فيروز أحمد

Managed operations across two on-premises data centers and a Microsoft Azure cloud environment, ensuring high availability and operational stability, while leading the design and implementation of secure Azure cloud architecture, including hub-and-spoke networking and scalable infrastructure solutions. Owned end-to-end delivery of infrastructure, cloud, and security projects for new and existing services, strengthening enterprise security posture through Zero Trust principles and implementing Privileged Access Management (PAM) for secure administrative control. Led vulnerability management using Rapid7, oversaw patching and configuration compliance via Desktop Central, and monitored security alerts and incidents to ensure proactive threat mitigation. Analyzed security metrics to identify risks and improve overall posture, while providing technical leadership for deployments, troubleshooting, escalations, and solution delivery. Designed and deployed Azure services, including Virtual Machines and App Services, and architected secure VNet connectivity. Managed internal and external VAPT activities, conducted security and infrastructure gap analysis, and implemented mitigation strategies. Supported ISO 27001 and GDPR compliance audits, and developed high-level solution designs, RFPs, scope of work, and technical evaluations for tenders. Managed enterprise network infrastructure (KIN network) and oversaw LAN/WAN operations to ensure performance, reliability, and security. Designed and implemented Disaster Recovery (DR) strategies for network, data, and security systems to ensure business continuity. Coordinated with cross-functional teams and vendors to plan and deliver new initiatives, conducted Proof of Concept (PoC) evaluations of cybersecurity and infrastructure solutions, and provided executive-level reports to stakeholders, supporting strategic decision-making including OPEX and CAPEX considerations. Developed automation and policy enforcement solutions to improve operational efficiency and reduce manual workload.

Managed operations across two on-premises data centers and one Microsoft Azure cloud environment, e nsuring
high availability and operational stability
Led the design and implementation ofAzure cloud architecture, including secure connectivity, hub-and- spoke
networking, and scalable infrastructure solutions
Owned end-to-end delivery of infrastructure, cloud, and security projects for both new and existing services
Strengthened enterprise security posture by implementing Zero Trust security principles across infrastructure and
cloud environments
Implemented and managed Privileged Access Management (PAM) to secure and monitor critical administrative
access
Led vulnerability management and remediation processes using Rapid7, ensuring timely risk mitigation
Oversaw patch management and configuration compliance using Desktop Central to maintain secure and stable
environments
Monitored, analyzed, and responded to security alerts and incidents, ensuring proactive threat detection and
mitigation
Analyzed security metrics across enterprise systems to identify risks and improve overall security posture
Provid ed technical leadership to the team for deployments, troubleshooting, escalations, and solution delivery
Designed and deployed Azure services, including Virtual Machines, App Services, and secure network
config urations
Architected Azure VNet connectivity, including hub-and-spoke topology and secure service integration
Managed internal and external VAPT activities, including remediation tracking and risk reduction
Performed security and infrastructure gap analysis, implementing mitigation strategies to reduce vulnerabilities
Supported and coordinated compliance audits (ISO 27001, GDPR), ensuring adherence to security standards and
audit requirements
Developed high-level solution designs, functional specifications, RFPs, and scope ofwork documents;
partici pated in technical evaluations oftenders
Managed enterprise network infrastructure (KIN network), ensuring reliability and performance
Designed and implemented Disaster Recovery (DR) strategies for network, data, and security systems to ensure
business continuity
Coordinated with cross-functional teams to plan, design, and implement new initiatives and services
Delivered executive-level reports on security posture, incidents, and risk mitigation strategies to stakeholders
Oversaw LAN/WAN infrastructure operations, ensuring performance optimization, reliability, and secure
connectivity
Developed and implemented automation and policy enforcement solutions to reduce manual effort and
improve operational efficienc
Coordinated with vendors to evaluate the latest cybersecurity, infrastructure, and enterprise resource solutions;
conducted ProofofConcept (PoC) assessments and submitted evaluation reports to management for business
adoption decisions (OPEX/CAPEX considerations)
Assessed vendor proposals and ensured alignment with technical specifications, security standards, and
business objectives

