Mohammed Mounir Elshafay

* Design and configuration of Servers, Storage, Virtualization, Security and Windows / Linux operating systems solutions.
* Responding to inquiries from clients, staff, service providers and vendors to provide technical assistance and support.
* Managing assigned projects and program components to deliver services in accordance with established objectives.
* Leadership in Cloud Solutions Design, Planning, Implementation, Migration and Support.
* Design Cloud-based solutions either hybrid or public (IAAS, PAAS, SAAS).
* Implementation planning for Migration Services, Deployment Services, Delivery, Configuration, etc...
* Presentation of Cloud Solutions business, requirements and design attractive solutions based on the agility and elasticity of the cloud.
* Design of Cloud offerings including services, support, training. Detail definition of Solution Components, Scope of Work, Deliverables, Present Proposal request, Effort Sizing and Pricing.
* Leading the technical solution effort and activities under the role of the Technical Solution Owner ensuring and verifying the solution design is correct and meets customer specifications, service efforts/ sizing, etc., by interfacing with stakeholders.

*Install, configure, and troubleshooting ArcSight Smart Connectors and install, upgrade, troubleshooting Splunk and confirm logs is received from all Infrastructure Datacenter “Servers & WS”.
* Install, Configure, and deploy Microsoft Windows Event Forwarding (WEF&WEC) for Active Directory & non-AD.
* Configure Audit Local Policy & Advanced Audit Policy in each system for AD & non-AD-enable windows systems.
* Configure and collect industrial control systems (ICS) security logs: files, Syslog, database, or HTTP Web Logs.
* Configure and collect MS SQL Logs, Oracle DB Logs, MS IIS Logs, DNS logs, from all Servers in Pan`s & DMZ to be integrated with ArcSight & Splunk.
* Configure and collect McAfee EPO DB logs, TrendMicro DB logs, Symantec Endpoint Protection, Kaspersky Endpoint Server from all Servers in Pan`s & DMZ to be integrated with ArcSight & Splunk.
* Configure, upgrade, and collect logs for MS PowerShell locally and using GPO.
* Configure and collect logs for USB Flash Drive locally and using GPO.
* Configure VMware ESXi & Hyper-V servers to send logs events to a remote syslog server.
* configuring all endpoints to sync time with the NTP Appliance for DMZ and PAN`s.
* configure policy on GPO in Active Directory & local GPO without active directory to allow traffic from various windows servers or workstations to the ArcSight Servers & Splunk.
* Configure Firewall Ports & Protocols inbound and outbound Rules for all servers in the datacenter.
* Run Health check PowerShell Script on the ArcSight and Splunk Servers (PAN`s and DMZ) for each Plant to generate an archive in same directory containing system info, CPU, storage, memory utilization and connector logs and configuration we will use to build the health check report.
* Technical report for all Saudi Aramco plants includes (Architecture Design and ArcSight Design for Plant Network, PCN, ArcSight connectors, Firewall, Windows Events, IP Flow, IIS, DNS, McAfee EPO, VMWare in (PAN & DMZ), Splunk Design for ELM Architecture, Base configuration for Plants, and Hardware Components for NTP, GPS, Servers, Memory, Hard Disks.

* Install, configure, maintain and troubleshoot Microsoft Windows operating systems, ensuring all requests and incidents are documented on OpenView Service Manager and Request Fulfillment modules.
* Maintain, configure and troubleshoot Microsoft Active Directory to integrate business applications, and facilitate BANK’s employees’ Day to Day work.
* Maintain, configure, and troubleshoot Microsoft-based application servers and different features (DFS, DNS, DHCP, IIS)
* Perform ongoing performance monitoring and resources utilization analysis to ensure that existing resources are utilized efficiently.
* Plan, Arrange and Perform operating systems /software upgrades and patching abiding to Change Management cycle.
* Conduct health checks, risk assessments for the Microsoft Windows based platform and services and close any related audit issues on-time.
* Support the bank strategy for implementing security baseline. And apply PCI recommendation.
* Ensure and test Microsoft based platforms and services’ availability in Disaster recovery situations.
* Support in troubleshooting Microsoft SQL Server with SQL DB Administrator whenever needed.
* Provide support for users, IT vendors, and other administrators (database, application, network, other OS systems, backup, and storage administrators) during problems troubleshooting, projects, and implementations within his scope.
* Maintain inventory and asset configuration documentation and provide continuous support to resolve critical issues on a 24/7 basis to maximize availability for the bank business services.
* Configuring and troubleshooting Windows Server Administration Roles and Features, such as, AD, ADFS, DHCP, DNS, GPO, etc.

