Network/Security Consultant, Acuative PS team
Acuative
Total years of experience :16 years, 6 Months
Configuring and implementing various network security products including Cisco ASA, Cisco IPS, VPNs, ZBFW, ACS, and Cisco ISE.
Implementing on-demand VPN configurations including site-to-site ASA VPNs, site-to-site IOS VPNs, remote access SSL VPNs, remote access IPSec VPNs using Cisco VPN client and Any-Connect, DMVPN, and GETVPN.
Implementing and designing IPS solutions (Cisco FireSight and source fire module).
Implementing new ISE 1.3/1.4 setups that include AAA features, profiling, posturing, NAC, 802.1X, MAB and fallback options to Web authentication.
ISE implementation and design for endpoint security both wired and wireless users.
Implementation of Cisco Identity service engine, configuring policies & Guest network. Installation of NAC agent throughout all end users which restricts them to use Antivirus (Symantec endpoint) and should be up to date.
AD authentication configuration in Cisco firewall through LDAP and SSO.
Integrating AAA into the networks using ACS 5. Applying authentication via AD and per-command authorization features
In-depth knowledge and proven expert proficiency in designing, engineering, configuring, and maintaining of large enterprise firewalls such Cisco ASA 5585, and 5555 series.
Hands-on experience with firewalls and a comprehensive knowledge of IP networking and network security including Intrusion Detection, DMZ, encryption, IPSec, PKI, VPNs in Cisco ASA/Cisco IOS.
Design and implement network solutions including Security, Server Load Balancing and Routing / Switching.
Detailed analyses of the existing networks to propose and implement the optimal design.
Developing best practice for R&S and Security solution design, implementation and support.
Developing overall network and Security solutions including high-level design, low-level design, Network Implementation Plan, Network Ready for Use, and Network Migration Plan.
Providing advanced Solutions Architecture, Technical Sales / Pre-sales, Solutions Engineering support for Routing, and Switching, Network Security.
Implementation of ISO 27001 for MOH.
GETVPN migration for more than 3000 branch.
Troubleshooting services End to End over Cisco IP/MPLS core network (CRS-1, CRS-3, ASR9k, ASR1k, 6500, 3500, 7600, and 7200... etc) with IOS-XR, IOS-XE, and regular IOS.
Implementing and designing IP/MPLS network solutions.
Expert level experience in solving MPLS, BGP and Qos troubles.
In-depth knowledge of and experience with major internet routing protocols; specifically BGP, OSPF, MPLS, RSVP and ISIS
In-depth knowledge and proven expert proficiency in designing, engineering, configuring, and maintaining of large enterprise core networks.
ThruPoint March 2012 to Date
Network Consultant, Jeddah, KAUST
❖ Analyze and respond to the security threats from Firewalls, Bluecoat Web, Antivirus (Bluecoat), and Bluecoat Reporter.
❖ Tracking, monitoring, reporting and finalizing Security events and incidents.
❖ Close or escalates network and security events as necessary.
❖ Update all relevant documentation such as shift logs and tickets.
❖ Document and maintain a knowledge base of alarms (false positives and false negatives, blacklists, whitelists) that IDS and IPS encounter.
❖ Ensure security events and incidents are detected and escalated in a timely manner.
❖ Solves complex, cross-functional issues that cross many technologies in network, security, routing, switching, and caching and/or content delivery networks.
❖ Applies good analytic process to help bring any issue to resolution.
❖ Implementing network sniffer tools (Wireshark) to perform packet analysis.
❖ Basic knowledge in security assessment tools (NMAP, Nessus, backtrack, and KALI Linux).
❖ Knowledge of security standards (ISO 27000 series, NIST)
❖ Responsible for F5 load balancer Appliances.
❖ Responsible for Solar Winds Orion Administration.
❖ Responsible for Cisco Works LMS management.
Silicon21 NITS, Egypt May 2010 to March 2012
Senior Security Network Engineer (IS Team Leader)
❖ IS Team leader and I'm responsible for all Active installation, support and following up with my team their progress and troubleshoot their issues remotely or by visiting customer site.
❖ Supervised Network installation from A to Z (Pulling UTP & Indoor Fiber Optic, Racks & Cabinets Installation, Patch Panels & cables termination, Cisco devices installation & Configuration)
❖ Perform security analysis to ensure security systems are effective in meeting integrity standards.
❖ Responsible for security assessment and penetration testing projects.
❖ Staff Management.
❖ Project Management.
❖ Investigated problems and recommended solutions
❖ Good Organized and Time Management Skills
Silicon 21 NITS, Egypt Nov 2007 to May 2010
Network/ System Engineer.
❖ Work for Silicon21 as a Network / System Engineer at the Professional Installation Service (PIS) team which Keeps track of Cisco Networking solutions with focus on cost optimization, Support, troubleshooting, maintenance and deployment of technology. Manages IT infrastructure and architecture including hardware and software. Interact with internal and external entities to ensure continuous user satisfaction.
❖ Investigate problems and recommend solutions
❖ Good Organizing and Time Management Skills
❖ Report to IS team leader.
Electronics and Communications Engineering