Mohammad Tawfiq

Technical Services Consultant at Kuwait Finance House

• Kuwait - Al Kuwait
• My current job since November 2017

Network Security Specialist at Industrial Bank of Kuwait

• Kuwait - Al Kuwait
• June 2005 to October 2017

- 10 years' experience with Enterprise Network and Security Technologies
- 10 years' experience of Secure System Design and Firewall Administration
- Extensive knowledge of Firewall, IDS, IPS methodologies and concepts.
- Extensive knowledge and experience evaluating, designing, testing and supporting hardware and software based security
- Extensive knowledge and understanding of Network Communications principals, technologies and systems
- Strong knowledge and understanding of Network Operating Systems
- Strong knowledge and understanding of Desktop Operating systems
- Strong knowledge and understanding of Internet, Intranet, Extranet and other Web technologies
- Strong knowledge and understanding of Client Server technologies
- Ability to exercise judgment and discretion in interpreting and applying applicable policies and procedures.
- Extensive knowledge and understanding of network and application protocols
- Hands-on experience with leading vendor security products (i.e. SonicWall, Sophos, Juniper, PaloAlto, etc).
- Maintains network availability and enhances DMZ networking environments.
- Analyzes network security health, workflow, access, information, and security requirements; performing firewall/ IDS administration, including access control maintenance, signature tuning, and SEIM (Security Event and Incident Management) log management.
- Strategic planning and designing of existing I.T technologies to fully utilize their potential
- Standardize day to day tasks and procedures as per the industry best practices
- Establish procedures in compliance with information security policy to review periodically audit
- Trails of all mission critical systems and generate reports of any threats / incidents found.
- Review admin access of IT infrastructure and fine-tune it to follow most restrictive / least privilege technique as per information security policy.
- Review security controls of IT infrastructure including OS, business applications and Communication/security devices periodically.
- Review access rights (OS, applications, devices etc.) periodically.
- Support, Security and Operational for Core Banking Applications and Payments hubs
1- Swift (SAA, SAG, SWP...)
2- Payment hub (PaymentSafe)
3- Anti-Money Laundry (DNFS- AML Reporter)
4- Reconciliation software (Corona)
5- Phoenix, Mosaic, Tradwind, Musketeer
6- KUWAIT ELECTRONIC CHEQUE CLEARING SYSTEM (KECCS)

- Lead projects for planning and implementing following technologies, Also daily operations.
1. Microsoft ISA Firewall using Celesitx
2. Cryoserver Email Archive Solution
3. Cyberoam Firewall ( Site-to-Site VPN)
4. Dell SonicWall Firewalls.
5. Sophos Firewalls ( Next Generation Firewall )
6. Juniper IDP 200.
7. Net Screen Juniper Firewalls ( ISG 2000 )
8. WSUS 2.0, 3.0
9. Active Directory Group Policies
10. McAfee Security products ( Email Gateway, IPS and Vulnerability Manager )
11. Extreme Switches (8800 Black Diamond Core switch, and Summit Edge switches)
12. LANDesk Management and Security Suite 8.7, 8.8, 9.0 and 10.0
13. Event Tracker 5.6 and 8.2 (Enterprise Event Management System)
14. RSA Authentication integration with Swift and Payment Systems
15. Microsoft Exchange 2003, 2010 and 2013
16. Migration of Active Directory from 2000 to 2008 R2 to 2012 R2
17. Bit9 ( Carbon Black ) whitelisting approved applications
18. Anti-virus design policy through different products ( ESET Nod32, Kaspersky and Trend Micro) 19. Swift Alliance Access 6.0, 7.0
20. Surf Control 5.0, 5.5
21. Manage Engine (Service Desk Plus)

Network Administrator at Alamiah Company

• Kuwait - Al Kuwait
• September 1999 to May 2005

manages LAN performance and maintains LAN security. Installs, maintains and monitors
the operation of the local area network. Evaluates vendor products in hardware, software and telecommunications
equipment and recommends purchases consistent with short and long term objectives. Recommends and implements
LAN policies and standards, ensuring adherence to security procedures. Maintains contact with outside
organizations in the maintenance, service and/or purchase of the LAN. Trains users on LAN operations and
procedures.