* Leading a team responsible in support and handling all Enterprise business critical applications, Office IT and (Intel based, Storage, Virtualization Infrastructure).
* Lead infrastructure strategic and operational planning to achieve business goals.
* Assess, communicate, and mitigate risks associated with IT investment and operation.
* Designing, Developing, implementing, and coordinating systems, policies, and procedures.
* Evaluate new information systems products and emerging trends in the IT field.
* Develop requirements, outlines, plans, budgets, and schedules for IT Infrastructure.
* Promote security awareness.
* Manage and lead the IT staff which includes hiring, training, guidance, and discipline.
* Management VMware ESXI, vSphere Center & replication between all ESXI Servers.
* Management vCenter for ESX combination, VM migration and server monitoring.
* Management (Active Directory, DNS, DHCP, GPO, File server, Kaspersky Security Center) WS 2016 Platform.
* Management Kaspersky Endpoint Security Server.
* Manage Microsoft Office 365 on the HMS Agency.
* Manage Exchange Server 2013 on the Al-Hayah TV Network.
* Management Group Policy “GPO” for Domain environment.
* Management Veeam Replication and Backup Server for backup all VMs infrastructure.
* Management Symantec backup exec Server for backup file server and SQL DB.
* Management Aruba Wireless Solutions for all the networks.
* Management Sophos XG Firewall for Intrusion Detection and Prevention System and rules needed for LAN & WAN.
* Management, Administrate WSUS Server and WDS Server, MS SQL DB.
* Management High Availability and DR for the Datacenter.

* Implementing, Management (Active Directory, DNS, DHCP, IIS, File server, WDS, WSUS, IIS, Pfsense, Kaspersky security center) WS 2008 R2 & 2012 R2 Platform.
* Evaluation, Reporting, & Documenting for Each Project Stage and Once Completed.
* Datacenter Management, For Servers Upgradations, Vulnerability Assessment in Entire Infrastructure & Performance Handling.
* Infrastructure Diagrams for new deployments and after upgradation using MS Visio.
* Implementing, Management Kaspersky Endpoint Security Server for all Data Center.
* Implementing and Administration WSUS Server, Implementing and manage WDS Server.
* Applying Group policy from domain to manage and control and audit the computer and user configuration Authority and permission and rights access.
* Implementing and configuring file server to storage and management all data, and to facilitate user Access by network mapping for the folder share.
* Designing and implementing the group policy “GPO” for the Workstations and Servers.
* Implementing and Management Veeam Backup Server for all ESXI and Hyper-V Virtual Environments.
* Implementing and deploying Symantec backup EXEC Server for backup Active Directory & File Server.
* Implementing and deploying MS Hyper V`s Servers and create VM`s with each of all interface’s LAN.
* Implementing and deploying DHCP Relay Agent for each of different IP network segment that contains DHCP clients.
*Create weekly and monthly report of server and network & server performance and status workflow to Know our rate of percentage at least to keep and care of our network system environment.
* Manage Microsoft Office 365.
* Implementing High Availability for DHCP Servers and for MS SQL DB.
* MSSQL DB deployment & backups.
* Implementing Hand Punch System & I Face system Recognition Support.
* Implementation Pfsense firewall Linux with all rules for WAN & LAN & aliases & traffic shaper.
* PF-Sense Firewall Intrusion Detection and Prevention System deployment in Egypt Office, User policies and CARP (Failover).
* Sophos XG firewall deployment in UAE Office (Remotely), User policies, Bandwidth Control, Web Access Polices.
* Responsible for The Arrangement of New Hardware, Prices and Coordination with Vendors, For Services Contract and Future Relation in This Regard.

8 Implementing and administration (Active Directory, DNS, DHCP, GPO, IIS, File server, TMG2010, Admin Kit Kaspersky Server) WS 2008 R2 Platform.
* Implementing and administration Admin Kit Kaspersky Server.
* Implementation and administrate TMG 2010 server and monitoring and insuring internet Bandwidth optimization and secure the internet by GFI Web Monitor
* Applying Group policy from domain to manage &control and audit the computer and user configuration Authority and permission and rights access.
* Implementing and configuring file server to storage and management all data, and also to facilitate user Access by network mapping for the folder share.
* Designing and implementing the group policy for the network.
* Configuring, Designing wireless solutions and Network Infrastructure.
* Deployed Windows Activation Server KMS Server.
* Implementation VPN using TMG.
* Backup All Servers Images using Acronis Backup.
* Install and manage Exchange server 2010.
* Active Directory Backup and Recovery.
* Implementing and deploying MS Hyper V`s Servers and create VM`s with each of all interface’s LAN.
* Managing VMware’s and Hyper-V.
* Create the weekly and monthly report of server and network & server performance and status workflow to Know our rate of percentage at least to keep and care of our network system environment.

*Administration (Active Directory, DNS, DHCP, ISA 2006) WS 2003
*Administration ISA 2006 server and monitoring and insuring internet Bandwidth optimization by bandwidth Splitter.
*Support software & hard ware & maintenance for PCS.