كريم خالد

• Leading the design, operation, and optimization of enterprise-level infrastructure, with a primary
focus on data center architecture, disaster recovery planning, business continuity, and zero-downtime
strategies.
• Managing a virtualized environment with over 400 VMs using VMware vSphere (ESXi, vCenter), ensuring
high availability, fault tolerance, and load-balanced performance.
• Overseeing the implementation and monitoring of FortiGate Firewalls, intrusion prevention systems
(IPS), and VPN tunnels to ensure a secure perimeter across on-prem and hybrid environments.
• Administering Active Directory (AD), Group Policies (GPO), DNS, DHCP, AD Connect, and WDS,
reinforcing authentication integrity and seamless access across regions (Egypt, KSA, UAE).
• Delivering network segmentation and secure access control using Aruba APs, VLANs, and endpoint
policies.
• Conducting penetration testing, vulnerability assessments, and risk mitigation planning across all
infrastructure layers.
• Managing SAN/NAS storage (IBM, Synology, QNAP), EMC Data Domain, and tape libraries (LTO9) for
tiered backup, redundancy, replication, and long-term retention.
• Coordinating IT procurement, asset lifecycle tracking, and vendor evaluation in alignment with
business scalability needs.
• Driving DevOps-style scripting using PowerShell for automation of system tasks, deployments, and
user lifecycle management.
• Spearheading infrastructure documentation including network topology, SOPs, and recovery
protocols.

• Reduced website hosting costs by analyzing VPS requirements and purchasing from the most cost-effective
platform.
• Created a new version of the Engineering Lifecycle Management by IBM (ELM) by planning and implementing
improvements with the team.
• Enhanced Power Apps, Power Automate Flows and SharePoint to improve the performance and stability of
HR performance management Tools.
• Migrated obsolete versions of applications like Odoo, Zabbix, and RTC.
• Migrated Stream Classic videos into Stream Online using Microsoft tools.
Successfully modernized the IT environment by migrating obsolete applications, including Odoo, Zabbix,
and RTC, to updated versions.
• Streamlined video content management by transitioning from Stream Classic to Stream Online using
advanced Microsoft migration tools.
• Upgraded networking infrastructure by replacing outdated switches with FortiSwitches integrated seamlessly
with FortiGate for enhanced security and performance.

• Spearheaded IT strategy formulation and infrastructure planning, enhancing network security frameworks in diverse project environments.
• Executed comprehensive backup strategies and disaster recovery protocols utilizing Veeam, NAS, and offsite replicas, ensuring data integrity and availability.
• Enhanced LAN/WAN performance through strategic VLAN restructuring and hardware upgrades, resulting in significant improvements in network speed and reliability.
• Designed and implemented Power Platform business applications with AI Builder integration, streamlining processes and automating CV analysis for increased operational efficiency.
• Collaborated with cross-functional teams to align IT initiatives with business goals, fostering a culture of innovation and continuous improvement.

• Led data center projects, developing and implementing new mobilization plans for enhanced infrastructure services.
• Supervised a high-performing IT team across three major projects, focusing on infrastructure upgrades and ensuring service stability.
• Initiated and integrated cutting-edge infrastructure technologies to optimize performance and efficiency.
• Managed and monitored ESXi servers and Domain Controllers, ensuring robust virtualization and system reliability.
• Streamlined daily and monthly operational tasks, improving overall team productivity and service delivery.
• Fostered a collaborative team environment, driving successful project outcomes and enhancing IT capabilities.

Responsible for projects data centers, creating new mobilization plan and managing projects Infrastructure services
(Firewall, Domain Controller, NAS Storage, and ESXi and Hyper-V Virtualization)
Team Management
• Supervise the IT Team in 3 projects with new infrastructure, servers enhancement, daily and monthly tasks, and
Services stability.
• Suggest and proceed a new infrastructure technology.
Technical Responsibilities
• Managing and monitor ESXi Servers, Domain Controller, Additional DC, WDS, WSUS, File Server, Print Server,
and Qnap Backup solutions.
• Supporting approx. 50 users in 2 different projects.
• Grand Museum Park Project composed of Standalone Data Center.
Domain Services:
◦ Implement Microsoft Domain services (AD, DNS, DHCP (Failover) and WSUS).
◦ Migrate AD from 2012 R2 to 2016.
◦ Implement File Server Services.
VMware Services:
◦ Implemented VMware vSphere ESXi on 2 hosts (HA-ready design) for project workloads.
Automation Scripts:
◦ AutoKill Outlook in a specific time to archives.
◦ Bulk uninstall AutoCAD from
◦ Auto install
Exchange Services:
◦ Service Emails Creation on Exchange ECP.
Hyper-V Services:
◦ Administer Hyper-V 2012 R2 on Dell Servers R230
◦ Upgrade Hyper-V Hosts to 2012 R2.
Backup System:
◦ Implement and manage Veeam Backup and Replication 11.
◦ Impalement Veeam Backup for backup users profiles.
Storage Systems:
◦ Implement and administer Qnap QTS.
◦ Create and Manage Storage Pools.
◦ Implement Sync Backup
◦ Create Snapshots.
Firewall and security:
◦ Implement Sophos XG135 and XG85.
◦ Manage security roles and VPN access.
◦ Working on Sophos Update 18.0 with new features and UI.
Datacenter:
◦ Moving old Data center from the old location in the project to the new site with all equipment.
◦ Create new data center from scratch for new projects.
Unified & Collaboration Services

• Responsible for managing and support of Hospital Infrastructure services (Domain, G-suit, Firewall, Linux file
server, Vmware ESXi, and support all of employees problems)
• Handled the full scope of IT and security operations for the hospitals infrastructure, including firewall rule
sets, load balancing, and LAN segmentation for patients and staff.
• Deployed FreeNAS-based firewall with captive portal and load-balancer merging 8 ISPs — reducing
downtime and enabling per-room internet access control.
• Managed Avaya-compatible VoIP setup, with SIP-based call routing and access policy enforcement.
• Monitored VMware clusters, enforced vSphere-level isolation, and configured Gsuite admin policies for
healthcare email confidentiality.
• Executed disaster recovery testing, offsite storage replication, and Veeam-based automated backups to
protect critical patient data.

Responsible for 3 Projects supporting (Technical Support, Printers, Windows Problems)

• Interact with customers to provide and process information in response to inquiries,
concerns, and requests about services
• Diagnose and resolve issues involving internet connectivity.
• Follow standard processes and procedures on call.
• identify and escalate priority issues per Client specifications.