Manage system information security architecture, design, installation, operational planning & risk remediation
Activities on more than 250+ servers/systems, Ensuring all systems installed according to schedule
Monitoring network traffic and analyzing suspected logs using Firewall systems within the Kuwait National
Assembly.
Proficiently handling various security devices from different brands including Fortinet, Palo Alto, WAF A10,
FortiMail, Cisco Firepower, and Cisco Identity Services Engine (ISE)
Assessing threats such as IPS, threat defense, DDOS, SQL Injection Attacks, and UDP Flood Attacks by scrutinizing
Firewall logs
Analyzing security metrics across all devices to ensure robust protection.
Managing connectivity issues related to KIN, CAIT, and Dark Fiber networks.
Developing and managing comprehensive security policies for all servers and users.
Overseeing management of Nexus Core Switch 9500 and Cisco 6509 Switch, Wireless Lan Controller
Responsible for creating high-level solutions, developed functional specifications, prepared request for proposal
(RFPs), scope of work, and reviews and conducted technical evaluation for tender documents.
Configuring Site-to-Site VPN for multiple locations and SSL VPN for remote users.
Utilizing FortiAnalyzer 1000D for comprehensive monitoring of all Firewall Devices logs and reports
Conducted risk assessments and collaborated with clients to provide recommendations for critical infrastructure
and network security operations enhancements, informing the design and implementation of Government
Standard policy aligned with ISO-27014 / 27001 /OWASP standard
Develop Continuity of Operations (COOP) and Disaster Recovery (DR) operations and conduct evaluation of
COOP and DR during annual incident response training.
Configuring port security and implementing monitoring stackable configurations for all Cisco Catalyst Switches
3870 and 2960.
Ensure information assurance by transmitting secure data between classified systems; perform ethical hacking,
malware reverse engineering, penetration testing, and Certification and Accreditation (C&A) within Security
Operations Center (SOC) environment.
Draft technical manuals, installation manuals, installation progress updates, and incident response plans in
order to enhance system security documentation; create required system compliance reports and information
requests.
Provided troubleshooting, repairs, testing, and modification of Local Area Network (LAN) / Wide Area Network
(WAN) electronic equipment and services

Manage system information security architecture, design, installation, operational planning & risk remediation
Activities on more than 250+ servers/systems, Ensuring all systems installed according to schedule
Monitoring network traffic and analyzing suspected logs using Firewall systems within the Kuwait National
Assembly.
Proficiently handling various security devices from different brands including Fortinet, Palo Alto, WAF F5 & A10,
FortiMail, Cisco Firepower, and Cisco Identity Services Engine (ISE)
Assessing threats such as IPS, threat defense, DDOS, SQL Injection Attacks, and UDP Flood Attacks by
scrutinizing Firewall logs
Analyzing security metrics across all devices to ensure robust protection
Imple mented Tenable, ExtraHop, and Darktrace solutions to network \[AI-driven threat detection\].
Managing connectivity issues related to KIN, CSC, CAIT, and Dark Fiber networks.
Developing and managing comprehensive security policies for all servers and users.
Managed Nexus Core Switch 9500 and Cisco 6509 Switch, Wireless Lan Controller
Monitored, troubleshooted, and set up HSRP, VSS, and vPC on core switches for better network reliability.
Responsible for creating high-level solutions, developed functional specifications, prepared request for proposal
(RFPs), scope ofwork, and reviews and conducted technical evaluation for tender documents.
Configuring Site-to-Site VPN for multiple locations and SSL VPN for remote users.
Utilizing Forti Analyzer 1000D for comprehensive monitoring ofall Firewall Devices logs and reports
Conducted risk assessments and collaborated with clients to provide recommendations for critical infrastructure
and network security operations enhancements, informing the design and implementation ofGovernment
Standard policy aligned with ISO-27014 /27001 /OWASP standard
Develop Continuity ofOperations (COOP) and Disaster Recovery (DR) operations and conduct evaluation of
COOP and DR during annual incident response training.
Configuring port security and implementing monitoring stackable configurations for all Cisco Catalyst Switches
Ensure information assurance by transmitting secure data between classified systems; perform ethical hacking,
malware reverse engineering, penetration testing, and Certification and Accreditation (C&A) within Security
Operations Center (SOC) environment.
Draft technical manuals, installation manuals, installation progress updates, and incident response plans in order
to enhance system security documentation; create required system compliance reports and information
requests.
Provided troubleshooting, repairs, testing, and modification of Local Area Network (LAN) /Wide Area Network
(WAN) electronic equipment and services

Implemented robust cybersecurity measures to safeguard critical infrastructure and data assets against
evolving threats.
Conducted regular security audits and vulnerability assessments to identify and mitigate potential risks.
Developed and enforced security policies and procedures to ensure compliance with industry
regulations and best practices.
Implemented intrusion detection and prevention systems to proactively identify and thwart malicious
activities.
Configured and monitored advanced firewall solutions, including Cisco ASA, Fortinet, and Cyberoam, to
protect against unauthorized access and cyber attacks.
Utilized security incident and event management (SIEM) tools to detect and respond to security
incidents in real-time.
Implemented multi-factor authentication (MFA) and encryption technologies to enhance data
protection and access control.
Conducted security awareness training for employees to educate them about cybersecurity best
practices and mitigate human error risks.
Established and maintained robust backup and disaster recovery plans to ensure business continuity in
the event of a security breach or data loss.
Collaborated with internal teams and external vendors to stay abreast of emerging cybersecurity threats
and implement proactive measures to mitigate risks.
Acted as a liaison with regulatory bodies and industry partners to ensure compliance with cybersecurity
standards and regulations.
Continuously evaluated and updated cybersecurity strategies and technologies to stay ahead of
emerging threats and vulnerabilities.
Ensured data accuracy and completeness by maintaining meticulous records, enhancing organizational
reliability.
Managed server deployment and configuration to meet operational needs efficiently.
Developed and enforced IT policies and procedures to streamline operations and ensure security.
Implemented and configured finance systems using ERP applications like Phenix and Exact, optimizing
financial processes.
Fostered transparent communication by providing regular reports and engaging with executives and endusers.
Configured and managed various firewall solutions to bolster network security and performance.
Efficiently managed VMware vSphere infrastructure, ensuring high availability and resolving issues
promptly.
Configured Fortinet and Palo Alto firewalls to enhance network security and performance.
Provided hands-on support for over 250 users across multiple branches, ensuring smooth operations.
Documented SOPs and solutions to proactively address issues and minimize downtime.
Managed Cisco Catalyst Switches and established site-to-site VPN\[(SSL/IPSEC/SITE2SITE) connectivity,
improving network efficiency.
Oversaw IT department finances, including budgeting and vendor management.
Collaborated with developers and consultants to align IT initiatives with business goals.

