مصطفى الشريف

• Led the design, deployment, and administration of enterprise Fortinet network and security solutions, including Forti Manager, Forti Analyzer, SD-WAN, FortiGate Firewalls (701G, 121G, 31G), Forti Switch (1048E, 624F, 148F, 124F), Forti AP 441K-E, Forti Voice FVE-500F, and Forti Voice GO04, delivering secure, resilient, and highly available infrastructure across IPS/IDS, IPsec VPN, site-to-site VPN, MPLS, IP-VPN, and VLAN architectures.
• Managed data center operations across 30+ branches, ensuring 99.9% uptime and service reliability.
• Architected network infrastructure across multi-site environments (wired, wireless, VoIP, CCTV, access control).
• Oversaw Microsoft 365 ecosystem, overseeing Entra ID (Azure AD), Intune, Exchange Online, SharePoint Online, OneDrive, Microsoft Teams, MFA, Conditional Access, security and compliance policies, licensing, and service health monitoring.
• Implemented cybersecurity governance aligned with ISO 27001 and NCA ECC frameworks.
• Enhanced security policies, conducted risk assessments, and led security awareness, audits, and incident response initiatives.
• Planned disaster recovery (DR) and business continuity (BCP) strategies.
• Strengthened endpoint security posture using Kaspersky EDR. Led deployment and optimization of Kaspersky NEXT EDR Foundation including threat detection and response.
• Implemented proactive threat monitoring and incident response frameworks.
• Standardized IT policies and ITSM processes using ITIL best practices.
• Delivered corporate websites (rajhicorp.com, Plasco.com.sa), overseeing vendor coordination, infrastructure setup (Windows VPS, IIS, SQL Server), DNS and SSL configuration, deployment, and post-go-live support, ensuring high availability, security, and seamless user experience.
• Managed GoDaddy environment and DNS configurations.
• Directed enterprise deployment of BioTime Cloud solution (600+ users, 20+ sites). Integrated biometric systems with HR operations for real-time monitoring and reporting.
• Led end-to-end migration of Almotakamel Real Estate ERP from on-premises to cloud infrastructure, managing vendor coordination, server readiness, DNS/hostname configuration, access control, database backup and restoration, and go-live support to ensure system availability and business continuity.
• Managed hybrid Veeam backup environment (on-premises and Microsoft 365), leading backup strategy, licensing optimization, and cloud backup migration while ensuring data protection, availability, and business continuity.
• Oversaw IT procurement, including invoice processing and coordination with vendors, suppliers, and ISPs.
• Reduced operational costs through vendor negotiation and infrastructure optimization. Optimized licensing and cloud resources (Microsoft 365 / Azure).

• Designed and executed Cisco-based network infrastructure (ASA, FTD, FMC, WLC, MPLS, VPN, VLAN).
• Managed data center operations across 45+ branches with 99.9% uptime.
• Managed, troubleshot and resolved complex network security issues within LAN/WAN/WLAN/WLC/VPN/• IP-SEC/VLANs’/MPLS tunnel, and TAMKEEN Data Centers facilities including HVAC and UPS across all site’s infrastructure.
• Successfully led the design, procurement, and deployment of a comprehensive Fortinet cybersecurity infrastructure project
valued TAMKEEN SD-WAN. This included FortiGate firewalls (601F, 71F, 61F, 40F), Forti Mail Cloud with O365 API
integration, Forti Manager, Forti Analyzer, and VM-based FortiGate on Azure.
• Oversaw vendor coordination, implementation supervision, and technical knowledge transfer to internal teams.
• Architected and deployed network infrastructure across 45+ sites, integrating both wired and wireless solutions, voice
solution, hardware/software, CCTV and access control security solutions.
• Managed the TAMKEEN private tunnel for HQ on-prim and Azure cloud environments (MPLS).
• Utilized PRTG tools for comprehensive monitoring of network devices alongside NAGIOS.
• Applied ITIL frameworks on ITSM solution, ManageEngine Service Desk Plus SDP, optimizing IT incidents, problems,
changes, assets, purchases, vendor and contracts management processes and streamline IT service management.
• Led the IT Service Desk and Technical Support teams, ensuring exceptional service delivery across 45+ sites.
• Directed technical project management and served as a technical lead and vendors relationships.
• Managed the AVAYA voice system, including installation, configuration, and administration of AVAYA IPO for 400+
extensions and multiple call centers for customers and laborers.
• Administered the HR attendance system Cloud ZK BIOTIME and 200+ access control devices.
• Oversaw IT procurement, including invoice processing and coordination with vendors, suppliers, and ISPs.
• Conducted risk assessments, delivered security briefings, and managed IT security awareness, audits, policies, procedures
and proactively identified threats and developed defense strategies.
• Executed vulnerability and penetration testing to secure network segments.
• Supervised and coordinated with the system team on managing VMware vSphere environments, ensuring proper
provisioning, resource optimization, and high availability (HA) configurations for over 50 production virtual machines.
• Oversaw the design and execution of Disaster Recovery (DR) strategies in collaboration with the system team, including
replication and backup planning across Azure and on-prem environments.
• Provided supervision and support to the system team in managing Microsoft AD, users, groups, GPO policies, office 365, MS
Intune, MFA, and AZURE environments, including reviewing security policies, monitoring health, and business continuity
• Configured Web Application Firewall (WAF) policies using Cloudflare for DDoS protection
• Maintained oversight SIEM AT&T MTDR/ Alien Vault USM for proactive security intelligence.
• Coordinated video conference solutions for meeting rooms HUAWEI Idea Hub & Cisco Spark, Logitech.
• Supported the Marketing team in managing social media accounts and WA business communications.

• Design and deployment of network infrastructure across 15 sites, ensuring robust connectivity and system integration.
• Executed and managed Microsoft Azure portals, leveraging expertise in Office 365, Intune, and Exchange to optimize cloud
operations.
• Supervised IT asset lifecycle, from procurement to asset management, aligning with organizational needs.
• ISPs, vendors, and third parties’ contracts management, ensuring cost-effective services and favorable terms.
• Maintained CCTV surveillance systems, enhancing security measures across the organization.
• Managed attendance system devices, ensuring accurate tracking of employee time and attendance.
• Developed and launched the 4twins.com website, increasing company's online presence and accessibility.

• Expertly configure and manage security systems, including firewalls, antivirus, and IDS/IPS solutions.
• Design and implement robust network infrastructures across +45 sites and systems.
• Develop comprehensive network policies and authorization roles to secure file sharing, internet usage, DMZ, wireless
access, and permissions.
• Maintain stringent network security for LAN/WAN, telecommunications, and voice systems to prevent unauthorized access,
modification, or destruction.
• Resolve network access issues and enforce security protocols and procedures.
• Integral member of the support & Service Desk team, servicing all MAHARAH HR 45 sites, HQ, Data Centers.
• Manage and maintain the AVAYA voice system, overseeing the installation, configuration, and administration of AVAYA IPO
for over 350 extensions and 2 call centers.
• Oversee the HR attendance system ZK (+150 devices) and CCTV surveillance systems (+1000 camera/ +90 NVRs’).
• Successfully guided the end-to-end implementation of Maharah’s New HQ ITS Infrastructure project.
• Oversaw design, procurement, and deployment of structured cabling (CAT6A/OM3), Cisco campus switching, Fortinet
NGFW and Forti Web, raised floor systems, HVAC, environmental monitoring, access control, and NOVEC fire suppression.
Coordinated with vendors for turnkey delivery and ensured full compliance with data center best practices and safety
standards.

Officer(lieutenant) in Electronic War Weapon (End user support).