Senior Network Engineer
Sonatrach Oil gas company
Total des années d'expérience :14 years, 2 Mois
Producing technical documentation including, Project Plans, High Level Designs (HLD) and Low Level
Designs (LLD)
Designing, maintaining, overseeing, implementing and upgrading security networks using the Zone and
Conduit Model to protect all sensitive Industrials control systems of a company with basic knowledge of
security standard IEC62443. Contributing to the development of cyber security strategies to make the company secure in case of a
breach or intrusion in the network system.
Implementing protective measures such as firewalling and security policy rules and Endpoint Security
Solution and implementing the tools necessary to secure and accounting the access of users in the
network ( record who has done what ) like the VLAN, ACL, NAC and creating the zones for each ICS
with a necessary target security level . Monitoring the networks using tools ( Kali Linux; Wireshark, Solarwind, Ciscoworks ….).
Knowledge of the VPN technology and tunneling protocol including GRE, IPSEC.
Remote access and Site to Site VPN administration.. Key Achievements:
Alcatel Company: deployment of VOIP Solution for Local Network +500 users and creation a Voice Vlan
with QOS configuration in IT/OT environment.
ABB Company: Design and interconnection a new substation to a campus network and set up a security
policy for IT/OT access.
Providing and enhancement the security of the critical DCS systems (real time gauging system…. …) and
maintain the high availability by keep their critical assets segmented from the most vulnerable area.
Perform network analysis, network monitoring, testing and capacity planning for organizations LAN /
WAN environment.
Work closely with Operations Team to help support remote branch operations.
Configuring, managing and troubleshooting Cisco 65xx series catalysts and 3750 and 29xx workgroup
switches and routers
Managing firewall and virtual LAN tools.
Design, implement, maintain and administer a highly scalable and resilient VoIP network.
Technical skills details:
Cisco Routers/Switches: Cisco IOS, Routers (3900, 2900), Cisco Catalyst (6500, 5500, 4900, 4500,
3000, 3100).
Connectivity & Hardware: Exchange Server, Fast Ethernet, WAN, LAN, TCP/IP, CDP, PPP, Network
Address Translation (NAT), Port Address Translation (PAT).
Routing: OSPF, RIP, RIPv2, and EIGRP.
Protocol: VTP, SNMP, SNMPv3, SMTP, ARP, TCP, UDP, Stub Routing, VLAN Trunking, Multi-Area
OSPF, VLAN, HSRP, STP, Etherchannel, BPDU, Portfast, GLBP.
Security Technologies: ACL, AAA, RADIUS, SSH, VPN, Cisco ACS, IPSec, , Port Security, MAC Address
Filtering, Cisco ASA 5500 .
VoIP/Wireless Technologies: 802.11 a/b/g/n, WLAN, WAP, AP, SSID.
Monitoring Tools/Apps:Solarwinds, Wireshark, GNS3, Packet tracer, VMware, Cisco Works, Cisco Security
Manager Suite, DNS Servers, DHCP Servers.
Key achievements:
Provided support services (active directory user, network connectivity, antivirus, deployment application)
to +500 users with windows server and virtual platform solutions.
Redistribution between RIP and OSPF Routing Protocol and maintain the VPN Site to Site as
redundancy connection in the Firewall ASA 5510.
Assigned policies by controlling who can log into the network, the privileges a user may have on the
network, and securing access through the Cisco Secure ACS and configuring AAA and explores working
with RADIUS.
Enhance a security and performance through the segmentation a LAN in to different broadcast domain
using a VTP Domain and configuring +10 Routing Vlans with providing IP address assignment and other
TCP/IP-oriented configuration information.