Implemented robust cybersecurity measures to safeguard critical infrastructure and data assets against evolving
threats .
Conducted regular security audits and vulnerability assessments to identify and mitigate potential risks.
Develo ped and enforced security policies and procedures to ensure compliance with industry regulations and
best pr actices.
Implemented intrusion detection and prevention systems to proactively identify and thwart malicious activities.
Configured and monitored advanced firewall solutions, including Cisco ASA, Fortinet, and Cyberoam, to protect
against unauthorized access and cyber attacks.
Utilized security incident and event management (SIEM) tools to detect and respond to security incidents in
real-time.
Implemented multi-factor authentication (MFA) and encryption technologies to enhance data protection and
access control.
Conducted security awareness training for employees to educate them about cybersecurity best
practices and mitigate human error risks.
Established and maintained robust backup and disaster recovery plans to ensure business continuity in
the event ofa security breach or data loss.
Collaborated with internal teams and external vendors to stay abreast ofemerging cybersecurity threats
and implement proactive measures to mitigate risks.
Acted as a liaison with regulatory bodies and industry partners to ensure compliance with cybersecurity
standards and regulations.
Continuously evaluated and updated cybersecurity strategies and technologies to stay ahead of
emerging threats and vulnerabilities.
Ensured data accuracy and completeness by maintaining meticulous records, enhancing organizational
reliability.
Managed server deployment and configuration to meet operational needs efficiently.
Developed and enforced IT policies and procedures to streamline operations and ensure security.
Implemented and configured finance systems using ERP applications like Phenix and Exact, optimizing
financial processes.
Fostered transparent communication by providing regular reports and engaging with executives a nd end
users.
Configured and managed various firewall solutions to bolster network security and performance.
Efficiently managed VMware vSphere infrastructure, ensuring high availability and resolving issues
promptly.
Configured Fortinet and Palo Alto firewalls to enhance network security and performance.
Provided hands-on support for over 250 users across multiple branches, ensuring smooth operatio ns.
Documented SOPs and solutions to proactively address issues and minimize downtime.
Managed Cisco Catalyst Switches and established site-to-site VPN\[(SSL/IPSEC/SITE2SITE) connectivity,
improving network efficiency.
Oversaw IT department finances, including budgeting and vendor management.
Collaborated with developers and consultants to align IT initiatives with business goals.

Configured DNS, DHCP, WINS, File Server, Print Server, and Domain Controller. Implemented Microsoft ISA Server 2004. Maintained all network addressing, documentation, diagrams, and account information. Configured SNMP Traps for Switches, Routers, Printers, and Servers in HP Open View. Registered and configured a VG224 gateway with Cisco Call Manager. Possess hands-on, comprehensive knowledge of SIP, OSPF, SNMP, and EIGRP. Installed Cisco Unified Call Manager 6.x on an MCS 7825 Server. Conducted maintenance and troubleshooting for issues in Call Manager 4.3. Prepared wireless and networking site surveys and submitted reports to the Project Manager. Monitored inbound and outbound traffic in Cisco Firewall. Configured and installed Cisco IP Telephones from the 7911, 7920, 7912, 7936, 7940 Series, and 7960. Implemented Cisco IP telephony in a new tenant. Configured new partitions, calling search spaces, and translation patterns.

Configured DNS, DHCP, WINS, File Server, Print Server, and Domain Controller.
Implemented Microsoft ISA Server 2004.
Maintained all network addressing, documentation, diagrams, and account information.
Configured SNMP Traps for Switches, Routers, Printers, and Servers in HP Open View.
Registered and configured a VG224 gateway with Cisco Call Manager.
Possess hands-on, comprehensive knowledge ofSIP, OSPF, SNMP, and EIGRP.
Installed Cisco Unified Call Manager 6.x on an MCS 7825 Server.
Conducted maintenance and troubleshooting for issues in Call Manager 4.3.
Prepared wireless and networking site surveys and submitted reports to the Project Manager.
Monitored inbound and outbound traffic in Cisco Firewall.
Configured and installed Cisco IP Telephones from the 7911, 7920, 7912, 7936, 7940 Series, and 7960.
Implemented Cisco IP telephony in a new tenant.
Configured new partitions, calling search spaces, and translation patterns.