Amine Alami Aroussi

• As an expert, defining technical solutions adapted to client needs

• Defining pre-sales proposals in terms of architecture

• Validating the group's technical solutions and their feasibility

• Analyzing the impact of proposed technical solutions with detailed timeline and interruption duration definition

• Participating in all project phases (deployment, validation, acceptance)

• Writing and updating repositories and network diagrams

• Writing the DIP for infrastructure changes such as: Datacenter Transformation, Firewall Transformation (Hardware upgrade, Hardware downsizing, Vendor change, etc.), Network Redesign, Firewall Upgrades (Check Point, Palo Alto, Fortigate)

• Deploying and administering physical and virtual Firewalls (Check Point, Palo Alto, Fortigate)

• Deploying and configuring security services (IPS, IDS, AV, QOS)

• Deploying Fortigate, PaloAlto Firewalls on AWS

• Configuring routing on AWS (Transit Gateway, routing table, attachment, etc.)

• Configuring IPSEC VPN on AWS

• Writing technical procedures for operations teams

• Performing critical operations during off-peak hours

• Level 3 Support

• Firewall Troubleshooting

• Opening and tracking incident tickets with vendors

• Technical lead on Check Point, Palo Alto, and Fortigate technologies

• Monitoring the information system's vulnerability level and implementing corrections

• Practicing English in an ENGIE International context

• Monitoring and executing projects such as: Provider-1, Firewall, and VSX upgrades to R77.20

• Checkpoint Firewall transformation plan to Fortigate Firewall

• Redesign of BNP subsidiaries interconnection

• Migration of CARDIF VPNs to the WIN infrastructure

• Outsourcing of BP2I Network activity to Orange

• Setting up complex VPNs with various BNP subsidiaries worldwide

• Optimizing Firewall security policies

• Creating, Moving DMZs

• User migration

• Optimizing the BNP Firewall fleet in VSX

• Contributing to the development of technical engineering documents and installation procedures.

• On-call duty for critical operations.

• Conducting technical and functional conference calls (mainly in English).

• Configuring Check Point, Fortigate, Palo Alto, Netscreen Firewalls

• Managing remote access profiles

• Processing DDoS alerts

• Implementing and configuring Intrusion Prevention System

Skills developed: Security Engineering, Project Management, Fortigate, Palo Alto, Netscreen, Tipping Point

• Audit and consulting activities on network and security architectures.

• Optimizing and redesigning security rules on Check Point and CSM (Cisco Security Manager)

• Implementing necessary transformations to achieve targeted operational gains, without impacting production

• Identifying and proposing transformation projects that guarantee operational gains

• Coordinating and partially or fully executing projects until their operational implementation

• Minimizing the involvement and impact on production resources

• Managing the implementation and monitoring of the global transformation strategy (technical and non-technical)

• Managing scope evolutions

• Improving the security level of infrastructures through better control

• Simplifying and securing demand management and incident processing activities

• Writing detailed engineering documents:

• Writing DID, DIS MOD + VSR specifications

• Operating and administering network and security infrastructures

• Coordinating field teams during on-site operations

• Creating test environments for critical operations

• Studying and creating security policies

• Installing and configuring Nokia Firewalls as well as the Check Point layer

• Upgrading Nokia Firewalls and UTMs

• Migrating and upgrading security policies from version N to N+1

• Configuring CMA under Provider-1

• Configuring Check Point VPN and SSL VPN

• Installing and configuring Check Point VSX architecture

• Updating and Upgrading Check Point licenses

• Providing Check Point support for Build, SmallBuild, and Integration teams

• Configuring BIG-IP LTM

• Configuring Juniper SA6000

• Configuring and creating supervision graphs using IPANEMA active probes

• Optimizing and compressing data (QOS) using IPANEMA active probes