رفيق مراح

Directed the full scope of information system management, combining leadership of IT infrastructure, cybersecurity, and overall IT operations.
Oversaw all IT infrastructure operations, ensuring availability, performance, and scalability of enterprise systems and networks.
Managed and optimized security tools, technologies, and frameworks to protect critical assets.
Monitored compliance with internal policies, external regulations, and industry standards.
Led cross-department collaboration to identify, assess, and mitigate organizational and cybersecurity risks.
Conducted continuous audits of IT and security controls, ensuring readiness for internal and external reviews.
Designed, implemented, and maintained the Security Incident Response Program.
Delivered ongoing information security awareness training across the organization.
Developed and executed enterprise-wide IT and security strategies aligned with business objectives.
Oversaw internal and third-party IT/security audits, ensuring effective remediation.
Managed and mentored IT and security team members, providing strategic direction and operational oversight.
Assessed and improved technology architecture, implementing upgrades and modernization initiatives.
Planned and led major infrastructure and security technology projects from design to implementation.
Acted as Interim IT Manager, supervising IT operations, vendor relations, budget management, and service delivery.

Assisted the IT Manager in strategic planning, budgeting, and vendor negotiations, ensuring alignment of IT initiatives with business objectives.
Acted as second-in-command during the IT Manager’s absence, overseeing daily IT operations and team coordination.
Led and supervised IT staff in network, systems, and security projects, ensuring tasks were delivered on time and met quality standards.
Designed and optimized Cisco switching & routing infrastructure (VLANs, VTP, STP, Layer 2 security, EtherChannel), improving network stability and reducing downtime incidents by 30%.
Deployed and maintained Aruba wireless networks and VoIP/IPBX systems, enhancing communication reliability across the organization.
Implemented proactive network monitoring with Centreon, Nagios, Zabbix, reducing critical outages by 25% through early detection.
Strengthened perimeter security with Sophos XG firewalls, endpoint & mobile protection (Sophos Central, Sophos Mobile, Email Gateway), cutting malware incidents significantly.
Improved remote access reliability by deploying high-availability VPNs (remote user & site-to-site), achieving 99.9% uptime.
Conducted vulnerability & risk assessments, penetration tests (Metasploit, Kali tools), and network scans (Nmap, Masscan), reducing exploitable vulnerabilities by 40%.
Enhanced incident detection and response with SIEM platforms (Security Onion, Snort), reducing response time by 35%.
Secured Windows Server environments (AD DS, AD RMS, AD FS, WSUS, WDS, Data Deduplication) with advanced Group Policy, gMSA, and NPS configurations.
Automated repetitive admin tasks via PowerShell, reducing manual workload by 20%.
Managed Microsoft Exchange and SharePoint systems, ensuring high availability and disaster recovery readiness.
Administered SQL Server databases and Linux servers for optimized performance.
Designed and implemented Veeam Backup & Replication strategies, achieving near-zero RPO/RTO for business-critical workloads.
Maintained Microsoft Failover Clustering and Hyper-V virtualization (VM provisioning, clustering) to ensure service continuity.
Developed IT policies, SOPs, and security documentation to standardize operations and ensure compliance.

Administered and maintained Active Directory accounts, groups, permissions, and organizational units.
Managed and troubleshooted Microsoft Exchange Server, ensuring email service availability and security.
Monitored server health and resource usage, ensuring optimal performance and uptime.
Oversaw network monitoring using Centreon, enabling proactive issue detection and resolution.
Maintained network infrastructure, including LAN switches, wireless networks, DSL, and Ethernet links.
Administered Sophos Firewall and endpoint security, ensuring system health, updates, and policy compliance.
Implemented and enforced network and security policies to strengthen infrastructure protection.
planned and executed backup strategies using Veritas Backup Exec, ensuring data recovery readiness.

Provided end-user technical support for hardware, software, and network-related issues, ensuring minimal downtime.
Installed, configured, and troubleshooted operating systems (Windows, Linux) and business applications.
Assisted in network installation (cabling, switches, access points, and basic configuration).
Performed network troubleshooting to resolve connectivity and performance issues.
Maintained and updated IT asset inventory for workstations, peripherals, and licenses.
Supported printer, scanner, and peripheral installation and maintenance.
Performed basic server and Active Directory account management (password resets, user account creation).
Assisted in backup execution and data restoration under supervision.
Documented support requests, resolutions, and recurring issues for future reference.