Mohamed Magdy

• VLAN Design: Designed and configured VLANs on Cisco Layer 2 switches to segment network traffic,
reducing broadcast traffic by 30% and improving security and performance.
• DHCP Security: Implemented DHCP Snooping with rogue DHCP server protection, trusted/untrusted port
designation, and binding table enforcement.
• DAI & IP Source Guard: Deployed complementary security features alongside DHCP Snooping to prevent
ARP spoofing and IP spoofing.
• SSL & IPsec VPN: Administered SSL VPN portals for clientless remote access, enforcing MFA and
endpoint security policies.
• Sophos Firewall HA & IPS: Deployed and maintained Sophos firewall in Active-Passive High Availability
configuration with custom IPS policy tuning, signature exceptions, and threat rules to minimise false
positives.
• Supported routing and switching infrastructure using Cisco L2/L3 switches, including troubleshooting
connectivity and performance issues.
• Managed DHCP services ensuring 99.9% uptime and reliable IP allocation for 150+ users.
• Built and administered Active Directory domains including OU structure, user and group management, and
Group Policy Objects (GPO).
• Implemented and maintained file servers, roaming profiles, and home folders for enterprise users.
• Supported VMware ESXi virtualisation infrastructure including VM management and troubleshooting.
• Supported VoIP systems (Issabel IP PBX): user extensions, SIP trunk troubleshooting, and voice
connectivity.
• Provided Tier 1-2 technical support for network, hardware, and software issues in the domain environment.

• Advanced Routing & Switching: Configured Inter-VLAN Routing on Layer 3 switches using SVIs and
Router-on-a-Stick to enable seamless communication between segmented departments.
• Infrastructure Security: Hardened network access by implementing Standard and Extended ACLs and
Switch Security features including Port Security, DHCP Snooping, and DAI.
• BGP & WAN: Managed iBGP and eBGP peering sessions and assisted in MPLS label-switching
configurations for optimised WAN performance.
• Core Systems: Administered Windows Server (MCSA) environments, focusing on Active Directory
Replication, GPO deployment, and DNS/DHCP high availability.

● Advanced Routing & Switching: Configured Inter-VLAN Routing on Layer 3 switches using SVIs and Router-on-a-Stick to enable seamless communication between segmented departments.
● Infrastructure Security: Hardened network access by implementing Standard and Extended ACLs to filter traffic and Switch Security features including Port Security, DHCP Snooping, and DAI.
● BGP & WAN Implementation: Managed iBGP and eBGP peering sessions and assisted in MPLS label-switching configurations for optimized WAN performance.
● Core Systems: Administered Windows Server (MCSA) environments, focusing on Active Directory Replication, GPO deployment, and DNS/DHCP high availability.

• Diagnosed and resolved network connectivity issues including LAN/WAN faults, IP conflicts, and DNS/DHCP
misconfigurations across multi-user environments.
• Deployed and configured Windows workstations and servers, managing domain-join procedures, user
accounts, and Group Policy application.
• Supported Active Directory administration including user provisioning, password policies, and OU
management.
• Maintained and troubleshot network hardware (switches, routers, access points) ensuring stable uptime.
• Troubleshot hardware issues (PCs, laptops, printers, peripherals) and software problems (Windows/macOS,
applications, updates).
• Documented recurring incidents and built internal knowledge base, reducing repeat ticket volume.