Security Network Engineer
Ministry of Health
Total years of experience :10 years, 3 Months
# Project : IT Infrastructure Security Hardening Project
# Customer : Government organization
# Security Area :
- Participated in Security Audit and Evaluation of Customer’s intranet on daily basis, using EBIOS, ISO27001, OWASP standards
- Conducted POC trials of Network Security technologies including Proxies, web application firewalls, SIEM tools, load-balancers, and firewalls, then implement the solutions.
- Implemented and administrated firewalls Cisco ASA 5540 and 2 redundant GateProtect UTM
GPZ2500 :
* Implementing traffic filters using standard and extended access-lists, distribute-Lists, and route maps
* Analyzing the utilization, effectiveness and effciency of every rule on each firewall to eliminate complexity and speed performance with Firemon Security Manager
* Established and maintained VPN IPSec/SSL based site-to-site and client-to-site connections between headquarter and branch offices, allowing users to use their Active Directory user credentials to authenticate.
* Created a multi-tier DMZ network to allow for publishing of services and applications to the Internet.
* Setting up NAT/PAT on the firewall for all the third party and DMZ traffic
* Implemented IPS/IDS, DLP, URL filtering and application control as UTM features on GateProtect firewall for added security purposes.
* Configuring WCCP with Cisco ASA and Websense Content Gateway
* Analyzing traffic passing managed firewalls via logs and packet captures
* Ensured high availability, load balancing, traffic sharing, dynamic routing, and fail over.
* Responded to service requests for resolution of firewalls related issues
-Implemented and administered Loadbalancing and QoS solutions : F5, Peplink and StreamCore
- Implement and administered the customer’s SIEM solution
* Working with external teams to ensure all necessary logging sources are reporting to the SIEM.
* Createdfilters and correlation rules to analyze security events
* Analyzed security logs collected using LogPoint
* Created event/incident dashboards
* Maintained the smooth running of LogPoint operations
- Performed risk assessments, vulnerability management, and penetration testing for Linux, Windows systems and web applications. Tools : DVWA, Burpe suite, Nmap, nessus, Metasploit, Kali Linux, Shell
- Maintained endpoint security (+2000 hosts managed) with Kaspersky anti-virus, URL filtering, application control, vulnerability management, and patch management.
- Kaspersky Security Center deployment and administration (+2000 hosts managed)
- Provided technical guidance to software development and engineering teams on implementation of security best practices during development life cycles
- Enforced security governance and promoted a security culture within the company by maintaining and evangelizing information security policies, standards and procedures
- Remain up-to-date on the latest security threats and risks.
# Network System Area :
- Participated in the design, building, and maintaining of network infrastructures to align with customer security requirements, budget and timeline.
- Provided day-to-day administration and support of the whole Network System infrastructure: HPE Procurve and Cisco Catalyst switches, Cisco routers (2600/3600/7200 series), Fujitsu's ETERNUS storage, Dell PowerEdge Servers and HPE ProLiant G6/G7/G8/G9 servers
- Project lead for migrating Windows Server 2003 R2 and Windows Server 2008 R2 to Windows Server 2012 R2 (3 Domain Controllers, FSMO roles, File Servers, Print Servers, DFS Servers, DHCP Servers, IIS Servers, SQL Servers)
- Project lead of Windows 10 Workstation Migration Project (Upgraded over 1000 Windows 7 to Windows 10 using MDT/WDS/WSUS/SCCM)
- Install, configure and administer Windows Server 2003/2008 R2/ 2012 R2: AD, DHCP, DNS, GPO, ISCSI, Clustering, Hyper-V
-Handling backups using Veritas backup-exec and Veeam
- Providing all-round technical support within the phases of implementation, troubleshooting, maintenance, upgrades, fixes, patches
# Project : Infrastructure Modernization for Mobile and Fixed Network
# Customer : Morocco Telecom
# Key Responsibilities
- Met with customer to help design and plan IP Network
- Installation, Configuration and, Maintenance of Huawei equipments including : routers (NE40), Switches (S3900), Broadband Remote Access Servers ( BRAS ME60), Multi-Service Access Node (MSAN MA5600T), Huawei radio equipments (DBS3900, BTS3900A/3900L/3900AL, BBU3900/3910 BSC6900/6910)
- Preparation of IP-Plans, XML/MML files to configure 2G BTS / 3G NodeB / 4G eNodeB (New site or extension) based on Huawei Tools (U2000, WebLMT, and CME)
- Troubleshooting and Alarms cleanup during and after the integration/expansion to ensure normal service
- KPI monitoring and analysis with iManager PRS.
- Weekly and monthly backup and upgrading Huawei equipments.
- 2nd & 3rd level support to field engineer for trouble shooting and Roll-out activities.
- 24x7x365 schedule shifts available for support customer service requests and complaints
- Preparing technical documents on configuration, installation & equipment maintenance for training purpose to client engineers.
Telecom and Network engineering formation Honors : good