation and operations, not obstructs them. It must be tailored, automated, and resilient — built around your context, not ours.

The Pillars of a Security Enhancer
Every project, architecture, and strategy I deliver is guided by a set of operating principles. These pillars shape not only the outcome, but the approach we take from day one.

• Pillar 1: Clarity Through Architecture: We bring order to fragmented environments by designing simplified, scalable security architectures. Complexity becomes clarity through strategic structure and intentional disruption.
• Pillar 2: Automation and Governance: Security must be embedded into the infrastructure lifecycle. By treating security as code, we automate policy enforcement and compliance, making governance a continuous and repeatable process. 
• Pillar 3: Innovation with Discipline: We embrace innovation — but not for its own sake. Every enhancement is grounded in measurable value. Disruption is always deliberate, driven by purpose and aligned to business needs.
• Pillar 4: Standards and Vision: Our solutions align to CIS Benchmarks, ISO/IEC 27001:2022, and other global best practices — but always contextualised to the client’s environment. We combine the discipline of standards with the agility of real-world insight.

NEC XON: enabling the Future of Secure Infrastructure
At NEC XON, we go beyond deploying security tools. We integrate, automate, and align them to your infrastructure and outcomes. As a forward-thinking systems integrator, we focus on real operational maturity — not theoretical security.
Empowered by strategic partnerships with Fortinet and Red Hat, NEC XON delivers secure, scalable network infrastructures from edge to cloud. We use FortiSOAR and Ansible to build end-to-end automation for policy control and compliance. And we align all of it with your business goals — not vendor mandates.
We don’t just sell security. We design it, implement it, and evolve it. Our mission is to give you the visibility, control, and confidence to operate in a world that’s always changing.

Security as a Mindset
We don’t just deliver network security — we enhance it. Through architectural clarity, infrastructure automation, governance, disciplined innovation, and standards alignment, we build environments that are ready for scale, compliance, and change. Security is not a product. It’s a mindset, a philosophy, and a practice. This is what we bring to every client engagement.